Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          Ly8a0Huub1yeXuTFSclI1dJZXEnjVya+O54g9AkjnQI=
Subject key identifier:   12:3B:8D:19:59:4C:5C:45:05:B0:2A:FD:39:63:3D:02:54:E9:81:BF
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       0B1A4533E52E83C38A8C47FF81AFADE9B1797A68
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa
Signing time:             Sun 16 Feb 2025 11:13:30 +0000
ROA not before:           Sun 16 Feb 2025 11:08:30 +0000
ROA not after:            Sun 15 Feb 2026 11:13:30 +0000
asID:                     52210
IP address blocks:        2602:fcd3:1b5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1a:45:33:e5:2e:83:c3:8a:8c:47:ff:81:af:ad:e9:b1:79:7a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:30 2025 GMT
            Not After : Feb 15 11:13:30 2026 GMT
        Subject: CN=123B8D19594C5C4505B02AFD39633D0254E981BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:9b:f6:4e:86:72:3c:0f:44:b2:3f:11:a6:
                    07:3a:81:90:b3:6a:1f:2a:bf:91:b2:6d:06:4d:bb:
                    9c:88:63:04:6b:3b:1b:c4:e4:a2:7b:c3:a8:4e:60:
                    aa:4c:9d:9f:ad:cb:c2:f8:91:0a:1e:9c:5c:25:07:
                    f8:f7:0d:20:7b:82:5a:3a:49:3d:39:81:07:1d:9d:
                    84:d4:cb:38:3d:2f:37:de:3e:89:72:31:71:40:ac:
                    17:e2:50:b2:c7:88:07:1c:a9:c9:d1:ce:42:84:1f:
                    c8:b7:a7:d0:aa:3b:55:97:3c:97:28:6f:69:9f:24:
                    22:d8:e2:2f:f4:d2:ed:2e:fd:88:9e:50:09:e5:7c:
                    65:2c:f0:fa:fe:06:98:14:41:d7:02:60:23:fb:ce:
                    df:82:69:e7:c6:45:9d:d9:57:b9:b1:3a:f7:13:f8:
                    e3:12:61:82:29:ad:fb:4a:b1:d4:97:0d:90:10:75:
                    28:d2:6a:dc:85:b6:fb:77:8d:4d:b9:85:f2:be:f7:
                    3a:ab:e6:e3:a0:d9:05:14:d7:9d:be:46:fd:d9:93:
                    3b:34:51:aa:11:05:9b:c3:8f:c4:ee:8b:fe:b4:9e:
                    bf:f1:d5:f6:72:2d:d5:f9:f5:30:0b:b3:19:c7:b6:
                    02:24:23:bd:61:4d:41:c5:50:bd:c6:9f:00:c1:81:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3B:8D:19:59:4C:5C:45:05:B0:2A:FD:39:63:3D:02:54:E9:81:BF
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:d3:ed:c1:55:ca:bb:3a:a1:1f:6f:dc:f8:db:bd:89:56:22:
         6b:a9:bb:18:ae:1d:c0:55:cc:e9:55:93:f9:a0:c4:59:02:20:
         d4:88:74:15:cd:20:78:7c:3f:ef:ad:38:70:8d:4c:ec:ce:f8:
         dd:1b:f9:e3:2a:cb:ce:2d:8b:dd:10:29:a3:8e:6d:f7:60:b9:
         11:c7:74:5a:0d:ed:b7:4d:ba:36:5a:3b:96:e9:97:4f:8f:84:
         c0:be:01:d7:6a:d9:74:ae:d8:f7:48:3a:11:e4:e3:63:ec:b2:
         f1:09:83:84:f3:82:d5:9b:e7:2f:04:84:a5:cc:38:6c:66:c1:
         75:66:45:c5:8e:25:89:11:3c:30:7f:f5:be:9c:fe:19:f0:78:
         74:45:dd:6f:2a:29:21:bf:b1:85:52:65:88:db:3c:1e:90:cf:
         ac:ad:72:21:e1:b3:91:31:f8:47:7f:70:32:4b:73:4a:b3:da:
         5e:92:4f:fa:f5:61:8d:e5:ed:84:1f:1a:a3:07:bf:2a:4c:f2:
         b3:b5:59:71:17:9a:6f:35:0a:3e:8d:12:f6:54:f8:dd:b5:2a:
         0e:14:1f:31:b7:40:74:62:eb:be:84:df:cd:11:d3:6c:9c:5d:
         63:7f:f5:cb:20:1b:36:a5:92:1e:d6:ad:3f:b9:d9:9d:44:3f:
         6b:41:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:21:06 2025 by rpki-client