Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E035DBBA3F1711F1BE8E76ECCE1D38B0.roa
File:                     E035DBBA3F1711F1BE8E76ECCE1D38B0.roa (raw, json)
Hash identifier:          hFxxbiAjswgmU65aeooosz1RtqwJUM+yErA+xZb4IRk=
Subject key identifier:   EB:3F:9B:4D:3F:28:88:CD:A1:42:2A:B8:46:23:B6:4E:4C:82:29:8D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AEBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E035DBBA3F1711F1BE8E76ECCE1D38B0.roa
Signing time:             Thu 23 Apr 2026 13:25:21 +0000
ROA not before:           Thu 23 Apr 2026 13:25:16 +0000
ROA not after:            Thu 28 May 2026 13:25:16 +0000
asID:                     202656
IP address blocks:        45.199.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110267 (0x1aebb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 23 13:25:16 2026 GMT
            Not After : May 28 13:25:16 2026 GMT
        Subject: CN=69ea1dc1-8505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:2f:69:e1:bb:8d:40:f6:b6:72:cb:33:87:
                    46:a5:eb:2f:d5:54:b9:b5:9a:08:ad:d0:4e:d6:12:
                    58:44:ee:70:99:d0:f8:d1:f2:94:34:92:b6:60:b2:
                    98:a3:f4:9d:7a:2e:11:f9:ef:83:01:7f:3a:a0:ff:
                    25:f1:6f:92:c7:dd:2d:45:17:56:c1:7c:5b:29:56:
                    8f:54:10:f7:66:b7:e6:c0:c6:ab:e1:79:7e:09:f8:
                    4e:36:df:03:cf:71:af:75:15:33:12:43:d7:02:33:
                    19:bd:7a:cc:d5:8f:db:88:6a:64:02:62:71:45:1d:
                    5a:4b:ae:78:76:e1:3d:43:80:ad:5f:1a:99:50:a3:
                    8f:db:88:7a:d0:07:35:53:db:96:52:7f:be:3d:7e:
                    86:31:c0:54:a5:d5:0b:49:b7:5e:87:45:b7:ed:e7:
                    05:cf:34:d4:f3:72:92:9f:0a:c1:e6:b9:bd:27:12:
                    e9:96:ad:e3:e5:4d:51:d9:1a:6e:e7:98:a4:b9:24:
                    b7:71:ea:d8:be:e6:d3:65:93:8a:0e:30:12:79:57:
                    f0:80:c5:e1:66:73:52:dc:1d:20:77:72:b5:65:07:
                    45:3f:7e:cc:6e:1c:eb:b4:63:05:b9:0d:79:64:47:
                    4c:10:05:3f:00:59:29:54:53:0b:9f:31:26:58:67:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3F:9B:4D:3F:28:88:CD:A1:42:2A:B8:46:23:B6:4E:4C:82:29:8D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E035DBBA3F1711F1BE8E76ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:5b:16:43:de:cc:bc:56:52:a1:8e:18:5c:e4:3b:dd:d7:3b:
         1a:5c:ca:e4:4a:84:9f:ed:3f:f7:d4:86:f6:74:c4:81:da:c1:
         52:d5:b4:8e:55:15:2d:3a:59:c1:ff:6d:8d:15:cb:e9:b0:7c:
         1b:eb:b3:e1:10:80:f6:6c:b8:4a:3c:6b:a6:48:d8:20:72:7b:
         c4:0a:4a:aa:e1:ed:f6:a2:57:40:27:02:a7:e3:31:62:f5:3c:
         c9:b8:0c:6a:78:30:2c:e9:09:10:f5:be:3d:f1:87:42:d4:de:
         42:75:27:d8:43:b1:77:77:d2:47:64:e6:07:7d:65:0a:7c:54:
         24:00:cb:e0:7c:93:89:72:45:83:2d:79:51:32:a7:8c:43:5b:
         0b:93:db:e2:e3:de:2e:a3:56:c0:f5:96:67:04:e2:77:00:a8:
         f0:61:e5:a0:e3:00:47:6f:d1:ea:e1:50:02:ab:86:15:db:3e:
         53:2b:ce:d5:7f:5b:59:09:8e:7b:95:a8:f2:89:b2:cc:b0:bd:
         d9:3e:b5:d4:50:4b:64:bf:89:45:7e:1a:b9:54:42:85:e1:95:
         c4:17:df:70:ed:38:a9:d3:2d:10:d3:f5:dc:8a:ee:2d:8f:7a:
         4a:0a:e5:dd:81:89:d6:8c:f7:42:65:c0:b6:3c:bc:fb:0d:5d:
         e6:a9:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:47 2026 by rpki-client