Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E79456C0B05F11F1995A64E1CE1D38B0.roa
File:                     E79456C0B05F11F1995A64E1CE1D38B0.roa (raw, json)
Hash identifier:          C+ZunxOHSEAy1QjssqgI7hawB257vKKFvcu8eG6hb7k=
Subject key identifier:   22:B0:3A:44:4D:AE:AB:4A:94:53:81:FE:72:06:FD:23:EF:56:35:75
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E79456C0B05F11F1995A64E1CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 17:15:38 +0000
ROA not before:           Mon 14 Sep 2026 17:15:34 +0000
ROA not after:            Sun 14 Mar 2027 17:15:34 +0000
asID:                     328608
IP address blocks:        45.205.72.0/24 maxlen: 24
                          45.205.74.0/24 maxlen: 24
                          45.205.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120312 (0x1d5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 14 17:15:34 2026 GMT
            Not After : Mar 14 17:15:34 2027 GMT
        Subject: CN=6aa82bba-1f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:62:9a:eb:7b:6f:c9:ca:2b:1c:cb:4a:9b:
                    2f:8f:73:8f:d8:a2:52:6b:f2:7b:62:0d:fa:6f:a8:
                    a1:e3:80:1b:ab:1a:4b:f2:04:a7:58:f6:b6:7d:50:
                    c1:41:7a:79:2f:4f:5a:af:f8:ee:74:89:65:87:4f:
                    fc:74:5a:17:63:34:1f:69:98:c5:9d:57:fe:33:19:
                    01:99:80:24:26:0d:bd:be:2c:8b:c0:29:2b:af:35:
                    d5:a3:f8:09:1d:a3:cd:0f:e3:77:61:97:d8:77:2b:
                    6e:39:32:43:05:5d:d9:3c:7b:7c:5e:ff:fb:d4:11:
                    be:ee:d8:5c:90:99:21:fc:8d:00:77:83:88:16:f8:
                    53:3b:27:6b:28:58:fe:97:21:c9:1e:ed:b1:87:04:
                    ac:09:00:58:d6:4d:9e:d4:af:67:35:54:ef:0d:0e:
                    94:26:ce:dc:54:79:0b:6f:a7:02:7a:31:b7:05:14:
                    f5:b0:99:c7:fb:b2:f2:7e:26:f9:4e:bb:f7:ec:ab:
                    a5:d2:9a:01:35:ca:14:f1:e2:83:0d:ff:6f:c6:8f:
                    5b:15:ed:06:47:af:94:95:a6:23:2d:e4:16:b6:15:
                    cf:00:6e:a4:5c:50:80:d4:43:17:80:6e:33:af:21:
                    95:6e:ac:d2:76:2a:ca:84:14:03:1e:2d:c6:e3:4d:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B0:3A:44:4D:AE:AB:4A:94:53:81:FE:72:06:FD:23:EF:56:35:75
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E79456C0B05F11F1995A64E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.72.0/24
                  45.205.74.0/24
                  45.205.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:bf:b4:09:6e:27:b9:0e:f0:12:a8:1f:b6:2c:79:a7:ca:
         75:82:d4:e7:b1:bd:6a:bb:fc:61:d2:1b:41:de:77:47:bd:bd:
         bd:94:1f:b8:8c:99:8d:14:65:b3:ed:3c:47:08:b0:ea:35:54:
         8a:d3:51:b7:99:9f:fe:d6:96:7c:45:10:24:3d:27:11:23:1a:
         c7:18:ab:72:9f:ad:55:a4:0e:f0:b8:d6:53:32:76:9c:35:94:
         d1:58:a9:b8:2d:3a:2a:25:e5:d6:9e:8f:b3:7e:9d:70:2b:87:
         0c:21:b9:b8:e5:87:02:09:25:a8:ed:e2:67:8e:db:2a:04:be:
         72:68:87:3a:2d:87:9b:55:5f:a2:ad:df:af:73:2b:9c:cd:53:
         e8:e9:e0:e3:40:ec:f5:54:a4:d6:90:27:a6:75:5e:ea:37:50:
         46:d4:db:51:94:c5:74:ec:d6:40:ac:ab:7c:05:87:aa:3e:19:
         6c:63:0b:7b:74:63:a0:16:1c:b1:b0:fe:7b:05:3a:4a:08:ed:
         3e:a7:cd:d2:25:aa:9a:2a:e0:c0:1b:56:92:0a:3e:fc:5f:52:
         57:dd:87:55:31:ea:d8:a1:6f:44:17:3c:61:6b:a4:a2:ae:1c:
         20:45:09:60:e0:09:68:2a:8c:44:83:08:81:8a:01:49:dd:7f:
         4a:35:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----