Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133362e302f32342d3234203d3e203532323130.roa
File:                     32332e3133302e3133362e302f32342d3234203d3e203532323130.roa (raw, json)
Hash identifier:          jJxyIn2wMR63CNQq8UKTmO6FVYNWZCT6kNSsU6sryaw=
Subject key identifier:   D1:D8:31:3E:36:7D:1D:73:3A:3F:5F:70:D3:A5:04:59:D4:9B:82:26
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       710DBA1B42AE735991998052ED5BAFE729731703
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133362e302f32342d3234203d3e203532323130.roa
Signing time:             Sun 16 Apr 2023 09:53:28 +0000
ROA not before:           Sun 16 Apr 2023 09:48:28 +0000
ROA not after:            Sun 14 Apr 2024 09:53:28 +0000
asID:                     52210
IP address blocks:        23.130.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jul 2023 17:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0d:ba:1b:42:ae:73:59:91:99:80:52:ed:5b:af:e7:29:73:17:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 16 09:48:28 2023 GMT
            Not After : Apr 14 09:53:28 2024 GMT
        Subject: CN=D1D8313E367D1D733A3F5F70D3A50459D49B8226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:27:ac:3f:dd:33:91:0f:60:bd:ed:32:28:
                    a3:de:da:86:ff:d1:e1:4c:39:a7:55:4a:42:31:1a:
                    93:80:1c:5d:8f:cb:4f:61:0b:dd:7c:a3:ff:71:9d:
                    8e:2a:e4:a4:a7:63:73:17:af:9c:e2:79:e3:39:85:
                    05:9f:3c:e2:09:5a:ef:b1:20:41:63:9b:cc:94:6c:
                    d5:79:b0:e8:68:f6:20:3f:c6:5d:fd:6e:a6:0d:1f:
                    5f:00:59:c3:b0:43:27:f9:9d:b8:bc:45:cd:a2:48:
                    21:b2:2a:f1:3f:18:e7:ca:d7:09:cf:30:60:55:e6:
                    ac:d3:7d:81:18:bb:93:e6:78:0d:ed:10:49:a3:84:
                    3a:07:2d:9d:5b:52:b7:2d:e7:af:4f:c4:29:a0:cd:
                    da:d1:77:95:42:df:0d:19:d9:c8:c7:e1:f7:75:b2:
                    c8:94:4a:15:1e:20:00:19:7e:a8:12:90:2d:c2:a2:
                    f9:f0:fe:40:5a:dc:59:58:c8:40:85:6e:07:c3:9a:
                    07:59:5f:3a:0f:15:c5:7c:b8:76:cd:d3:34:75:7f:
                    c7:1c:44:21:93:29:18:a3:c0:48:00:35:cc:77:2e:
                    e0:c0:e5:67:28:a3:9b:ea:e6:3f:9c:24:e7:6e:08:
                    c7:1b:d5:b3:e3:58:8f:b9:98:a9:c5:4e:c7:9a:19:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:31:3E:36:7D:1D:73:3A:3F:5F:70:D3:A5:04:59:D4:9B:82:26
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133362e302f32342d3234203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:36:46:13:bc:77:b4:ab:29:51:fd:0f:6a:ab:45:e6:44:
         c3:34:86:53:dc:9a:ed:c5:ec:c2:76:b0:97:7e:d1:71:e9:a9:
         c5:88:10:d9:fa:49:76:35:94:3f:27:41:e9:f3:56:e6:d5:b4:
         23:b2:38:af:9f:b1:de:5d:f4:db:84:dd:50:27:30:93:40:a1:
         94:59:51:27:b0:d3:83:ad:e7:98:e1:a4:3e:a9:94:8e:bd:e5:
         94:d5:51:02:74:dd:35:4c:67:2f:d4:99:f9:ae:85:36:50:d3:
         91:52:21:81:be:e8:e3:e5:7b:8b:d7:1e:09:c8:72:67:e9:7b:
         9c:9c:2a:91:e1:2d:a3:0a:d7:9f:d0:07:83:5b:8e:37:d3:e8:
         c3:03:5c:4b:03:31:0e:5f:fd:f9:37:7f:00:85:b3:dc:a8:9f:
         61:8b:e4:9f:d9:ef:ed:61:1a:8f:6f:50:cd:9d:dc:62:ba:85:
         33:7d:95:d6:11:1d:8d:60:bd:f7:2a:b8:bb:67:bf:70:c1:70:
         b8:e7:4d:b4:98:07:5b:a0:97:e1:7b:3e:89:71:9b:43:cc:6a:
         70:a5:25:3d:c2:40:58:35:a8:87:ac:b6:62:3d:23:e9:3b:e7:
         80:af:c7:db:2f:f4:73:09:ab:66:96:89:36:99:ba:89:2a:96:
         01:46:c7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:19:52 2023 by rpki-client on console-ams.rpki-client.org