Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a31303a3a2f34342d3434203d3e203532323130.roa
File:                     323630323a666364333a31303a3a2f34342d3434203d3e203532323130.roa (raw, json)
Hash identifier:          cW7Br7z7Gmim64nxLFKKGI+j/HLOb9SBvG5I4auvKNk=
Subject key identifier:   15:B1:9B:67:10:E7:E5:78:B8:4A:39:FD:9B:76:A4:54:3D:6A:BD:D0
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       6685E9C9C0C85861FED0524CBA708400F1D495EF
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a31303a3a2f34342d3434203d3e203532323130.roa
Signing time:             Sun 16 Feb 2025 11:13:27 +0000
ROA not before:           Sun 16 Feb 2025 11:08:27 +0000
ROA not after:            Sun 15 Feb 2026 11:13:27 +0000
asID:                     52210
IP address blocks:        2602:fcd3:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:85:e9:c9:c0:c8:58:61:fe:d0:52:4c:ba:70:84:00:f1:d4:95:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:27 2025 GMT
            Not After : Feb 15 11:13:27 2026 GMT
        Subject: CN=15B19B6710E7E578B84A39FD9B76A4543D6ABDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:02:c1:cf:1c:63:94:e8:07:2a:b6:e5:0c:
                    06:3f:0c:ed:28:ab:1c:51:a6:45:61:2f:3d:13:df:
                    1b:a3:f2:50:c6:95:90:65:69:56:a0:c4:6b:07:d0:
                    d2:fc:d3:af:20:4b:1c:ca:91:26:59:ba:e6:6c:76:
                    7f:87:0a:75:dc:56:c9:79:7a:9d:c4:c8:96:61:98:
                    cd:64:ef:03:f0:a0:dc:d6:ae:b3:d9:41:07:de:18:
                    a5:14:67:e6:33:1d:86:79:9c:d0:b4:aa:d3:17:0c:
                    4a:bd:94:31:de:9e:08:73:95:06:4c:98:5d:dc:39:
                    4a:18:2f:e9:22:f0:f0:3e:76:39:60:48:9d:fb:4f:
                    1b:fd:db:e5:e3:3d:0c:93:92:aa:33:94:7c:20:fb:
                    5e:68:8d:2b:92:72:65:40:c1:a8:0d:6c:a0:a4:37:
                    eb:63:e9:ea:fb:fc:ed:1e:a0:a2:02:1d:e6:33:26:
                    16:93:0f:c3:f9:6a:61:6a:9d:5c:ec:b7:2f:4a:da:
                    a0:34:02:82:56:ab:8f:3c:cd:a0:42:6d:51:20:24:
                    ca:96:11:cc:57:7e:22:88:40:39:e7:ed:47:a4:2a:
                    8a:4f:66:4f:10:6e:5c:f1:2a:e3:90:82:4e:06:32:
                    f6:db:f9:48:e3:11:81:cc:71:d4:54:5e:96:f5:3c:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:9B:67:10:E7:E5:78:B8:4A:39:FD:9B:76:A4:54:3D:6A:BD:D0
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a31303a3a2f34342d3434203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:49:e1:07:c2:50:a6:c9:d1:51:0e:2d:ea:88:c3:5c:b0:
         a0:f4:a6:6d:9e:70:68:dc:d6:c7:39:30:dc:90:bc:17:46:5d:
         e7:e9:d0:d5:32:c7:00:74:43:87:b0:f7:ec:29:96:f3:12:d5:
         bb:7b:21:f5:01:be:e0:05:8e:1f:a3:96:3b:68:b1:6c:25:cb:
         15:ec:2f:93:9c:e7:fc:b0:73:0e:49:07:7c:a0:e5:33:40:ac:
         b3:31:bd:0e:3b:a3:56:42:8f:10:c5:74:2c:ef:3a:f7:74:30:
         c1:c9:aa:89:0b:73:d8:a7:24:1f:7d:5e:1e:43:7a:e1:4c:0f:
         c6:0a:b1:3e:a4:54:74:0f:ec:01:49:54:43:ff:74:46:1c:68:
         f1:47:42:79:6d:8f:f5:dc:1a:6d:4a:88:f7:97:1c:f5:a9:bc:
         37:5c:e0:48:05:e8:fa:06:5a:5d:94:1e:6d:a3:f1:fb:fc:b4:
         f8:9f:1b:c9:43:df:bc:36:ef:18:88:da:62:03:d6:0a:21:c7:
         1c:31:c9:29:e1:c2:42:a6:3b:18:69:c5:fb:30:1c:34:9e:f5:
         6a:bb:91:13:c0:7f:e0:fd:b7:60:4f:ad:9c:5b:ea:f3:5f:9c:
         e9:a1:ea:fa:66:a2:2a:35:05:84:2a:41:85:a1:e9:9c:91:66:
         29:49:1d:19
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUZoXpycDIWGH+0FJMunCEAPHUle8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5
YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjUwMjE2MTEwODI3WhcNMjYwMjE1MTExMzI3
WjAzMTEwLwYDVQQDEygxNUIxOUI2NzEwRTdFNTc4Qjg0QTM5RkQ5Qjc2QTQ1NDNE
NkFCREQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+ACwc8cY5To
Byq25QwGPwztKKscUaZFYS89E98bo/JQxpWQZWlWoMRrB9DS/NOvIEscypEmWbrm
bHZ/hwp13FbJeXqdxMiWYZjNZO8D8KDc1q6z2UEH3hilFGfmMx2GeZzQtKrTFwxK
vZQx3p4Ic5UGTJhd3DlKGC/pIvDwPnY5YEid+08b/dvl4z0Mk5KqM5R8IPteaI0r
knJlQMGoDWygpDfrY+nq+/ztHqCiAh3mMyYWkw/D+Wphap1c7LcvStqgNAKCVquP
PM2gQm1RICTKlhHMV34iiEA55+1HpCqKT2ZPEG5c8SrjkIJOBjL22/lI4xGBzHHU
VF6W9TzkQQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFBWxm2cQ5+V4uEo5/Zt2pFQ9
ar3QMB8GA1UdIwQYMBaAFIuDxdoDs8wCnZUhWgEyBZeBSzjwMA4GA1UdDwEB/wQE
AwIHgDB+BgNVHR8EdzB1MHOgcaBvhm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNo
bm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzhCODNDNURB
MDNCM0NDMDI5RDk1MjE1QTAxMzIwNTk3ODE0QjM4RjAuY3JsMIHzBggrBgEFBQcB
AQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82
M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvN2FmYWYxYzFiNzdl
ZWRhMWEzYTJlYmFkYTRiNGRhYzg5YWNiZjM4YjNkZjc1ZDNjZTkuY2VyMIGeBggr
BgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8va3JpbGwuYWNjdXJp
c3RlY2hub2xvZ2llcy5jYS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzAvMzIz
NjMwMzIzYTY2NjM2NDMzM2EzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzUz
MjMyMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHBCYC/NMAEDANBgkqhkiG9w0BAQsFAAOCAQEAHvFJ
4QfCUKbJ0VEOLeqIw1ywoPSmbZ5waNzWxzkw3JC8F0Zd5+nQ1TLHAHRDh7D37CmW
8xLVu3sh9QG+4AWOH6OWO2ixbCXLFewvk5zn/LBzDkkHfKDlM0CsszG9DjujVkKP
EMV0LO8693QwwcmqiQtz2KckH31eHkN64UwPxgqxPqRUdA/sAUlUQ/90Rhxo8UdC
eW2P9dwabUqI95cc9am8N1zgSAXo+gZaXZQebaPx+/y0+J8byUPfvDbvGIjaYgPW
CiHHHDHJKeHCQqY7GGnF+zAcNJ71aruRE8B/4P23YE+tnFvq81+c6aHq+maiKjUF
hCpBhaHpnJFmKUkdGQ==
-----END CERTIFICATE-----
Generated at Thu Apr 3 11:17:06 2025 by rpki-client