Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa
File:                     323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa (raw, json)
Hash identifier:          5V3YCYlNl7fr1ShW213RDtHvdrSlCsB/qwMZp6zVGFY=
Subject key identifier:   56:41:92:B2:BF:81:22:1C:4A:43:71:A3:3C:43:81:F4:61:C9:08:A3
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       28D6A397BAE7692F74D0254B40A4411B03887A41
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa
Signing time:             Sun 16 Feb 2025 11:13:29 +0000
ROA not before:           Sun 16 Feb 2025 11:08:29 +0000
ROA not after:            Sun 15 Feb 2026 11:13:29 +0000
asID:                     212780
IP address blocks:        2602:fcd3:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d6:a3:97:ba:e7:69:2f:74:d0:25:4b:40:a4:41:1b:03:88:7a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:29 2025 GMT
            Not After : Feb 15 11:13:29 2026 GMT
        Subject: CN=564192B2BF81221C4A4371A33C4381F461C908A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:1b:85:66:36:f8:71:4b:37:e3:ac:9e:3c:
                    34:6f:3b:39:29:1f:ea:dc:c4:fd:8d:62:20:de:09:
                    2a:9e:23:b2:60:4f:3a:c5:56:28:5f:fc:2d:aa:95:
                    73:c7:14:21:74:5b:6a:da:57:1b:c0:af:54:ed:c4:
                    6e:ca:eb:2c:f4:62:20:16:2f:de:d7:5b:4a:cd:66:
                    9a:e6:68:7e:21:82:76:60:4c:9f:79:9a:85:da:50:
                    7b:41:76:f9:59:4d:8c:29:61:3f:df:4a:69:7d:b9:
                    5a:d8:3c:b5:a2:cd:8f:ce:ff:2f:59:d5:50:2d:98:
                    2b:1b:86:32:d9:70:7d:40:a8:a0:2b:09:fb:f1:c2:
                    68:75:46:ac:33:1f:69:19:44:bc:47:8e:24:b5:c7:
                    ee:40:ee:e0:65:27:ef:72:64:cb:1e:12:98:e8:96:
                    58:e0:41:64:a1:62:f5:56:9f:14:59:bb:62:b4:c8:
                    31:00:98:9b:c9:9a:bd:11:f3:7c:03:e0:59:d0:61:
                    16:ba:1d:cf:46:28:c7:08:46:14:a4:fb:08:e1:04:
                    f0:03:d9:9e:14:3d:c8:e1:12:f4:1d:33:10:ba:c6:
                    aa:9a:a5:8f:94:b6:28:30:c3:3b:27:e5:5a:6f:0f:
                    13:a2:4e:f5:46:d2:2b:1f:56:24:9f:5a:f3:05:13:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:41:92:B2:BF:81:22:1C:4A:43:71:A3:3C:43:81:F4:61:C9:08:A3
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:14:df:50:df:d9:6d:eb:fc:fe:f6:2c:22:99:dc:e5:53:c9:
         99:80:d5:c7:29:69:67:a5:c8:dc:87:2f:2a:9f:68:c5:8b:90:
         0c:99:59:3d:82:16:49:b4:dd:3f:14:9c:fb:ac:30:0b:39:7c:
         22:16:84:2b:fd:ca:1c:ef:28:b9:7d:86:86:81:ba:6c:ea:53:
         69:44:96:59:82:00:7a:c6:17:c9:2b:04:e6:ba:4c:5f:b0:1b:
         46:91:69:f5:4c:23:5f:ab:1b:79:a2:55:b8:7e:90:ed:19:27:
         07:87:e7:3f:6a:dc:b1:d3:f0:05:39:c4:cd:b8:c7:4b:f0:f3:
         43:aa:c1:76:61:cf:c4:16:24:be:a8:3b:f7:6d:b8:c1:b6:2e:
         d9:89:d7:dd:e6:c5:b7:f0:08:6d:3d:ff:11:bc:6e:57:50:fb:
         5f:ad:ea:a1:ee:bf:76:66:8f:76:3a:eb:e7:48:70:04:3a:41:
         98:3b:cf:31:be:6e:82:74:88:01:4a:8e:0a:a2:88:34:4d:dd:
         a5:94:a2:5a:38:f6:30:ce:a2:8c:01:04:22:bf:77:8f:b3:47:
         d7:cb:d9:e3:5f:7e:2f:d2:d4:84:2d:dc:a2:2c:88:47:2c:b6:
         8c:b0:d5:db:db:11:ac:68:69:66:42:f7:f2:cb:9d:6a:1c:5b:
         91:66:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:32 2025 by rpki-client