Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130323a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a3130323a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          Giy+rBoabYmYEDIM8fHmrjGE6YRO50E1Q+2x3h4ob1I=
Subject key identifier:   2C:1B:0D:C5:CC:3F:37:56:2A:77:C0:00:06:E0:2E:F2:98:42:D4:AF
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       5F12674932402B2AB3847C959B56E6C75F2BD710
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130323a3a2f34382d3438203d3e203532323130.roa
Signing time:             Tue 25 Mar 2025 19:13:39 +0000
ROA not before:           Tue 25 Mar 2025 19:08:39 +0000
ROA not after:            Tue 24 Mar 2026 19:13:39 +0000
asID:                     52210
IP address blocks:        2602:fcd3:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:12:67:49:32:40:2b:2a:b3:84:7c:95:9b:56:e6:c7:5f:2b:d7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 25 19:08:39 2025 GMT
            Not After : Mar 24 19:13:39 2026 GMT
        Subject: CN=2C1B0DC5CC3F37562A77C00006E02EF29842D4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:5b:07:d4:e6:b6:9b:36:cc:90:80:55:bc:
                    d5:4a:fa:79:0e:c5:37:5e:5a:cd:30:9c:5f:70:97:
                    08:fb:1e:c6:f9:e1:39:6a:a9:b7:e9:69:ab:ee:21:
                    e5:e4:12:9f:b4:77:c7:d3:da:b5:b0:f1:cc:12:87:
                    1e:b3:1b:17:35:e3:d8:eb:45:e0:4c:48:30:e0:bb:
                    8b:29:53:20:05:77:57:ce:82:54:e6:d5:28:b6:7b:
                    19:45:ef:62:99:05:52:db:90:41:c7:7c:c8:26:0f:
                    6d:36:d0:13:2d:8b:2e:d2:3f:df:b7:74:e6:37:71:
                    69:33:fb:65:9a:08:fe:5d:68:43:2a:a2:f5:09:db:
                    37:9a:6d:38:73:12:e1:3c:c6:ba:90:56:4b:8e:c3:
                    d1:7d:fb:f4:37:6a:c7:df:04:80:98:01:b4:b4:5b:
                    8a:eb:b8:db:9c:4b:55:15:ed:fd:b5:60:be:33:59:
                    0b:fb:73:49:c5:8b:d2:63:2e:10:0a:f2:bc:07:f5:
                    e3:b9:f0:f1:ca:86:4a:6b:5b:72:80:91:7a:3c:b4:
                    45:fa:69:85:48:80:bc:01:6d:ff:72:85:78:0e:e3:
                    73:0c:b8:d1:b9:8a:2d:ce:f7:a4:ed:4a:ba:6a:e3:
                    6c:d7:19:d8:b6:f7:e0:46:b3:ea:41:c2:ca:e2:71:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1B:0D:C5:CC:3F:37:56:2A:77:C0:00:06:E0:2E:F2:98:42:D4:AF
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130323a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:ee:88:a9:9d:2a:46:8a:d2:b1:85:27:0c:7c:6b:13:54:
         74:60:8a:ba:cb:c0:52:01:cd:ec:fa:9d:6d:c4:aa:ee:30:7f:
         2d:bb:a4:ef:9b:47:02:90:5d:09:c2:88:2d:4f:8e:b5:fa:61:
         e4:90:fb:35:8b:30:04:18:44:05:d0:da:d6:ff:1e:53:87:2c:
         9f:3a:0b:58:9a:8b:23:c4:38:b3:f2:94:5a:fe:7c:11:4d:f7:
         b4:89:19:be:56:f7:13:58:55:c7:43:f3:4e:fd:63:7b:d7:4a:
         82:b8:b1:4e:80:a4:4d:a6:da:f0:95:77:ea:d7:19:9e:dc:0a:
         06:f1:53:e4:99:42:0f:58:4e:a7:12:9e:59:c0:67:94:91:c0:
         f5:35:56:27:83:6f:d4:a5:26:53:d8:d5:af:ba:4e:57:48:9a:
         23:57:a1:93:cd:b0:9c:6d:6f:38:13:90:b3:10:4a:eb:b8:e3:
         a8:10:66:6c:72:dd:f0:f3:a0:1d:21:db:7e:2e:16:34:15:e3:
         c8:73:2c:51:d6:03:1b:dc:3e:90:6d:e2:0a:48:00:2d:c4:a3:
         95:59:da:1a:f2:cd:77:6f:db:2c:16:bc:d7:37:80:2b:ac:6c:
         c7:f4:2b:90:59:ef:0b:fb:07:11:47:bd:19:b3:de:97:82:7a:
         2a:3b:40:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:15:23 2025 by rpki-client