Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa
File:                     323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa (raw, json)
Hash identifier:          QuO3c6ZrSXZyAS37Eb2ozfaUEEzNShgnQJVTtthTCJc=
Subject key identifier:   BE:0D:52:6A:57:B4:0C:9F:AA:F2:22:CF:98:69:B8:E2:13:6C:26:C1
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       100BB202E7AD06DF9474944BF2446A588539199A
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa
Signing time:             Sun 17 Mar 2024 10:27:22 +0000
ROA not before:           Sun 17 Mar 2024 10:22:22 +0000
ROA not after:            Sun 16 Mar 2025 10:27:22 +0000
asID:                     200570
IP address blocks:        2602:fcd3:131::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 07:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0b:b2:02:e7:ad:06:df:94:74:94:4b:f2:44:6a:58:85:39:19:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:22 2024 GMT
            Not After : Mar 16 10:27:22 2025 GMT
        Subject: CN=BE0D526A57B40C9FAAF222CF9869B8E2136C26C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:cc:c9:3b:c9:a6:a5:96:d6:0e:3b:6c:9a:
                    f7:92:bf:22:60:6b:54:a7:c2:b9:4c:4f:26:aa:b2:
                    35:cb:8f:16:b4:1a:67:89:50:6c:2f:96:6e:16:d1:
                    d7:6e:00:52:70:b3:96:49:ce:fd:d2:24:74:c8:2b:
                    36:6b:78:cb:4e:c7:92:25:ef:d3:6d:84:bc:98:f2:
                    0a:b8:3f:6d:fa:81:ab:5b:c3:50:6f:21:9f:dd:8f:
                    e7:5a:96:22:09:ab:84:c8:c1:a0:ed:57:f7:2e:d7:
                    59:2d:f1:6f:2d:28:af:6e:a5:40:7e:f5:cb:49:f7:
                    60:03:55:03:2f:e2:7c:28:fd:66:77:1e:44:c5:22:
                    e1:71:5f:f3:41:74:e5:35:75:4a:cb:f8:2c:97:24:
                    84:f0:17:c3:e4:af:2e:1d:0d:e0:16:71:54:c3:df:
                    10:4e:6f:c4:23:4f:72:b9:d7:52:2d:33:42:fe:43:
                    20:68:32:67:f8:90:50:17:8a:2c:35:d3:c4:3e:b6:
                    c3:79:89:39:ab:d4:02:c3:9e:6e:44:b5:cc:60:a8:
                    98:e2:24:b7:4a:06:14:38:23:7d:e9:29:02:a1:e2:
                    10:40:c5:97:7b:35:17:ed:e3:27:1a:35:81:91:5c:
                    f7:64:67:61:cb:d7:5b:f6:fb:ec:e9:36:66:a8:23:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0D:52:6A:57:B4:0C:9F:AA:F2:22:CF:98:69:B8:E2:13:6C:26:C1
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:131::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:a2:db:68:a6:02:7d:62:e6:bc:69:b8:f1:03:0b:49:9f:
         36:7d:1e:42:d2:84:ff:eb:8c:00:d0:36:58:b2:da:5e:4e:3a:
         0b:4b:52:ff:26:d4:41:63:84:8c:a5:35:87:36:ba:34:76:a1:
         f6:7d:fd:48:0a:bc:8a:e3:1f:0e:49:b9:b2:84:53:e7:8d:c2:
         15:a5:15:67:0c:42:8b:45:00:b2:62:d3:99:33:40:65:14:51:
         73:2c:ff:f2:09:45:6a:bd:c3:ba:b3:7b:1a:3f:d0:ff:f7:b8:
         4b:88:06:db:82:8a:00:cd:dc:1b:d2:94:46:d1:9f:ca:04:96:
         87:cf:cf:fb:a1:d0:e4:92:6e:72:b5:2a:c9:8f:83:8b:79:6e:
         98:92:75:fa:4d:64:0b:b9:03:4d:5d:93:69:6c:98:9a:55:ba:
         4c:46:86:87:cc:43:5e:a7:18:3f:3d:69:fe:b1:16:a2:2f:2c:
         09:4a:05:94:91:b9:76:57:75:20:c2:5a:5f:7a:47:51:bb:aa:
         1b:ff:e8:1d:70:02:be:09:c8:ae:c3:1b:72:bd:16:e3:84:f7:
         49:d5:ef:1e:35:13:32:fd:75:db:f7:38:9d:c2:b5:f5:40:70:
         4e:9e:87:d2:1f:cd:45:02:db:0a:5f:da:d6:9d:78:f9:7e:16:
         27:63:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:56:52 2024 by rpki-client on console-fra.rpki-client.org