Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a343a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a343a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          7zkcTp9LLyhjCgw6rjJ6ss+XVSSM8RFmUfRxJYcHI30=
Subject key identifier:   9A:91:77:CE:AF:6C:A8:CF:44:5D:57:BC:D5:A4:6E:3B:75:A6:6A:50
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       4224404555DA91B4DD3D431BFA833B5DA3F00688
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a343a3a2f34382d3438203d3e203532323130.roa
Signing time:             Mon 02 Jun 2025 15:45:42 +0000
ROA not before:           Mon 02 Jun 2025 15:40:42 +0000
ROA not after:            Mon 01 Jun 2026 15:45:42 +0000
asID:                     52210
IP address blocks:        2602:fcd3:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:24:40:45:55:da:91:b4:dd:3d:43:1b:fa:83:3b:5d:a3:f0:06:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jun  2 15:40:42 2025 GMT
            Not After : Jun  1 15:45:42 2026 GMT
        Subject: CN=9A9177CEAF6CA8CF445D57BCD5A46E3B75A66A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:f7:d0:51:d0:42:17:17:6e:82:75:a0:97:
                    77:41:2c:f5:a3:fa:a9:21:1d:36:b2:77:05:9e:15:
                    ca:83:d2:32:a7:de:5c:37:b6:5a:a0:b8:e5:0b:87:
                    50:25:b8:93:13:e3:b9:a8:c5:0e:a7:85:a4:a2:33:
                    ce:a1:26:21:a5:7e:c6:e5:3d:60:4f:18:14:f1:23:
                    a1:b2:d1:2a:63:2b:36:00:16:a2:7b:c9:95:fb:ce:
                    14:f7:a2:d2:f8:4d:42:86:41:e0:49:2c:64:b3:f1:
                    c9:2c:a2:1d:89:39:e3:b3:84:a5:fa:e7:be:ce:a2:
                    5c:fa:0f:27:f3:ec:cc:6e:02:4a:cf:7b:9d:54:e5:
                    1c:65:19:e4:08:db:34:a3:19:de:3b:39:00:31:5f:
                    ca:5e:31:7f:57:73:eb:eb:8b:d4:2d:99:e3:e8:e2:
                    23:2d:6a:36:74:d2:01:58:8f:39:68:43:be:05:ea:
                    53:80:6d:9a:50:36:13:12:dc:6d:68:c4:39:7c:88:
                    b6:41:dd:14:77:70:52:73:2b:b8:9c:de:c5:6e:cd:
                    aa:f7:60:40:14:a9:01:4e:66:b9:8e:d8:ce:f5:78:
                    bd:22:84:04:69:55:ef:72:b1:1a:84:cc:04:8e:46:
                    e8:04:08:b9:30:54:5f:f8:52:e1:37:97:fe:48:83:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:91:77:CE:AF:6C:A8:CF:44:5D:57:BC:D5:A4:6E:3B:75:A6:6A:50
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a343a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:27:ab:da:f2:13:3e:1e:a3:9f:c8:e3:f5:a3:47:25:b0:de:
         4b:6c:d0:14:d1:2f:04:e3:9e:41:57:a7:c2:88:df:8e:42:9a:
         34:6f:73:53:0d:b9:48:07:33:07:d3:ae:c9:d0:66:0c:67:72:
         60:95:5c:6b:c1:0d:cf:9f:6f:04:39:32:15:7e:ff:a8:cf:2d:
         98:d7:e3:2d:08:54:b7:a1:c2:69:60:6f:70:78:c1:97:95:2e:
         eb:5f:2b:60:21:6a:d7:0e:8a:14:ce:f4:da:92:81:49:f5:2c:
         11:93:2c:7b:09:e1:89:a2:5f:6a:46:69:47:8c:68:ca:73:fe:
         2a:8f:4d:16:5c:78:98:a8:7a:bb:b1:f3:1e:d8:e5:7b:b9:93:
         f0:df:e5:20:d4:09:48:e2:aa:6b:d8:62:39:b8:79:5f:8b:7d:
         83:1d:55:84:2a:cf:06:ce:9d:09:dd:1e:a4:6b:8c:5a:72:38:
         9b:94:fc:54:66:02:82:1b:77:6a:86:cc:58:6b:93:8d:40:48:
         13:75:e6:98:59:8f:5e:cb:99:85:f2:ab:5d:60:fe:bc:57:98:
         24:9d:f5:db:9a:5e:1e:aa:20:dc:96:27:b1:7f:d1:02:c2:1d:
         49:20:68:23:52:ca:b4:e2:1c:bb:ac:85:14:b3:ec:ea:c1:eb:
         f2:3a:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:41 2025 by rpki-client