Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3139322e36372e33342e302f32342d3234203d3e20323130363637.roa
File:                     3139322e36372e33342e302f32342d3234203d3e20323130363637.roa (raw, json)
Hash identifier:          c7NYq8YSGP0GojyCQ5bJEJsttXGBfejzub58DCz/MHM=
Subject key identifier:   9A:A7:62:D1:37:DD:D4:BE:C1:52:8E:AA:E9:9D:BE:98:D5:DE:62:E7
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       13D82A5123F287584786A5A242B5F018BEBAC5D8
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3139322e36372e33342e302f32342d3234203d3e20323130363637.roa
Signing time:             Wed 29 Apr 2026 23:08:07 +0000
ROA not before:           Wed 29 Apr 2026 23:03:07 +0000
ROA not after:            Wed 28 Apr 2027 23:08:07 +0000
asID:                     210667
IP address blocks:        192.67.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d8:2a:51:23:f2:87:58:47:86:a5:a2:42:b5:f0:18:be:ba:c5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 29 23:03:07 2026 GMT
            Not After : Apr 28 23:08:07 2027 GMT
        Subject: CN=9AA762D137DDD4BEC1528EAAE99DBE98D5DE62E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:e7:2c:9b:f5:48:b6:2d:62:c9:c4:ab:fb:
                    44:9d:a9:35:4b:10:8b:1d:be:30:84:79:46:aa:19:
                    34:a2:3f:d8:dd:5c:ae:2f:9d:bb:16:6b:94:73:f4:
                    ed:09:c2:c8:ec:16:47:d8:d5:73:cf:b9:bf:9e:b7:
                    78:fd:61:85:ec:89:db:d0:3e:7f:d6:71:02:ac:3c:
                    f7:ee:93:89:09:3a:65:da:ad:c9:ea:bc:ae:a9:7b:
                    1e:86:0b:ea:bc:fc:58:8c:4d:ec:f4:92:32:52:a1:
                    59:48:96:fb:36:7e:0e:df:08:c0:cb:e1:9d:f9:a8:
                    d2:ec:02:9d:2d:9a:24:6c:9e:bb:7b:78:81:42:2a:
                    25:9a:65:7f:e1:88:ef:d8:af:b1:f1:78:2e:73:44:
                    fb:a5:38:54:2a:3c:6c:97:18:e0:07:9c:9b:3d:02:
                    2d:ff:71:0a:4d:9b:14:c2:e7:b6:dc:93:33:66:37:
                    cd:41:b0:c0:f4:a9:46:c3:2e:e6:84:f2:af:f3:5b:
                    71:fd:bb:98:8b:a4:17:ef:f3:4b:ea:23:a4:7d:1a:
                    2c:bb:d2:f5:fc:f7:2e:1b:a5:a0:cd:95:2c:c1:b1:
                    fe:ba:d6:29:1f:5c:b6:da:f1:42:d8:39:f8:24:ec:
                    af:51:48:94:a6:d4:05:49:6a:88:6e:fc:e7:0c:3c:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A7:62:D1:37:DD:D4:BE:C1:52:8E:AA:E9:9D:BE:98:D5:DE:62:E7
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3139322e36372e33342e302f32342d3234203d3e20323130363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:05:54:70:c4:1e:7e:e0:0d:52:af:cb:ee:e2:2c:22:74:
         ba:3e:1b:43:d7:f6:51:44:6e:c5:7b:9a:88:61:cd:99:25:11:
         2e:8f:d3:49:1d:93:86:80:f5:9c:7a:d0:c7:40:76:6d:f0:de:
         f4:a6:c6:e6:2e:b7:38:94:b8:26:af:29:80:8d:6d:04:65:a4:
         fa:df:73:08:d7:a6:d3:69:95:c8:f8:eb:ed:ca:04:92:ff:59:
         ce:1a:4b:cf:8f:dc:f4:7a:89:1b:3c:80:03:8f:a6:9a:79:9a:
         a9:93:62:f8:2a:4f:a9:6b:c4:e8:eb:a0:80:e0:8a:db:19:e5:
         37:6c:a7:af:d8:9e:03:17:39:2f:84:89:06:31:49:77:d9:07:
         0c:9d:62:7f:71:5b:3d:a2:68:51:a8:46:d2:1b:fa:75:9a:ee:
         88:f9:e0:a4:00:7c:ca:1b:28:cf:62:9e:a4:12:ac:6d:31:ba:
         55:b0:bc:76:1c:43:a5:7d:e0:1c:4f:c0:45:d3:43:99:4a:80:
         fa:c2:e9:a6:f7:57:63:3b:2c:c3:4b:05:5d:b0:46:15:f6:e3:
         1c:9f:16:08:39:da:41:9f:35:05:22:a0:45:ec:ed:9a:0b:de:
         db:e2:5e:f0:2f:f3:d8:44:37:8b:10:29:6c:f5:c9:38:f2:f2:
         e0:35:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 10:29:02 2026 by rpki-client