Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130303a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a3130303a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          Te3g/9ykaYMLBKUTdZ0BqYF/Qvsl6CIlyuAZ8PKClDY=
Subject key identifier:   AE:5C:C9:19:A7:D8:B5:2F:94:79:FB:E5:F2:27:47:56:A7:BE:15:93
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       32B83E8E2A65C4BEEF273398A853C1B5582E26DB
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130303a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Sun 16 Feb 2025 11:13:28 +0000
ROA not before:           Sun 16 Feb 2025 11:08:28 +0000
ROA not after:            Sun 15 Feb 2026 11:13:28 +0000
asID:                     212934
IP address blocks:        2602:fcd3:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b8:3e:8e:2a:65:c4:be:ef:27:33:98:a8:53:c1:b5:58:2e:26:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:28 2025 GMT
            Not After : Feb 15 11:13:28 2026 GMT
        Subject: CN=AE5CC919A7D8B52F9479FBE5F2274756A7BE1593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:44:62:a8:76:96:15:7f:36:01:e5:1d:21:b6:
                    a6:35:16:67:9b:fb:61:39:4b:ee:18:fb:1c:e9:2c:
                    b3:ef:89:5a:c5:37:20:33:98:1c:49:dc:11:36:01:
                    af:69:38:95:31:dd:fe:72:7e:2b:ae:c3:eb:a9:e3:
                    eb:1b:72:dc:bb:41:c4:3c:8d:c3:48:4d:09:90:ac:
                    bb:f6:16:48:55:ba:b2:cc:c9:b9:70:52:7e:8e:f1:
                    15:60:2c:ab:d5:2e:bc:78:17:6f:fb:6c:ce:74:60:
                    07:97:00:26:71:96:6c:6f:8e:00:da:37:24:21:3c:
                    56:36:a3:5f:99:bf:d8:10:77:09:92:9c:bf:2a:84:
                    b2:50:ea:84:9f:a8:2f:3c:08:a6:0e:ec:46:49:cd:
                    24:46:e8:d7:18:ab:e6:64:d9:da:a3:25:aa:bf:04:
                    d3:91:c6:5f:c0:92:90:06:01:c9:98:5d:32:05:30:
                    f6:26:e2:f7:3b:f5:6f:6d:cd:e4:60:d3:f3:2f:8b:
                    74:85:47:97:d9:3a:d3:0f:c2:d7:63:54:af:c2:ec:
                    f9:eb:9a:f1:1e:c9:94:59:f4:18:d6:21:5e:c6:a8:
                    7a:e4:0e:ae:7a:34:a6:2f:80:30:89:b7:3f:34:13:
                    22:a5:52:6b:a5:63:85:3a:be:1b:6e:9c:20:fd:f0:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5C:C9:19:A7:D8:B5:2F:94:79:FB:E5:F2:27:47:56:A7:BE:15:93
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130303a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:fa:0a:3b:33:5a:77:21:ff:79:50:1c:ff:49:49:29:46:6f:
         f8:6f:14:47:ec:7b:1e:b6:aa:00:c5:13:a0:6e:98:10:6d:39:
         9b:40:2a:22:83:2b:81:eb:f2:9a:08:2f:4c:34:ea:2d:88:c7:
         af:22:77:9e:88:16:c9:8b:40:88:2c:a1:2b:49:ed:68:86:09:
         07:8d:af:1c:fc:39:ab:bf:8e:56:c3:9a:a6:f4:ae:c8:5c:2d:
         18:37:48:c2:7f:f1:5b:44:7d:5d:e3:81:a8:b6:4d:c0:30:bd:
         38:47:ec:4f:f5:e4:41:3f:46:9a:be:d3:02:8b:c1:4c:41:94:
         f1:0d:7a:bb:28:ee:61:d5:89:9a:e3:2a:8a:d3:04:1a:d8:32:
         7f:f7:1d:86:e1:d5:8a:74:f5:14:ad:1e:e4:91:b8:48:ee:f3:
         20:16:3f:43:1a:16:4f:ba:94:11:1c:15:3f:8d:10:52:f4:ac:
         b6:83:3d:7a:05:45:f8:a0:03:8a:01:24:0a:38:61:d2:2d:bd:
         75:08:63:01:f2:be:cc:b2:27:fd:dd:f3:0b:9a:34:e5:df:87:
         36:c9:12:81:df:d4:a5:fe:74:83:7d:85:95:19:d6:df:ed:b8:
         98:e8:57:52:af:d2:24:d0:9a:21:88:fd:40:a1:fa:17:9e:77:
         07:e9:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:14:37 2025 by rpki-client