Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e302f32342d3332203d3e203532323130.roa
File:                     32332e3133302e3133382e302f32342d3332203d3e203532323130.roa (raw, json)
Hash identifier:          p0tBSpjhd39T8e8Er9A3YjCeBM1UKM3gIRG8/hoDq8s=
Subject key identifier:   18:37:AA:E5:23:3E:2F:0C:90:5B:DB:99:A1:52:85:6B:79:72:B2:4B
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       41B7F23EC7E7C6471A8DB7CD44E3F629D0517F03
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e302f32342d3332203d3e203532323130.roa
Signing time:             Fri 20 Dec 2024 09:03:06 +0000
ROA not before:           Fri 20 Dec 2024 08:58:06 +0000
ROA not after:            Fri 19 Dec 2025 09:03:06 +0000
asID:                     52210
IP address blocks:        23.130.138.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b7:f2:3e:c7:e7:c6:47:1a:8d:b7:cd:44:e3:f6:29:d0:51:7f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Dec 20 08:58:06 2024 GMT
            Not After : Dec 19 09:03:06 2025 GMT
        Subject: CN=1837AAE5233E2F0C905BDB99A152856B7972B24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0f:a7:22:21:68:be:be:ea:a1:ca:3e:d5:37:
                    1d:0e:13:ef:b8:86:81:40:2e:ee:0f:84:44:12:c2:
                    74:f2:66:15:c9:b2:8e:54:41:07:23:61:03:1c:84:
                    90:3c:35:e5:05:83:35:02:37:ba:9c:4b:21:47:f5:
                    15:cc:53:1c:9f:e7:db:51:09:27:6d:92:59:e7:90:
                    6b:49:75:67:ba:a4:e8:0c:c9:3d:6b:8b:8c:ad:e4:
                    32:8f:e7:b4:f4:40:e5:fc:46:96:45:f2:49:0d:b6:
                    db:ed:5d:fc:60:83:50:70:8f:df:8f:8a:16:67:e5:
                    a4:3a:fa:83:83:4f:0e:8d:a4:07:4b:99:ee:ff:74:
                    78:e2:e6:1f:0b:dc:08:15:81:1a:ea:68:cd:b4:cd:
                    37:a3:4c:1e:21:16:6f:bc:9f:b0:a9:6f:77:ff:22:
                    46:a3:57:33:44:a8:b3:04:97:ca:bd:31:2c:e7:be:
                    96:25:16:f2:86:ea:f9:5b:27:68:f4:03:de:7c:41:
                    13:77:cf:2c:0c:f9:cc:3d:25:a4:59:fc:1b:80:e6:
                    41:d2:68:2f:12:a6:73:fc:2c:4a:a5:eb:fe:fd:32:
                    f2:aa:0a:4e:cc:fd:ae:cb:6e:74:d5:c0:13:5b:9a:
                    f1:bf:68:83:1f:2d:dc:80:cf:68:40:00:21:c0:54:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:37:AA:E5:23:3E:2F:0C:90:5B:DB:99:A1:52:85:6B:79:72:B2:4B
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133382e302f32342d3332203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d4:5c:81:50:4e:8f:21:b0:02:9c:1f:d7:4a:1b:eb:a8:cd:
         c2:91:c5:63:1c:04:bb:35:67:4c:11:e6:21:c0:ea:66:6e:b2:
         c2:0e:21:e9:13:9b:60:f2:23:a0:30:be:f5:70:9c:26:6b:6f:
         01:5a:86:ec:2b:0c:9d:a7:ba:9c:a7:ec:9e:a3:d5:64:0f:cd:
         81:f3:c5:53:14:d4:45:70:c4:a9:fa:ba:a2:79:f4:8e:82:d6:
         41:6a:91:37:f6:8b:b0:4e:b9:78:1a:65:a2:50:55:73:bf:c0:
         84:f9:bf:86:df:67:c8:28:ae:4d:9f:1f:ae:ec:62:c7:71:2a:
         dd:ff:5a:83:99:f1:d4:9d:29:78:ab:9c:df:36:04:38:71:35:
         6f:9e:57:42:5d:8c:3f:fa:2a:1d:d2:88:bb:e2:eb:4c:8b:1b:
         86:b9:74:c6:1b:aa:66:db:e0:13:4d:e3:8e:48:06:07:03:35:
         36:2c:dc:97:95:94:8c:64:21:9b:54:9a:78:9f:fc:cd:59:2f:
         bb:9c:41:6a:2d:c9:8b:40:ac:d5:7b:89:49:66:a7:5e:7c:2f:
         14:04:bd:d2:2d:9d:58:3c:16:45:e4:17:bc:1e:73:ba:8f:97:
         28:9a:55:15:87:aa:49:84:1d:1a:a3:fd:d3:ed:9d:fc:8d:7e:
         2b:95:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:23:55 2025 by rpki-client