Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139322e302f32342d3234203d3e203330363434.roa
File:                     3230342e31302e3139322e302f32342d3234203d3e203330363434.roa (raw, json)
Hash identifier:          77ql0WD1G6KqO1+xyFazUxS/eiNA3yyydybpnCtkALc=
Subject key identifier:   D8:84:FE:CC:AB:1F:7B:9A:2C:CB:93:07:D5:65:BC:DE:30:5A:8B:01
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       6DF64C67C3DA60FA09126B88023C43CE8757EE9F
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139322e302f32342d3234203d3e203330363434.roa
Signing time:             Sun 16 Feb 2025 11:13:29 +0000
ROA not before:           Sun 16 Feb 2025 11:08:29 +0000
ROA not after:            Sun 15 Feb 2026 11:13:29 +0000
asID:                     30644
IP address blocks:        204.10.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 23:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f6:4c:67:c3:da:60:fa:09:12:6b:88:02:3c:43:ce:87:57:ee:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:29 2025 GMT
            Not After : Feb 15 11:13:29 2026 GMT
        Subject: CN=D884FECCAB1F7B9A2CCB9307D565BCDE305A8B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bd:67:aa:21:bf:84:e5:34:27:a2:4d:46:3a:
                    11:cd:32:40:e5:fd:b3:9a:ff:a7:23:5f:9d:11:84:
                    14:f3:e2:ee:bf:1f:fc:83:73:95:e4:9f:1f:f4:6e:
                    68:ed:24:88:5a:10:fb:8a:a3:42:64:c8:5f:cc:38:
                    5d:7a:cd:63:d5:a9:bc:0a:4c:4b:75:48:a0:fc:5e:
                    e5:15:6b:31:18:36:75:8a:4d:7d:73:ea:49:96:67:
                    b8:96:32:d8:6f:e7:1a:8e:bf:53:3d:ef:9b:93:b2:
                    43:10:b6:3b:49:13:8d:02:1c:85:19:cf:5f:f7:cc:
                    54:f6:bf:47:4f:03:0b:27:5e:04:e3:20:5c:1b:18:
                    b7:66:6e:cf:b4:08:ba:1a:19:f1:b2:13:e4:80:b2:
                    c9:bb:51:dd:67:32:82:a9:bd:f2:86:c7:9e:5b:92:
                    54:3e:7b:b4:33:cc:73:20:9a:f7:cd:a4:a2:fc:a3:
                    50:c0:7e:c5:f1:2b:3d:0d:b3:ac:19:20:e5:6d:ec:
                    8c:fd:09:56:18:87:2b:63:e1:a6:2d:3d:d8:1e:50:
                    d4:d2:b6:b5:26:f1:ee:40:4c:e6:64:a3:0f:46:64:
                    1f:bc:8c:d2:57:a9:92:2b:d2:2f:54:e8:16:69:d9:
                    1d:0f:0e:c5:ec:d8:b9:30:00:b7:f8:ea:1d:25:ae:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:84:FE:CC:AB:1F:7B:9A:2C:CB:93:07:D5:65:BC:DE:30:5A:8B:01
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139322e302f32342d3234203d3e203330363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:57:34:6b:fb:f3:bf:8a:a6:37:c4:0d:6e:fe:45:4d:4f:31:
         7f:68:b2:1d:a6:26:ce:ca:fa:7c:ba:bf:a1:c2:fa:81:05:20:
         fd:ba:6a:7f:60:2c:5c:ef:9b:fd:9e:62:df:79:32:35:3f:5d:
         66:51:eb:c6:7f:53:6e:79:09:60:10:34:ee:e6:f9:ea:39:29:
         4d:33:26:01:70:17:53:a8:d6:1b:12:d4:5c:37:de:6f:2a:11:
         f8:a9:b7:8c:60:2a:61:5a:f7:3e:41:95:95:73:6a:4a:62:55:
         e3:19:fe:ec:93:22:92:39:2c:7a:5d:48:43:e2:65:a0:c3:51:
         70:3e:a0:e3:40:1b:eb:ae:78:71:e3:6b:ed:bc:04:2e:1a:19:
         bc:3d:c0:ea:7b:1f:a7:aa:e9:bb:a3:26:bb:83:38:fa:65:f6:
         c9:d2:33:9c:df:43:a1:af:11:e4:ef:cc:95:6b:cd:f6:f4:a0:
         c7:14:7e:5e:f5:bc:b7:28:31:5f:86:fc:04:fe:6d:e8:7e:04:
         f8:80:33:79:34:3e:4c:70:a2:67:63:4c:7b:a7:0a:88:78:13:
         f0:97:7f:80:dd:34:e9:5c:f3:9e:75:7a:60:ff:52:0e:41:79:
         71:80:e9:76:20:f4:54:0d:65:08:71:dd:49:38:7d:97:06:40:
         63:63:e6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:53:51 2025 by rpki-client