Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e203438393235.roa
File:                     3230342e31302e3139332e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier:          NYi4nRZtTuUQTzBTc7bGy45jwvZzEPsYgqu8XLBTAac=
Subject key identifier:   AA:AF:6F:B1:8C:62:CF:69:DC:B0:D5:D1:BC:D3:66:F5:AB:0E:47:91
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       1DACF95A3B0C26572EFC51CF7CEC9B495EFC539A
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e203438393235.roa
Signing time:             Fri 06 Jun 2025 15:40:46 +0000
ROA not before:           Fri 06 Jun 2025 15:35:46 +0000
ROA not after:            Fri 05 Jun 2026 15:40:46 +0000
asID:                     48925
IP address blocks:        204.10.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ac:f9:5a:3b:0c:26:57:2e:fc:51:cf:7c:ec:9b:49:5e:fc:53:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jun  6 15:35:46 2025 GMT
            Not After : Jun  5 15:40:46 2026 GMT
        Subject: CN=AAAF6FB18C62CF69DCB0D5D1BCD366F5AB0E4791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:80:1e:c7:d1:90:21:bb:7d:ef:5b:64:d6:
                    49:cf:68:b7:2b:6b:0d:3d:60:f5:af:6c:6d:9d:0e:
                    12:46:b0:d8:67:a2:bd:ae:01:88:de:0d:12:17:bb:
                    43:89:75:da:2f:25:5d:e2:22:01:db:34:4a:85:5f:
                    fd:51:03:63:b3:0f:6c:19:28:9f:2c:c6:06:1d:1a:
                    92:c0:28:62:4c:0b:cc:99:69:5a:71:44:91:20:0e:
                    b3:da:3c:00:1b:fb:9e:6c:f9:48:47:60:ef:48:af:
                    37:a5:ec:63:7e:c4:e9:68:da:95:08:76:cb:83:1a:
                    a1:a8:f2:ef:58:85:15:cf:19:e7:46:d7:01:36:bf:
                    92:9e:6a:1e:b4:75:01:b8:d7:ad:a6:ee:90:cf:b0:
                    57:90:82:c8:92:07:f3:e6:62:41:85:f6:20:be:fc:
                    2c:e0:91:a6:56:55:43:d3:55:2e:c6:de:dc:92:d8:
                    96:65:a5:ae:be:1a:6a:e1:0a:61:5a:0c:40:ec:83:
                    7e:90:ab:42:ed:ca:64:b5:8c:81:94:5d:41:c2:83:
                    73:73:76:b3:7d:43:03:6c:4f:47:99:07:4b:39:a3:
                    84:76:c1:a6:3c:d2:ae:7c:18:d2:5b:a0:b2:5a:15:
                    1f:38:45:93:82:eb:5f:05:98:96:90:6a:01:55:ff:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:6F:B1:8C:62:CF:69:DC:B0:D5:D1:BC:D3:66:F5:AB:0E:47:91
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e203438393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:88:d3:a4:1d:e9:4f:fd:79:b5:c2:3b:eb:c0:63:43:00:8e:
         fe:c5:a4:04:b2:1f:39:56:b3:08:5c:d5:79:0c:47:44:0f:21:
         02:6a:4f:4e:5b:c0:53:29:db:40:42:ee:44:7b:3c:21:e0:75:
         cd:e4:92:58:4e:25:b8:ab:aa:d5:36:d2:00:f1:54:43:b8:40:
         47:4e:9d:f9:df:24:6f:b7:64:84:1d:e4:b5:71:3e:49:d0:d4:
         9b:29:dd:54:c9:16:03:88:17:69:4d:f2:11:58:38:ea:a3:6d:
         f2:fc:77:ef:b4:a9:91:5c:44:e2:d7:f6:a2:0b:11:04:47:dc:
         14:a7:17:1d:12:93:c5:cf:44:56:7f:b8:6f:55:ee:22:b5:85:
         c2:0d:ae:bc:02:45:4e:1d:ad:c1:bb:18:cc:14:0e:9d:7b:62:
         06:25:30:43:be:74:fd:ad:d7:d0:64:11:ac:70:df:36:ed:3c:
         4d:c8:c6:49:34:d4:e8:bb:27:a5:c6:a5:fb:f5:57:8c:43:21:
         8b:05:03:4d:17:2f:c6:a6:09:7c:94:9e:0a:68:e0:df:6c:17:
         e3:fc:6b:bc:30:37:1d:11:51:2a:60:be:c4:04:70:15:e4:d4:
         b0:4e:0c:1a:e6:87:ee:d1:e4:17:c7:8e:47:4f:29:4e:fc:54:
         17:1d:48:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:08 2025 by rpki-client