Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa
File:                     32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa (raw, json)
Hash identifier:          N6J+eJTGXOxRiUbpjz7H/k5dKTYjRLDxtdoY7pRb1YU=
Subject key identifier:   AE:6E:09:A9:DE:14:D0:0C:D1:68:7F:9A:3F:2B:6F:34:F9:74:E8:E1
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       34A42ED0EC6B2E743749DF981F04C9780B4BF4ED
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa
Signing time:             Sun 17 Mar 2024 10:27:22 +0000
ROA not before:           Sun 17 Mar 2024 10:22:22 +0000
ROA not after:            Sun 16 Mar 2025 10:27:22 +0000
asID:                     212934
IP address blocks:        23.130.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 18:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a4:2e:d0:ec:6b:2e:74:37:49:df:98:1f:04:c9:78:0b:4b:f4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:22 2024 GMT
            Not After : Mar 16 10:27:22 2025 GMT
        Subject: CN=AE6E09A9DE14D00CD1687F9A3F2B6F34F974E8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b9:23:9a:f6:fe:7d:33:47:b7:9a:b9:45:a7:
                    1e:02:a1:2c:ce:a8:31:4a:b6:24:4c:57:40:69:5d:
                    b8:68:15:48:15:95:f6:b6:8d:8b:52:62:e1:26:58:
                    4b:da:7c:43:2f:8d:a8:15:bc:70:d5:e8:26:da:f8:
                    2b:af:15:12:a0:da:b2:32:4d:f5:24:3d:45:70:1d:
                    bf:92:0a:53:18:36:a6:7a:ec:e6:24:9e:7b:c3:32:
                    8c:30:6c:d7:aa:47:00:3e:34:2a:59:79:8e:38:47:
                    f6:53:45:8f:6a:51:8f:6b:53:a4:44:6e:d2:76:15:
                    72:e2:ce:39:ad:d0:3b:35:03:45:c8:fb:10:4d:93:
                    10:03:29:f3:f7:b5:19:ad:76:00:45:17:ed:e5:ac:
                    ca:4f:1f:db:c8:a5:64:fb:e0:8a:ba:58:2d:c3:5b:
                    1d:d3:f6:04:73:1c:b3:30:53:e9:6f:dc:96:19:3f:
                    15:91:ad:42:51:07:42:1c:cc:a5:62:1e:d1:e0:59:
                    21:7b:5c:66:e4:8f:59:e6:00:43:a6:a3:7e:be:90:
                    d8:a2:1d:39:92:f4:95:6b:7b:6e:96:34:69:53:36:
                    2c:be:ce:c2:93:08:7f:c9:e6:e7:14:1c:82:21:bc:
                    56:11:ac:78:f3:8c:b8:07:fc:f5:7b:74:e8:69:8e:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6E:09:A9:DE:14:D0:0C:D1:68:7F:9A:3F:2B:6F:34:F9:74:E8:E1
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:6c:fa:af:00:44:1f:aa:8f:6f:08:fe:b6:b0:51:b6:ce:aa:
         d6:1f:d9:82:38:21:d7:70:d8:f2:ce:fa:65:3d:85:c3:7d:cd:
         0b:09:ae:cf:01:eb:d2:81:92:54:9a:c2:42:62:ab:7e:59:c2:
         9e:77:45:96:c4:a8:88:b9:9c:98:f0:3d:a6:32:7b:36:f8:1b:
         fb:5c:8d:35:0a:ed:e2:f1:71:f9:40:ec:6f:ec:84:54:71:34:
         22:62:79:37:75:20:51:c3:0b:0b:a4:dc:37:4a:41:a9:6b:64:
         ec:ef:8c:41:d7:3e:e9:ec:b5:07:67:0c:8f:1a:62:cf:5a:9a:
         92:47:50:d2:e9:15:05:c3:f9:13:e2:62:76:85:02:2a:1c:55:
         a5:45:be:1a:ab:ea:d4:30:4d:fe:a8:51:8b:a5:da:b0:a8:08:
         48:91:68:ee:c3:90:3f:c8:50:ee:d4:54:e3:69:2e:83:a8:0c:
         42:58:4c:1f:7a:96:d1:1e:a4:51:b5:30:0b:bb:b4:7a:69:b0:
         ac:fd:30:38:a2:1e:4d:33:78:34:7b:e4:2d:ee:d0:4b:3c:a7:
         6d:dc:75:bb:94:27:43:ce:02:ee:18:6a:87:fd:eb:a6:89:46:
         57:61:a0:c3:10:67:7e:49:0b:71:53:6d:4d:45:f9:b9:5c:d8:
         71:75:d5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:07:11 2024 by rpki-client on console-fra.rpki-client.org