Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa
File:                     32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa (raw, json)
Hash identifier:          XKQZxagQaIB9k67/0+O7gqGXpckiCN4lAcNTXSuHz6I=
Subject key identifier:   81:E3:B0:79:3A:94:CD:ED:7B:1E:13:6C:88:48:86:6B:B9:94:6C:6E
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       06B1CEF8EC611AB5D95795BC2C6F208D56E13F87
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa
Signing time:             Sun 16 Feb 2025 11:13:33 +0000
ROA not before:           Sun 16 Feb 2025 11:08:33 +0000
ROA not after:            Sun 15 Feb 2026 11:13:33 +0000
asID:                     212934
IP address blocks:        23.130.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b1:ce:f8:ec:61:1a:b5:d9:57:95:bc:2c:6f:20:8d:56:e1:3f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:33 2025 GMT
            Not After : Feb 15 11:13:33 2026 GMT
        Subject: CN=81E3B0793A94CDED7B1E136C8848866BB9946C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ac:8e:de:5c:d4:ce:28:06:db:d4:d8:2d:59:
                    99:7f:eb:0c:fd:15:73:ce:00:d9:f9:71:17:1e:a3:
                    18:11:7d:7e:9e:4d:c5:3e:25:bb:11:44:ce:1f:66:
                    c7:f5:28:c1:d4:79:a2:3d:9e:cc:e7:7f:ec:4b:b4:
                    b2:96:49:35:33:20:ef:37:a6:30:8e:7a:48:2a:6e:
                    d5:66:e8:af:9e:27:f1:77:c8:86:a0:3f:1c:25:66:
                    e1:c8:d6:9e:40:d2:49:39:a8:2a:e3:30:e6:66:68:
                    29:ab:21:24:f0:b5:d8:d4:97:19:93:23:57:85:46:
                    42:92:d0:15:e8:a1:d1:ad:53:eb:46:48:3a:61:21:
                    64:df:93:c2:52:43:ac:1c:d9:e4:84:d9:72:d9:0c:
                    e3:a5:93:08:a7:fe:4f:92:3a:21:37:a3:36:cf:48:
                    22:da:cb:d4:50:9e:77:9d:b3:ec:71:6c:4b:f6:25:
                    68:af:a7:eb:63:51:69:40:87:5d:24:2c:c8:95:06:
                    2a:aa:53:7e:10:87:45:1f:08:2a:8f:73:40:da:38:
                    59:45:8d:6a:f6:1b:be:6c:c2:d9:e3:72:b9:8d:20:
                    27:45:c7:f3:2e:51:d3:35:a5:ec:41:24:49:91:35:
                    32:a8:98:05:91:e4:db:d7:7c:7f:df:89:91:79:f7:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E3:B0:79:3A:94:CD:ED:7B:1E:13:6C:88:48:86:6B:B9:94:6C:6E
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:cb:45:a0:fd:07:fc:82:ca:75:1d:d9:7c:f9:ee:13:ad:
         d6:9d:82:2b:53:b4:18:90:69:05:c9:64:21:e3:51:6d:90:e2:
         1a:9b:b7:5a:bb:f2:e7:6a:75:2f:47:57:3b:56:69:e4:d4:1a:
         31:33:61:2c:40:da:78:92:67:fe:26:3b:5d:8a:b5:2f:54:76:
         2d:ec:03:17:c2:85:ac:70:c7:17:72:03:e4:d8:74:aa:43:c9:
         53:77:1b:a5:07:40:c1:3f:7e:dc:61:73:f4:bf:fd:78:5e:63:
         d7:db:41:e0:be:7c:6e:6b:0a:97:ed:06:2c:2e:91:0b:9f:78:
         08:58:cd:9f:8b:f9:d9:18:2b:1c:b4:20:31:3a:32:4d:f3:b1:
         72:d9:f4:7b:f1:e3:74:0e:64:b9:be:4a:58:85:c8:72:e4:08:
         e5:8f:c8:93:d4:06:23:9b:42:b0:4a:8e:fa:0f:cb:22:2c:63:
         e4:24:25:a0:68:0d:58:87:4b:48:ef:3b:61:74:98:03:1e:cc:
         84:d9:4f:26:5b:92:fc:7b:84:7d:48:5b:3d:5d:83:79:8d:1d:
         29:eb:1f:f3:cf:56:10:57:44:e4:a6:12:8b:50:56:d7:23:89:
         4f:7f:eb:7e:8d:8f:42:97:56:2c:98:73:47:81:59:0b:d6:98:
         f5:2e:08:8f
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIUBrHO+OxhGrXZV5W8LG8gjVbhP4cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5
YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjUwMjE2MTEwODMzWhcNMjYwMjE1MTExMzMz
WjAzMTEwLwYDVQQDEyg4MUUzQjA3OTNBOTRDREVEN0IxRTEzNkM4ODQ4ODY2QkI5
OTQ2QzZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiayO3lzUzigG
29TYLVmZf+sM/RVzzgDZ+XEXHqMYEX1+nk3FPiW7EUTOH2bH9SjB1HmiPZ7M53/s
S7Sylkk1MyDvN6YwjnpIKm7VZuivnifxd8iGoD8cJWbhyNaeQNJJOagq4zDmZmgp
qyEk8LXY1JcZkyNXhUZCktAV6KHRrVPrRkg6YSFk35PCUkOsHNnkhNly2QzjpZMI
p/5PkjohN6M2z0gi2svUUJ53nbPscWxL9iVor6frY1FpQIddJCzIlQYqqlN+EIdF
Hwgqj3NA2jhZRY1q9hu+bMLZ43K5jSAnRcfzLlHTNaXsQSRJkTUyqJgFkeTb13x/
34mRefdlvQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIHjsHk6lM3tex4TbIhIhmu5
lGxuMB8GA1UdIwQYMBaAFIuDxdoDs8wCnZUhWgEyBZeBSzjwMA4GA1UdDwEB/wQE
AwIHgDB+BgNVHR8EdzB1MHOgcaBvhm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNo
bm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzhCODNDNURB
MDNCM0NDMDI5RDk1MjE1QTAxMzIwNTk3ODE0QjM4RjAuY3JsMIHzBggrBgEFBQcB
AQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82
M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvN2FmYWYxYzFiNzdl
ZWRhMWEzYTJlYmFkYTRiNGRhYzg5YWNiZjM4YjNkZjc1ZDNjZTkuY2VyMIGcBggr
BgEFBQcBCwSBjzCBjDCBiQYIKwYBBQUHMAuGfXJzeW5jOi8va3JpbGwuYWNjdXJp
c3RlY2hub2xvZ2llcy5jYS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzAvMzIz
MzJlMzEzMzMwMmUzMTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIz
OTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAXgokwDQYJKoZIhvcNAQELBQADggEBAInhy0Wg/Qf8
gsp1Hdl8+e4TrdadgitTtBiQaQXJZCHjUW2Q4hqbt1q78udqdS9HVztWaeTUGjEz
YSxA2niSZ/4mO12KtS9Udi3sAxfChaxwxxdyA+TYdKpDyVN3G6UHQME/ftxhc/S/
/XheY9fbQeC+fG5rCpftBiwukQufeAhYzZ+L+dkYKxy0IDE6Mk3zsXLZ9Hvx43QO
ZLm+SliFyHLkCOWPyJPUBiObQrBKjvoPyyIsY+QkJaBoDViHS0jvO2F0mAMezITZ
TyZbkvx7hH1IWz1dg3mNHSnrH/PPVhBXROSmEotQVtcjiU9/636Nj0KXViyYc0eB
WQvWmPUuCI8=
-----END CERTIFICATE-----
Generated at Thu Apr 3 11:23:07 2025 by rpki-client