Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139352e302f32342d3234203d3e20323037363030.roa
File:                     3230342e31302e3139352e302f32342d3234203d3e20323037363030.roa (raw, json)
Hash identifier:          qcZjuoz0XtvlF6HrNPhCMoPOq3b4zSaNNP8ni8JRS80=
Subject key identifier:   21:C9:DC:26:89:70:DB:68:DA:4C:6A:05:E6:76:58:2E:E5:3A:5A:7D
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       4DA4EA52C7FA26501B7B418F2A09D01959442849
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139352e302f32342d3234203d3e20323037363030.roa
Signing time:             Sun 17 Mar 2024 10:27:22 +0000
ROA not before:           Sun 17 Mar 2024 10:22:22 +0000
ROA not after:            Sun 16 Mar 2025 10:27:22 +0000
asID:                     207600
IP address blocks:        204.10.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a4:ea:52:c7:fa:26:50:1b:7b:41:8f:2a:09:d0:19:59:44:28:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:22 2024 GMT
            Not After : Mar 16 10:27:22 2025 GMT
        Subject: CN=21C9DC268970DB68DA4C6A05E676582EE53A5A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:b7:fb:1c:a2:e4:00:5d:ae:d9:7f:82:45:
                    7e:a6:26:ca:2e:24:83:8f:70:dc:be:55:2e:2d:59:
                    53:b2:57:17:22:55:73:41:99:61:a3:48:e8:07:e8:
                    e2:72:ec:15:15:ae:f0:37:af:7f:f2:6d:26:b7:ea:
                    08:81:ff:f3:d7:1c:f4:3a:34:dd:33:dd:fc:94:73:
                    3a:6c:70:d0:b3:3b:df:a0:30:ab:95:64:6e:14:86:
                    63:4c:08:fa:06:08:f2:75:65:69:28:8d:cb:34:69:
                    fc:92:a7:c8:3e:cb:db:0e:c0:41:8e:5f:69:52:a2:
                    07:af:06:4d:3e:02:c4:a1:95:cf:ac:bb:c9:f9:6f:
                    f1:5f:f9:6e:5e:57:77:1b:2d:72:e9:de:ef:d3:91:
                    95:a7:a5:2b:38:0f:b0:ce:f9:c1:3d:7b:68:7a:f5:
                    58:38:4f:6b:09:02:32:07:55:77:1d:5a:a4:65:ed:
                    ea:dc:77:2a:5b:54:0a:b7:7d:45:3e:1e:7c:84:c0:
                    27:d3:15:be:6c:50:c6:eb:21:11:c2:ad:0f:00:ab:
                    a1:f6:2f:04:92:ef:12:39:fc:ea:67:34:09:8e:fb:
                    01:6c:ed:9f:ca:16:67:00:30:67:6d:8f:7b:74:51:
                    dd:be:39:1a:8c:a4:94:84:8b:e2:ac:f6:3d:a2:fc:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:DC:26:89:70:DB:68:DA:4C:6A:05:E6:76:58:2E:E5:3A:5A:7D
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139352e302f32342d3234203d3e20323037363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:df:46:d2:e9:48:5e:3b:b5:95:9f:0a:41:18:88:09:ff:aa:
         0c:51:05:03:0f:e7:f4:40:59:1d:8b:06:41:41:1f:0f:91:ea:
         c8:d9:c2:56:63:46:14:23:74:5d:e7:89:22:9a:e8:e5:ea:98:
         61:27:49:40:47:be:81:e1:a4:3b:2a:ca:12:11:6a:38:e5:9b:
         48:42:d8:07:57:97:a1:2c:2b:4b:e5:2f:8b:b0:c8:51:be:c3:
         91:de:ac:36:58:cd:eb:e4:0c:ff:c5:41:15:00:2b:f6:ae:66:
         72:98:18:2a:5c:73:ce:8a:f2:b1:8c:f1:7b:24:2a:ce:e4:ee:
         0f:f5:e1:dc:35:90:49:e1:b0:18:52:33:71:a1:3e:c6:41:aa:
         0d:cf:2b:da:fc:f7:54:14:72:9a:6a:c5:5a:21:a6:4f:2f:fa:
         66:dc:68:83:31:6f:5a:37:b8:03:aa:61:32:2a:40:30:94:c2:
         35:f7:d7:11:38:bc:59:b7:0d:e2:a6:3f:d8:43:2e:17:aa:38:
         59:f3:50:47:4b:4f:23:3d:e0:07:5e:8f:18:7c:f0:f6:66:f3:
         58:3e:1b:6e:40:51:4c:e9:1d:5d:d4:0f:bf:28:2d:88:07:b4:
         26:f1:e2:66:54:c2:71:1a:75:af:55:bf:08:ce:d8:a5:95:58:
         07:13:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:33:28 2024 by rpki-client on console-fra.rpki-client.org