Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3134392e3131322e37342e302f32342d3234203d3e2030.roa
File:                     3134392e3131322e37342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          rDTP+VD+Of6fCMXJcS9Nb8dGLCvl9mIo7QdYf4pCwMg=
Subject key identifier:   13:3A:80:2C:66:AE:1F:75:32:34:6C:B5:C3:FC:0F:E4:78:3A:10:B8
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       1FEC250FD0B00B38DB950A8680BFEABBB3351ACC
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3134392e3131322e37342e302f32342d3234203d3e2030.roa
Signing time:             Tue 12 Nov 2024 10:02:40 +0000
ROA not before:           Tue 12 Nov 2024 09:57:40 +0000
ROA not after:            Tue 11 Nov 2025 10:02:40 +0000
asID:                     0
IP address blocks:        149.112.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 05:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ec:25:0f:d0:b0:0b:38:db:95:0a:86:80:bf:ea:bb:b3:35:1a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Nov 12 09:57:40 2024 GMT
            Not After : Nov 11 10:02:40 2025 GMT
        Subject: CN=133A802C66AE1F7532346CB5C3FC0FE4783A10B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:6d:95:4a:d7:09:8f:b4:58:68:ca:9f:ee:
                    c2:e0:dd:e4:70:2e:f7:d6:94:dd:06:91:6d:e5:90:
                    1b:63:d1:e2:5e:87:c2:f3:8a:e9:79:c3:05:19:78:
                    bb:06:48:20:4c:42:9f:4e:d0:67:13:43:43:b7:f2:
                    f9:09:78:af:67:a1:c7:39:10:0a:dc:ee:88:e8:cc:
                    f7:05:6a:d0:3b:4d:7c:10:93:19:44:30:16:ea:96:
                    bc:a7:78:bc:53:69:6e:a7:20:72:7b:67:fb:d1:ba:
                    10:e6:c9:22:58:0f:79:87:0d:6d:ca:72:26:9a:16:
                    3b:b9:3f:56:b4:80:00:5b:a4:bd:95:9a:64:70:cd:
                    51:f4:3f:48:79:0a:1e:b7:fc:cf:37:d9:b8:0f:e5:
                    01:e4:70:7e:c6:ad:a5:1a:39:05:66:3f:45:fe:50:
                    e6:db:d9:ef:dd:4b:32:7a:55:07:ab:6e:45:4d:e8:
                    1e:a7:1a:b7:a3:84:67:f9:30:e1:ed:0f:65:6b:22:
                    b4:bc:81:86:a8:f7:f3:3e:f6:58:7a:29:70:82:01:
                    5a:db:e3:e1:83:e5:d2:84:e0:b3:33:e5:a6:f5:fe:
                    1e:47:ff:85:57:39:d1:80:a1:ab:01:df:8d:e9:4e:
                    34:76:88:57:f4:26:48:16:23:1b:47:3b:a9:2b:69:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3A:80:2C:66:AE:1F:75:32:34:6C:B5:C3:FC:0F:E4:78:3A:10:B8
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3134392e3131322e37342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e0:e6:43:29:4b:3b:e7:64:8e:ad:d4:2c:22:bf:79:53:7b:
         02:c4:df:c2:18:8a:3c:17:01:00:b7:0a:7c:bc:c9:98:01:25:
         2f:eb:eb:f0:86:47:0c:e3:15:c8:ea:e8:6c:fc:90:26:6e:f6:
         27:73:02:ff:0b:c0:81:91:91:00:21:7d:19:fd:75:fe:13:c5:
         ef:23:10:18:00:51:b4:96:da:ac:5d:96:f4:04:45:e2:bb:b5:
         3f:76:6c:57:81:11:45:08:be:00:ef:c2:a7:3c:dc:65:46:dc:
         bf:cb:a8:e6:7a:6b:95:13:56:f0:ff:99:01:03:64:31:98:6f:
         d7:de:03:24:46:4b:13:0e:04:9d:bc:ae:c5:53:f2:dd:a2:fd:
         ea:3c:0e:b4:31:08:f0:85:c6:2b:76:34:d3:ab:c0:31:1b:52:
         d7:1a:6f:0f:58:8b:b0:db:9b:a5:2b:af:ac:01:43:e5:60:c7:
         25:98:e0:c6:57:5e:68:ae:db:70:67:43:9c:e7:9a:54:c3:15:
         f2:ba:55:a8:8b:38:41:2b:3f:b7:89:c3:d2:68:6f:c0:80:7b:
         f5:01:2c:64:33:36:27:ce:c8:2e:76:03:de:53:ad:71:6b:46:
         be:3e:d8:3a:dd:c2:1a:3c:e5:fe:a4:48:a4:9b:73:3f:eb:31:
         35:3f:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:31 2024 by rpki-client on console-ams.rpki-client.org