Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162343a3a2f34382d3438203d3e20323033343533.roa
File:                     323630323a666364333a3162343a3a2f34382d3438203d3e20323033343533.roa (raw, json)
Hash identifier:          bl975sjdP2acCth+Abl3KxbWIPFNsD3ri99bwOjkkzQ=
Subject key identifier:   07:60:97:68:8A:D0:4B:F4:17:19:3B:7E:08:1A:1F:A1:8A:6E:6C:A3
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       31F89289CF3CB840DBF092287994840269FC6E6F
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162343a3a2f34382d3438203d3e20323033343533.roa
Signing time:             Sun 17 Mar 2024 10:27:22 +0000
ROA not before:           Sun 17 Mar 2024 10:22:22 +0000
ROA not after:            Sun 16 Mar 2025 10:27:22 +0000
asID:                     203453
IP address blocks:        2602:fcd3:1b4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 05:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f8:92:89:cf:3c:b8:40:db:f0:92:28:79:94:84:02:69:fc:6e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:22 2024 GMT
            Not After : Mar 16 10:27:22 2025 GMT
        Subject: CN=076097688AD04BF417193B7E081A1FA18A6E6CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:b2:0f:6f:c4:b8:99:6a:2e:6e:ac:49:65:
                    91:04:be:2a:cc:a5:26:0b:0f:96:b7:36:f9:14:3d:
                    cb:27:de:81:6c:51:e8:8c:58:07:df:a1:2c:89:96:
                    50:37:34:f8:7e:12:02:30:66:a5:f8:ca:b1:e8:a7:
                    81:cb:5f:5c:46:f7:67:89:a6:6a:3f:d6:fb:7f:fc:
                    d5:c3:e9:36:9e:21:88:b2:8a:b4:9b:e8:61:9b:eb:
                    94:17:fe:c0:f2:67:62:3f:86:3b:2a:28:64:12:04:
                    02:4c:c0:1d:cc:df:6d:43:5a:4b:d9:90:b8:de:ee:
                    30:d1:24:2c:b4:46:20:c0:70:01:e9:1d:49:a0:f9:
                    15:4a:b7:fe:e2:be:20:0f:e9:82:6e:db:b1:18:2b:
                    b3:bb:e8:cd:83:19:51:d7:14:b9:4b:8a:f1:31:e6:
                    7a:b1:00:36:15:50:64:42:5b:e0:21:17:ed:11:6e:
                    07:df:2a:ba:9d:23:a8:a7:9b:51:72:c2:ac:f6:3b:
                    17:8c:6d:e5:a3:ad:05:77:a6:a1:be:d1:a4:a6:11:
                    65:6d:5d:f0:57:c2:d6:f1:27:91:e5:ac:94:22:f5:
                    1c:c6:de:04:da:8c:06:c9:d3:fb:f9:2a:b2:d6:d0:
                    27:7c:f7:da:68:20:14:b0:67:ee:a1:f8:c5:75:8e:
                    15:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:60:97:68:8A:D0:4B:F4:17:19:3B:7E:08:1A:1F:A1:8A:6E:6C:A3
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162343a3a2f34382d3438203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:c5:e3:6d:44:34:35:a9:c7:b2:c7:00:f8:72:a2:63:db:
         0b:8d:fc:cf:c5:35:29:d0:30:c2:d4:cf:84:c5:8c:00:4a:5a:
         09:15:74:48:c5:74:d3:25:1b:02:ba:9c:4a:c5:95:82:9c:be:
         bf:c6:f4:f3:e0:06:be:cb:43:3f:b6:93:e7:3c:06:ea:07:3f:
         b1:b5:33:c2:9b:67:02:29:ac:b5:61:bb:6b:96:c6:96:34:05:
         c6:7a:4b:08:42:a2:da:c9:e9:15:9d:41:b5:4f:13:a3:c8:4f:
         29:60:b8:20:44:af:ad:e1:fc:f4:88:0d:e9:3b:7a:54:79:c5:
         5f:1b:62:14:5a:36:ec:82:8f:00:fc:df:30:7d:9c:05:85:e3:
         a1:07:9c:a0:5a:00:94:f0:43:11:c0:8d:cd:69:5c:55:f1:21:
         42:3c:0b:10:29:78:10:38:91:43:77:52:c7:f1:45:77:ce:26:
         44:4f:7c:5c:6b:fd:c8:eb:82:fd:3c:50:d6:52:41:b3:d4:ae:
         f4:7c:90:b6:be:80:53:36:60:76:cd:b7:7e:5a:52:39:b2:29:
         c9:e1:d5:67:f4:82:4c:57:54:01:7e:a8:39:7f:1e:b1:d9:17:
         ac:1f:2b:51:7d:a5:67:09:b1:4d:c6:80:26:73:0f:4d:33:ba:
         45:0e:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:31 2024 by rpki-client on console-fra.rpki-client.org