Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a313a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a313a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          rECcSl6xrjim88bjiq5aaMHstkXA+9/GCBBI+jAdffk=
Subject key identifier:   DE:81:B5:07:1C:E7:5B:9F:1C:85:69:C4:82:B3:35:5E:01:43:32:79
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       56FFD3CEAB97F40BFD7ACDF1D4255AF06CD6857C
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a313a3a2f34382d3438203d3e203532323130.roa
Signing time:             Sun 17 Mar 2024 10:27:23 +0000
ROA not before:           Sun 17 Mar 2024 10:22:23 +0000
ROA not after:            Sun 16 Mar 2025 10:27:23 +0000
asID:                     52210
IP address blocks:        2602:fcd3:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ff:d3:ce:ab:97:f4:0b:fd:7a:cd:f1:d4:25:5a:f0:6c:d6:85:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:23 2024 GMT
            Not After : Mar 16 10:27:23 2025 GMT
        Subject: CN=DE81B5071CE75B9F1C8569C482B3355E01433279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:af:9d:6f:d6:b9:5d:29:0f:85:73:84:1f:
                    48:41:48:9d:43:be:ef:b4:85:0f:33:ec:b8:ac:8f:
                    13:0d:69:96:68:a8:45:b0:2e:56:6a:ba:25:ad:00:
                    e3:4c:d4:16:63:8f:92:e1:78:7f:71:97:3e:0c:82:
                    1d:de:26:21:13:ae:48:50:6a:6c:f1:7f:23:2d:a4:
                    d8:03:fd:da:8c:b8:57:e9:e1:14:30:82:21:16:77:
                    55:fd:3e:b0:b2:fc:34:be:f7:f8:e6:2c:d9:3f:d5:
                    fa:19:15:6d:8a:c9:42:4c:90:c3:1a:e0:e4:d0:bc:
                    2c:a8:25:77:dc:d0:2e:c2:1b:d6:e0:18:8d:44:32:
                    7c:19:8a:b2:aa:00:31:54:af:8d:96:90:98:2c:f7:
                    8a:0e:61:cd:f7:a0:f3:18:5a:f9:9e:7b:1c:9b:0b:
                    d0:11:35:91:00:c8:d9:72:4b:12:0d:c7:4b:01:ff:
                    90:c3:62:cd:2e:10:4d:7c:f7:7b:da:a0:56:0c:f8:
                    0e:f2:53:26:9e:cc:cd:a4:c2:21:5a:1e:3a:bc:86:
                    8a:61:e2:c5:a4:03:38:2a:f5:58:d1:47:ae:f1:3b:
                    2c:32:5b:c2:51:d0:4e:29:ed:47:bf:6f:a6:4b:b8:
                    0e:2f:5c:dc:36:78:c2:de:a3:ae:64:f9:a7:cc:40:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:81:B5:07:1C:E7:5B:9F:1C:85:69:C4:82:B3:35:5E:01:43:32:79
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a313a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:4f:72:1c:50:72:0f:4a:8b:cb:56:52:72:4a:b4:12:c0:
         06:bc:c7:61:93:06:57:9e:7d:0e:2a:f5:a3:1d:20:0a:5f:ef:
         0e:93:14:82:f6:98:79:69:2b:7b:af:92:0f:fa:4b:86:e0:2a:
         53:fa:7f:a4:5c:0a:0a:bf:70:f1:d3:b2:b9:27:98:e4:7f:b8:
         46:fc:c4:25:71:11:43:51:78:74:f6:ae:18:96:3a:1d:1f:78:
         dd:96:e2:07:2b:80:36:3f:50:aa:27:f2:03:17:ca:37:92:e4:
         70:d2:0a:fd:fe:2e:0a:ef:db:52:96:c2:ab:c7:08:22:ba:55:
         7f:72:49:45:61:05:1b:2a:fb:cd:71:d7:75:b4:18:2d:a7:01:
         e8:12:f5:15:53:ce:c1:22:b9:16:ee:a9:9e:c4:9b:a8:1d:0b:
         f8:b6:aa:3d:9b:23:d8:89:97:8a:8d:db:ec:fd:50:f4:d6:7a:
         c3:36:89:30:44:62:10:23:a1:10:12:75:19:4d:5d:f6:4c:79:
         93:69:28:7d:b6:b4:d3:80:28:f8:80:3f:52:12:e7:55:b3:90:
         56:87:15:d4:b5:dd:9e:68:cc:61:7c:8e:79:93:3b:6b:9c:ea:
         47:1d:c8:0a:79:b5:d3:fe:8f:cb:38:88:ab:9d:7c:d7:bd:7e:
         41:5e:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:18:29 2024 by rpki-client on console-fra.rpki-client.org