Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa
File:                     3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa (raw, json)
Hash identifier:          v10sb95qg2u8k0qdKAa71CxU4V6XUEpcgChSgUcC6PY=
Subject key identifier:   48:41:49:66:F4:96:41:8C:41:0E:41:52:C6:78:79:B8:7C:09:86:19
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       1F6FB7B2060B49EF6339A4D46144473316BEE0EB
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa
Signing time:             Sun 17 Mar 2024 10:27:21 +0000
ROA not before:           Sun 17 Mar 2024 10:22:21 +0000
ROA not after:            Sun 16 Mar 2025 10:27:21 +0000
asID:                     206216
IP address blocks:        204.10.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6f:b7:b2:06:0b:49:ef:63:39:a4:d4:61:44:47:33:16:be:e0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:21 2024 GMT
            Not After : Mar 16 10:27:21 2025 GMT
        Subject: CN=48414966F496418C410E4152C67879B87C098619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:7e:2c:54:30:95:cf:28:35:38:f7:71:b8:
                    4b:d1:e1:3a:91:83:9d:1a:1b:6b:40:86:ce:7f:3b:
                    7a:5a:09:5c:0c:76:36:69:70:6b:ab:d3:f2:5b:40:
                    2f:c2:21:22:cf:8b:d7:f8:94:94:b0:98:75:cd:a7:
                    1f:ac:a0:be:2c:04:d6:14:6d:fe:d7:19:de:4e:ff:
                    70:00:fb:b9:3a:6b:66:7c:1f:d6:c5:21:39:37:4f:
                    fc:2c:60:62:4e:7e:d8:68:04:62:22:43:32:85:f3:
                    09:1b:44:10:69:7c:5f:70:3d:29:e5:83:95:4d:c2:
                    8e:f0:fb:47:66:8a:e6:e9:a7:45:cb:bc:9b:23:30:
                    f7:41:25:79:2d:3b:f3:96:e0:3d:cb:47:c4:c6:5f:
                    19:24:22:90:4d:14:9c:35:0a:8d:bf:f2:b4:30:26:
                    f4:28:3e:12:15:98:f3:1e:02:27:cd:2d:d5:5b:d6:
                    6b:cc:2c:27:a5:e6:8a:ba:e7:52:2f:e1:c6:04:4f:
                    fd:36:d1:2d:4a:01:d0:0f:db:70:e1:b9:7b:ca:1a:
                    66:73:f0:df:ae:8e:48:29:3e:93:10:51:82:97:65:
                    ad:53:29:51:72:69:f2:b3:c3:87:b3:fa:6d:ed:6a:
                    1b:fc:9f:e9:db:31:d0:27:f2:23:c1:97:a2:d8:78:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:49:66:F4:96:41:8C:41:0E:41:52:C6:78:79:B8:7C:09:86:19
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:1c:d5:bd:70:b9:81:36:d3:00:80:bf:0f:95:52:18:4f:
         d0:66:51:11:92:cc:13:6c:2a:ad:ad:02:2e:27:f4:27:90:b7:
         2c:65:fa:45:c7:24:6f:7a:13:a7:8e:28:b5:72:b9:cd:e1:37:
         8d:93:08:12:a2:2c:38:52:af:ad:50:f1:8d:37:d1:0f:66:3f:
         64:52:51:c6:ce:27:6b:59:bb:30:55:fb:41:21:9a:61:2b:c8:
         19:cd:c2:45:ba:72:68:af:80:d8:6f:d1:e7:d4:db:a6:e1:d9:
         f0:bc:8a:0e:d1:35:1a:25:44:76:47:07:0e:5a:88:0d:42:e7:
         cc:9c:41:cd:6e:f7:b8:d9:d7:a7:43:0b:99:ee:1f:97:6a:57:
         dd:4e:6e:bb:c6:77:e6:35:8b:f1:62:0d:b5:88:51:bb:08:8e:
         27:51:4a:00:ad:37:37:8c:4e:21:54:29:d1:aa:7e:b1:c3:a9:
         2c:dc:2d:78:4d:5a:17:a5:13:7c:3c:14:e8:cd:5b:db:a0:de:
         0b:bb:60:e8:61:ff:9a:94:32:34:be:29:7a:64:6e:f9:43:de:
         b6:61:dd:6c:67:60:f8:1b:8a:ab:2a:73:0f:ba:89:db:ed:3c:
         18:69:84:58:91:01:7f:94:8e:b0:28:3e:81:34:d3:dd:10:51:
         70:e4:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 11:05:49 2024 by rpki-client on console-ams.rpki-client.org