Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa
File:                     3230342e31302e3139342e302f32342d3234203d3e203631303033.roa (raw, json)
Hash identifier:          kSQB1x8Z/Buf4Wo/a4YuBYxRS0PB/I6MPquo6NNBZJc=
Subject key identifier:   FF:9A:8C:E9:D1:AD:AD:B3:69:BA:3C:07:64:06:2A:25:6F:39:4A:52
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       45C560723B1632EBCF59E2C697CBF0DA722FCA5A
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa
Signing time:             Sun 16 Feb 2025 11:13:28 +0000
ROA not before:           Sun 16 Feb 2025 11:08:28 +0000
ROA not after:            Sun 15 Feb 2026 11:13:28 +0000
asID:                     61003
IP address blocks:        204.10.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c5:60:72:3b:16:32:eb:cf:59:e2:c6:97:cb:f0:da:72:2f:ca:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:28 2025 GMT
            Not After : Feb 15 11:13:28 2026 GMT
        Subject: CN=FF9A8CE9D1ADADB369BA3C0764062A256F394A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:5e:85:14:51:67:cb:d9:60:a7:b6:8f:c8:
                    bf:5e:53:aa:07:2a:fe:e1:95:ba:d8:81:78:41:23:
                    52:e4:8b:d9:a9:4e:ba:63:05:ea:1a:8a:85:6b:8c:
                    ae:d1:30:17:64:6a:35:59:d8:66:a5:dc:9b:2f:0f:
                    d8:4b:8b:40:5e:e2:21:ed:a6:07:ad:9a:8f:45:35:
                    0b:03:8c:08:c5:28:ad:7e:13:2e:7e:60:5a:ee:5e:
                    9a:0a:a3:64:89:09:0a:b1:b0:48:82:3a:aa:65:86:
                    c5:ea:bc:ae:c1:a9:93:17:cf:b8:49:95:6e:dc:26:
                    9f:39:ab:a3:4a:c3:2c:8e:e1:b1:0b:71:f5:78:d4:
                    a6:c8:ec:ec:1e:b2:54:b4:d4:ba:9e:35:79:64:82:
                    a3:34:ce:28:fc:35:d3:41:77:08:77:e5:a1:ee:f3:
                    0d:1d:bd:fc:ab:8f:33:01:d8:e2:8d:9b:9c:22:bf:
                    bd:fa:16:b0:03:84:64:64:c4:9c:81:81:47:5b:a4:
                    21:dc:83:3e:7b:ef:09:dd:63:8f:f1:b1:ee:a5:10:
                    f8:ca:81:10:d5:73:fd:00:89:a7:a9:51:00:3f:b7:
                    31:dd:55:1b:65:8b:7f:05:47:d8:b2:17:b3:b0:6d:
                    d5:86:51:01:26:03:c0:c1:2b:73:f4:88:c2:68:05:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9A:8C:E9:D1:AD:AD:B3:69:BA:3C:07:64:06:2A:25:6F:39:4A:52
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:25:87:95:94:16:bd:07:e7:c2:90:dc:b4:55:56:d5:f1:
         b8:11:8b:2c:0b:07:26:df:cb:ee:67:b1:eb:cf:9e:d3:2c:b8:
         b1:3b:82:05:d2:23:ce:88:90:0f:5c:72:ca:39:ca:7c:cd:4e:
         3f:ec:3d:aa:05:df:f9:49:f6:b3:88:06:f8:24:cb:9c:09:3f:
         1a:a2:3d:25:5d:3f:af:18:16:de:b6:c6:e4:ac:fe:74:70:51:
         21:51:f0:84:f2:66:fe:27:26:b8:13:21:f8:bc:4b:c6:87:1c:
         64:62:75:2d:54:70:f4:8c:65:4f:52:51:7c:8a:42:f2:01:8b:
         39:a7:01:7e:69:e1:65:8d:e3:81:25:c8:4c:ec:a4:01:d0:b8:
         6d:25:01:1c:b5:36:00:d4:f3:d6:a3:f3:1e:f4:44:18:aa:ad:
         c4:08:93:cb:42:41:a3:d6:fa:ac:4d:81:20:31:ed:b5:3e:93:
         7e:88:9b:e7:e8:fa:c1:04:a3:64:26:dc:df:11:57:22:7e:4b:
         d1:ea:43:d0:94:a9:e9:0d:92:41:8c:e9:8c:c8:c7:5d:fd:11:
         b1:6b:4c:e1:e4:43:2a:35:75:61:8f:81:ea:1f:58:a6:99:ff:
         cc:1c:d4:23:c7:c7:2b:67:2b:be:59:fd:d7:e2:1d:7d:ec:62:
         b2:a1:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:17 2025 by rpki-client