Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133392e302f32342d3234203d3e203532323130.roa
File:                     32332e3133302e3133392e302f32342d3234203d3e203532323130.roa (raw, json)
Hash identifier:          Dva9pobp5cT4R5k4DBk3lTdOW5Q31SlRQRzv10VX1Cs=
Subject key identifier:   EF:70:88:21:21:19:40:E5:F3:A5:B2:CB:81:DB:C6:6A:64:2E:60:55
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       3169106C5FC04A8AC4C8114193D45ABD70592A29
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133392e302f32342d3234203d3e203532323130.roa
Signing time:             Sun 16 Apr 2023 09:53:31 +0000
ROA not before:           Sun 16 Apr 2023 09:48:31 +0000
ROA not after:            Sun 14 Apr 2024 09:53:31 +0000
asID:                     52210
IP address blocks:        23.130.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jul 2023 17:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:69:10:6c:5f:c0:4a:8a:c4:c8:11:41:93:d4:5a:bd:70:59:2a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 16 09:48:31 2023 GMT
            Not After : Apr 14 09:53:31 2024 GMT
        Subject: CN=EF708821211940E5F3A5B2CB81DBC66A642E6055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:e8:cd:cd:b1:82:39:14:76:87:9f:50:29:
                    32:9d:8d:cf:2e:1b:7e:f7:c7:03:e1:32:ab:bf:2e:
                    03:ec:88:33:f3:1e:fa:76:aa:0a:a5:e1:1f:45:9f:
                    9f:9f:d6:b0:88:26:dd:2f:b6:c0:24:d9:b0:26:0d:
                    42:51:78:e8:21:8f:a3:4d:18:64:ad:bb:13:2b:25:
                    56:ce:9e:dd:94:48:46:55:6b:f4:b4:10:ab:0f:42:
                    3b:ed:b9:92:e7:e6:50:35:e4:94:27:c6:fb:bf:d7:
                    4d:b0:de:c7:02:21:ea:e6:6d:38:36:24:2b:ea:1b:
                    23:81:91:ed:02:dd:37:89:24:a8:56:c3:ab:43:9b:
                    78:8d:b4:f6:a4:fb:1c:80:36:e3:62:ff:da:94:4a:
                    82:01:98:96:77:96:3b:83:23:75:2d:28:c6:ca:25:
                    20:22:18:de:69:59:0f:85:cf:e2:1f:b2:64:ce:b8:
                    3c:24:52:f8:68:f2:0b:ff:8c:dc:de:36:1b:0a:b1:
                    b9:ed:fc:59:53:c7:a7:69:c2:52:b2:26:17:7f:53:
                    0f:59:dd:13:65:70:a1:35:4a:4d:b0:7c:b7:1b:61:
                    4f:03:ce:a8:d5:0c:52:5f:1e:e5:89:5c:78:6b:d5:
                    63:20:93:38:38:8c:64:89:ea:21:6c:e5:ab:0e:18:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:70:88:21:21:19:40:E5:F3:A5:B2:CB:81:DB:C6:6A:64:2E:60:55
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133392e302f32342d3234203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:f0:5d:6e:53:8d:90:60:fa:b4:bb:af:1d:4a:1d:07:3b:
         dc:e8:9a:60:3e:e6:d9:41:38:43:38:41:7e:a5:38:68:1a:b1:
         15:b6:fb:b2:c3:03:9f:40:fe:0e:8d:7e:c1:d7:6a:89:01:bb:
         07:b1:a1:a5:a0:b0:e3:a2:82:2f:61:68:55:69:fd:b4:7b:00:
         aa:82:ce:c6:36:b8:5d:88:f0:d9:50:1a:97:96:69:3a:a9:d5:
         40:a6:62:49:b2:aa:03:46:29:ad:e6:3c:13:63:f6:99:bd:bb:
         a0:d5:0b:b2:6d:26:18:57:91:86:7e:86:c1:be:35:34:06:a6:
         ad:d1:a6:f8:d4:2f:be:1a:ea:89:3f:5d:73:ca:4c:8b:3b:79:
         cd:44:3b:c3:d8:2d:85:86:db:50:83:9c:ba:a6:2b:a3:12:30:
         c9:84:39:b8:21:9b:6e:df:ee:87:4b:ba:d1:82:77:07:d8:fc:
         21:58:74:e0:0d:6b:4b:e4:ee:bf:12:e4:74:dc:ca:87:7b:4a:
         c4:80:63:65:7e:18:dd:ab:ab:9e:0f:b9:85:3d:e4:4e:15:86:
         4c:7e:fe:dd:e2:bb:65:ea:58:a9:cd:bd:df:32:f1:bb:c5:8d:
         1a:80:e1:28:e1:9a:f2:90:3f:77:16:bb:44:b5:7c:c3:f9:ce:
         f2:ab:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:18:02 2023 by rpki-client on console-fra.rpki-client.org