Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3139322e36372e33342e302f32342d3234203d3e20323130363637.roa
File:                     3139322e36372e33342e302f32342d3234203d3e20323130363637.roa (raw, json)
Hash identifier:          6+1c9CwpmrH2ikPcWDmEU/uWDRA3YdMjVPYykUEvkSQ=
Subject key identifier:   EC:39:1F:7C:33:17:BF:39:33:48:12:19:5A:71:E1:FA:FF:7C:B8:61
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       52CB41F42DF36613EE4B19251DF49F51EF2B3A8A
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3139322e36372e33342e302f32342d3234203d3e20323130363637.roa
Signing time:             Wed 28 May 2025 22:40:45 +0000
ROA not before:           Wed 28 May 2025 22:35:45 +0000
ROA not after:            Wed 27 May 2026 22:40:45 +0000
asID:                     210667
IP address blocks:        192.67.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 21:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cb:41:f4:2d:f3:66:13:ee:4b:19:25:1d:f4:9f:51:ef:2b:3a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: May 28 22:35:45 2025 GMT
            Not After : May 27 22:40:45 2026 GMT
        Subject: CN=EC391F7C3317BF39334812195A71E1FAFF7CB861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:e4:24:f5:6e:2b:36:49:22:eb:27:44:5f:
                    d7:20:0f:45:b5:fb:8c:6c:c5:6e:31:a7:a1:11:32:
                    35:93:0c:6d:44:3e:27:2e:60:05:21:7c:fc:25:2d:
                    97:71:d2:f5:9a:0e:85:fb:5d:68:b1:77:c4:5f:fe:
                    9a:8a:d5:0d:46:15:d4:e1:d1:03:26:98:6e:12:35:
                    8f:1d:da:03:1b:94:77:1e:af:7e:70:98:2b:89:21:
                    2b:e1:32:2a:a2:24:d9:03:c5:73:b6:ea:44:4d:c7:
                    9e:6b:ee:7c:36:e1:45:eb:f0:15:cd:8f:47:b2:88:
                    7a:f2:5b:13:b5:28:cb:a2:94:f1:50:f5:c2:51:f0:
                    b9:ef:5d:83:9d:92:fb:76:04:70:ca:6d:90:4f:f5:
                    a0:e8:87:c2:cf:53:ac:9e:59:50:1d:a8:10:88:4d:
                    b8:f4:ff:b1:ab:5c:99:54:67:27:31:8d:fe:c1:97:
                    34:ce:a1:54:70:8d:1e:5a:e9:2e:cc:0c:16:c8:e0:
                    9f:c5:a4:10:9b:f0:0b:7e:76:08:4a:0a:c3:6b:8f:
                    bd:46:c1:4c:18:1f:e0:3b:63:6c:85:af:15:e0:cf:
                    ab:8f:43:b5:91:1d:61:f4:29:77:cb:45:48:60:51:
                    dd:a5:ed:61:3c:f6:59:99:44:49:bb:6d:ce:71:da:
                    31:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:39:1F:7C:33:17:BF:39:33:48:12:19:5A:71:E1:FA:FF:7C:B8:61
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3139322e36372e33342e302f32342d3234203d3e20323130363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:57:46:b1:b9:5c:d1:a6:c9:3c:eb:1b:26:52:f2:c5:36:33:
         93:ee:72:3c:35:3d:4d:0f:4a:38:c5:64:5f:62:a9:86:6f:62:
         36:37:5c:ab:9e:a9:4a:c7:2f:5d:4c:b9:86:b0:c2:c7:15:c0:
         ee:21:a1:d6:dc:2e:06:29:0a:54:1a:4a:ff:a0:06:4a:98:43:
         0f:98:8f:dd:e8:4b:7e:a3:6a:f3:d5:5a:3d:a4:ec:67:a4:e1:
         d0:66:c2:3d:aa:b3:71:d9:26:c9:53:35:d6:41:25:c8:a0:80:
         df:f7:3c:e8:4b:56:f8:a6:10:8d:c8:16:71:b1:64:25:66:d1:
         d4:67:05:79:bf:a4:3b:37:72:2f:49:4c:27:c6:5d:b3:d3:67:
         ff:4d:c5:f0:1e:16:49:f7:89:87:ec:c7:10:49:69:9f:c4:c2:
         a2:8e:d5:8e:fa:5c:4a:24:04:dc:16:80:f5:d5:58:3a:af:7a:
         c0:a4:bf:d6:43:e3:eb:e0:85:c9:4d:bb:3a:70:96:83:7a:44:
         96:ba:c2:b8:29:86:d9:d2:de:0b:01:4a:bd:39:a8:41:f4:4d:
         5f:ec:39:cf:d5:b1:43:a4:22:53:ef:45:74:ed:9c:48:b7:01:
         e5:d2:a9:83:47:60:c7:71:e7:a3:ce:a9:cb:e9:0f:13:5a:0e:
         95:a4:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 00:01:06 2025 by rpki-client