Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa
File:                     323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa (raw, json)
Hash identifier:          CS/WwVOd1hvmJZlr+fD2FV6yOttvBPdp0vK/bXiYzkE=
Subject key identifier:   44:72:ED:38:41:34:AB:82:90:0F:34:9E:C2:C0:7D:29:B9:5E:32:84
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       48FC5FC1EA596BE8E3B62F31A7FF2680D76266AB
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa
Signing time:             Sun 16 Feb 2025 11:13:31 +0000
ROA not before:           Sun 16 Feb 2025 11:08:31 +0000
ROA not after:            Sun 15 Feb 2026 11:13:31 +0000
asID:                     200570
IP address blocks:        2602:fcd3:131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fc:5f:c1:ea:59:6b:e8:e3:b6:2f:31:a7:ff:26:80:d7:62:66:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:31 2025 GMT
            Not After : Feb 15 11:13:31 2026 GMT
        Subject: CN=4472ED384134AB82900F349EC2C07D29B95E3284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:a4:12:ae:1c:ba:f2:03:89:f4:a1:e7:55:
                    25:a8:29:63:f1:dc:79:18:84:37:25:c7:cc:13:a1:
                    95:6e:3d:cf:ef:7b:12:2e:fe:95:9d:96:36:c8:1a:
                    f3:fe:a8:cf:41:db:8c:4d:e6:d5:4d:f2:b9:2a:39:
                    1a:4c:90:82:06:5b:52:1c:11:b8:c0:04:69:ed:b8:
                    e3:72:fc:fc:02:e1:75:50:ce:38:1f:df:5a:7b:ee:
                    97:78:ac:c2:b6:0d:1a:4c:04:18:57:f0:b3:b3:f4:
                    25:c1:75:66:42:90:91:4f:99:13:86:2f:49:31:f5:
                    30:c3:bb:1e:fd:bb:21:a0:68:80:fa:46:70:54:da:
                    8b:f8:9e:d9:0c:d4:83:a3:1a:79:de:a5:10:c8:66:
                    b3:e3:75:1b:74:88:4a:52:64:70:ec:5c:49:28:b5:
                    c2:7f:d7:0b:70:21:f6:58:65:f3:a1:2a:07:96:26:
                    df:cc:55:88:69:75:de:8e:65:4d:56:00:e9:92:0f:
                    37:04:c8:c5:11:ee:f5:5d:62:29:02:fa:79:ce:a9:
                    8b:6b:c1:98:8c:ec:38:eb:29:8b:4d:95:92:17:52:
                    d0:33:b0:83:20:52:95:ba:b5:c4:b6:17:6c:80:89:
                    02:9d:22:5a:05:26:fb:a3:9d:78:28:dd:c1:90:ec:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:72:ED:38:41:34:AB:82:90:0F:34:9E:C2:C0:7D:29:B9:5E:32:84
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:131::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:51:7a:3c:5b:44:1b:04:c9:db:10:41:e4:72:ea:15:90:b5:
         fb:5a:ab:92:30:1a:fb:80:5b:e6:9d:89:1e:11:53:4f:04:ca:
         5a:11:7c:d6:eb:85:cf:5b:97:99:6d:50:cb:a6:ac:f2:87:77:
         2b:45:a6:78:c8:60:4a:16:d0:8a:66:08:51:8d:7b:1e:d0:02:
         1c:02:c0:6f:b3:60:6b:10:4f:b7:0c:67:60:38:6f:7e:90:2b:
         07:69:6f:8e:01:21:ea:ab:1a:e8:78:e7:14:8e:01:b9:82:78:
         c7:4d:4f:e4:15:10:ae:55:ab:49:5b:4b:fa:bf:67:ff:08:be:
         09:16:b7:16:d5:16:a1:11:5f:cb:dd:1b:e3:f5:ca:e4:fe:59:
         c0:47:c6:1c:54:ac:eb:85:80:ba:24:55:ab:51:a9:59:19:d1:
         dd:b6:b3:6d:dc:4a:72:9b:05:b9:05:74:34:80:bd:1d:bd:87:
         89:8f:c8:ec:73:12:5b:12:b5:95:45:3c:da:f0:aa:df:31:29:
         71:3f:7b:99:fe:24:8d:49:73:f3:b1:b5:6c:7d:14:b8:06:fa:
         86:3f:f7:cc:92:70:36:4e:54:80:3c:6a:a6:89:a1:2c:9c:76:
         62:d7:94:44:d6:97:d3:b2:ba:ce:51:bb:f1:a5:b8:d7:e6:e3:
         c0:1d:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:28 2025 by rpki-client