Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e302f32342d3234203d3e203532323130.roa
File:                     32332e3133302e3133382e302f32342d3234203d3e203532323130.roa (raw, json)
Hash identifier:          CPQghFBtv3KEsfdHQmvzh+Q9VrmhiuEVRrfit9AERTk=
Subject key identifier:   8F:FC:31:1B:72:B4:77:83:49:A2:0D:F0:CE:97:43:48:DB:25:ED:DB
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       303849503D19F2A5E8545A32E3EEFFDBFAE2138A
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e302f32342d3234203d3e203532323130.roa
Signing time:             Sun 16 Feb 2025 11:13:32 +0000
ROA not before:           Sun 16 Feb 2025 11:08:32 +0000
ROA not after:            Sun 15 Feb 2026 11:13:32 +0000
asID:                     52210
IP address blocks:        23.130.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:38:49:50:3d:19:f2:a5:e8:54:5a:32:e3:ee:ff:db:fa:e2:13:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:32 2025 GMT
            Not After : Feb 15 11:13:32 2026 GMT
        Subject: CN=8FFC311B72B4778349A20DF0CE974348DB25EDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:da:3f:0c:6f:9f:75:0c:e7:d6:3f:33:c4:
                    54:29:66:d0:aa:f8:75:78:24:f6:f2:b6:f9:04:b5:
                    d4:9a:5b:62:33:09:fb:05:87:e3:2b:99:c9:db:06:
                    6a:17:82:00:1e:e7:b1:de:e2:b7:27:ed:4f:d8:6b:
                    7a:80:6e:56:95:cc:f1:d4:43:c6:10:53:54:d5:3f:
                    6c:1c:09:21:11:05:a2:ae:f2:1c:35:f6:7d:a0:26:
                    1e:d5:ea:22:c7:eb:7e:d7:54:40:02:2c:3c:49:f5:
                    de:cd:e0:91:47:0d:7f:11:02:2c:bd:32:87:25:0d:
                    ea:f4:f4:59:24:49:2b:09:16:db:4b:c6:fc:f6:c3:
                    41:5c:e7:2a:55:7c:76:fb:04:70:7f:11:38:94:f4:
                    02:21:3a:f7:a6:13:d3:c7:03:d1:71:ac:7f:54:ca:
                    68:58:ca:43:f9:88:fb:b6:7d:95:10:c6:66:83:89:
                    ea:4b:ae:34:aa:f3:15:16:ea:66:6a:a3:ac:5e:34:
                    6f:48:6f:07:9d:37:5f:42:60:50:b8:54:b5:c4:dc:
                    62:e0:bb:24:84:2c:ce:16:7d:c9:8a:72:97:03:76:
                    93:53:96:fe:29:be:1d:ac:49:26:e3:01:0c:db:84:
                    3c:83:ed:cd:28:c8:ec:3c:15:6b:3f:63:3d:91:62:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FC:31:1B:72:B4:77:83:49:A2:0D:F0:CE:97:43:48:DB:25:ED:DB
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e302f32342d3234203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:2d:86:5c:f8:a1:4d:25:94:39:4c:95:73:52:b5:b6:17:fc:
         93:88:87:38:56:09:c2:da:f5:9e:ab:69:43:c2:c9:4a:ce:31:
         e9:61:21:1a:8a:d5:bd:ba:67:f5:74:df:03:16:ac:d4:79:5e:
         87:1e:4f:78:0f:41:de:9e:ce:59:aa:3d:76:71:3c:f0:55:a9:
         09:b5:55:ee:d0:ff:77:26:93:5d:a2:72:02:16:1a:e7:c1:bf:
         63:47:13:2a:1a:cf:07:8a:81:2c:0c:3e:fa:e2:75:f1:c8:cd:
         77:3f:8f:3b:38:47:6d:8c:05:db:18:b5:55:c1:c3:79:8e:47:
         03:7f:70:c0:e0:99:a1:d7:40:bc:41:a6:5d:88:38:93:8a:f2:
         bb:33:ca:4b:89:76:25:04:48:5b:6c:46:0b:cd:2a:d3:e5:8c:
         73:ec:21:ae:76:2d:5e:b9:a0:2d:aa:ba:b9:8a:77:57:55:c3:
         e1:db:fc:56:5f:a0:5f:75:1b:09:fe:0c:9e:63:fa:e1:37:ae:
         d8:6b:49:ff:d7:f3:39:e3:72:79:8b:04:c3:0b:ce:02:74:6b:
         47:d7:0a:8a:ca:6d:90:e2:35:c6:3d:60:62:dc:4a:e0:29:00:
         aa:62:7c:b8:3c:1d:db:b8:8f:7c:70:c5:89:4a:ff:f0:49:8d:
         dc:2b:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:25:11 2025 by rpki-client