Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e302f32342d3234203d3e203532323130.roa
File:                     32332e3133302e3133382e302f32342d3234203d3e203532323130.roa (raw, json)
Hash identifier:          tFqV9OFWfg9GkEUDwBegUxdlH91I3J57aZ7AatixmtI=
Subject key identifier:   A5:68:36:3F:27:77:D8:DD:39:16:3F:CB:04:BA:0E:07:23:2C:1B:FA
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       68C115498C66DB83E68992E8448F89F878039F57
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e302f32342d3234203d3e203532323130.roa
Signing time:             Sun 16 Apr 2023 09:53:28 +0000
ROA not before:           Sun 16 Apr 2023 09:48:28 +0000
ROA not after:            Sun 14 Apr 2024 09:53:28 +0000
asID:                     52210
IP address blocks:        23.130.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jul 2023 17:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c1:15:49:8c:66:db:83:e6:89:92:e8:44:8f:89:f8:78:03:9f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 16 09:48:28 2023 GMT
            Not After : Apr 14 09:53:28 2024 GMT
        Subject: CN=A568363F2777D8DD39163FCB04BA0E07232C1BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:37:85:da:17:c2:d0:29:06:81:6e:d0:27:
                    46:9c:18:b8:30:c1:dc:04:e7:41:3f:ce:8c:b7:f5:
                    c0:5d:69:d1:6f:a3:d8:ec:0c:ce:f0:34:af:20:ee:
                    2b:95:0b:d9:ea:92:94:b0:8a:bd:47:fc:f1:07:cd:
                    a3:c6:66:c5:f1:93:1c:ab:8d:82:ab:c0:e4:80:ad:
                    eb:e7:b7:59:d2:1f:30:f0:95:1a:85:31:07:4e:09:
                    a1:dc:75:0b:3e:50:b3:46:27:ec:7d:6c:4a:d4:6f:
                    aa:4d:1d:a7:3f:c5:47:c4:bc:6e:55:3f:cc:08:f7:
                    21:d5:aa:b8:1b:65:77:0a:a8:81:0d:1f:53:83:b8:
                    08:7d:07:aa:e4:fe:14:7f:46:b7:f7:88:b6:2f:68:
                    e5:c3:0e:ff:c3:c9:05:50:e0:10:78:9c:94:09:cb:
                    78:36:24:a3:72:be:7b:ac:26:cb:fe:6a:4b:e0:71:
                    40:7f:4a:c2:0a:90:71:65:1f:d8:e4:f2:4c:25:91:
                    a4:ff:dc:07:eb:e9:65:ee:bd:8d:0c:79:9c:06:c5:
                    9c:0e:ba:76:06:db:9d:cf:cc:45:be:96:ec:60:f5:
                    f4:8b:fc:31:3e:74:de:da:56:35:7e:f5:74:dc:52:
                    96:da:35:7d:46:fe:f5:f5:d1:d5:b5:ca:3c:dd:74:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:36:3F:27:77:D8:DD:39:16:3F:CB:04:BA:0E:07:23:2C:1B:FA
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e302f32342d3234203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:8d:5f:cf:5d:6e:76:d8:6f:11:0a:e2:a0:a9:14:1e:7f:58:
         ae:71:6f:95:3c:8f:bd:32:25:af:ea:38:e6:26:e2:99:c9:87:
         70:ac:33:d7:6c:32:ea:e9:ec:25:8c:28:89:2e:91:f0:7a:c4:
         5c:ab:47:4e:17:c5:2b:a6:83:49:3c:be:84:ac:f0:be:22:ef:
         78:4d:d7:82:52:e7:43:0a:74:fc:e1:f8:51:5f:2b:80:3f:fb:
         fd:34:31:44:fd:21:06:13:71:9a:bd:8f:35:6f:8e:26:66:49:
         0e:eb:f5:18:1b:10:ee:50:96:6a:aa:ea:6f:c8:18:24:24:cd:
         f0:1f:7f:8b:f2:01:7d:ef:b2:95:e6:07:e6:a1:6d:0d:ea:c1:
         4e:e6:3a:3a:d7:f1:3d:9c:42:20:4a:d4:e3:76:28:b2:df:61:
         2a:08:f1:28:d1:11:4f:67:49:10:4c:84:4c:23:1a:b2:03:c5:
         af:8c:e8:c4:96:a5:47:fc:aa:cc:3d:58:7f:24:ac:56:73:c7:
         41:67:44:a1:c2:09:6c:2d:2e:96:b3:c2:8b:8f:07:d8:ed:a8:
         95:a3:f0:d4:6f:8c:da:fb:89:39:30:e3:da:e0:33:91:70:5f:
         6c:c7:40:d8:7c:84:69:de:30:90:ab:87:70:9b:11:b8:54:a1:
         a3:7d:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:19:52 2023 by rpki-client on console-ams.rpki-client.org