Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          BDNyOBSnth/LmzmARRoOPFlgVkmz3hNSdsem1HFwh/c=
Subject key identifier:   E0:50:ED:8C:CC:97:0E:3C:D7:04:AF:28:E8:48:45:92:04:38:C6:AF
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       72F20D5DCC026D7D77E7F2F9B2A4A1AD8E9A2308
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa
Signing time:             Sun 16 Apr 2023 09:53:31 +0000
ROA not before:           Sun 16 Apr 2023 09:48:31 +0000
ROA not after:            Sun 14 Apr 2024 09:53:31 +0000
asID:                     52210
IP address blocks:        2602:fcd3:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jul 2023 17:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f2:0d:5d:cc:02:6d:7d:77:e7:f2:f9:b2:a4:a1:ad:8e:9a:23:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 16 09:48:31 2023 GMT
            Not After : Apr 14 09:53:31 2024 GMT
        Subject: CN=E050ED8CCC970E3CD704AF28E84845920438C6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d9:98:d5:6a:a7:82:cf:60:c9:09:52:cb:37:
                    2c:8f:b7:98:85:42:37:21:8c:07:7c:ef:b2:5e:1e:
                    9e:10:55:d1:ab:93:05:11:19:78:a6:41:b1:47:bd:
                    2c:3e:78:7b:b8:a3:69:4f:04:6c:e0:e9:f8:4d:22:
                    aa:55:1b:b4:18:41:06:64:32:ec:ad:d7:fc:c6:76:
                    bc:4d:2d:dc:85:10:3f:4c:9a:9d:d7:e0:b9:41:61:
                    88:78:5a:f5:c1:0e:ee:2f:5e:6d:80:fe:4e:a1:1f:
                    e4:b7:7c:4d:f6:b2:14:4f:78:00:1a:06:a0:42:40:
                    9f:56:01:1f:20:91:4a:6e:fa:83:41:dd:74:7c:02:
                    51:fd:cc:e0:19:f1:db:58:77:ef:39:dc:7b:69:9e:
                    97:1b:71:cc:0a:06:3e:b0:6b:bc:e0:00:46:e0:46:
                    fa:ff:5a:78:9b:36:2a:83:82:2f:7c:94:a1:e3:68:
                    cf:6b:82:ef:04:9a:0e:5f:d4:c6:14:37:c9:e0:f4:
                    b8:7d:5e:72:f2:a7:bf:89:7f:87:c2:bc:93:21:b9:
                    16:45:1d:d7:47:b7:ff:eb:4b:a5:55:08:99:6b:c4:
                    68:6c:ab:82:04:3e:a4:8b:ea:d6:8d:d9:c4:e4:76:
                    81:2a:67:50:77:ac:9f:65:20:d1:d8:1a:fa:2b:bf:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:50:ED:8C:CC:97:0E:3C:D7:04:AF:28:E8:48:45:92:04:38:C6:AF
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:ac:4c:dd:85:1d:59:bb:2b:f1:f2:80:a5:af:46:61:57:f0:
         dd:02:a1:2a:97:d7:26:dd:f8:f3:5f:ba:e9:36:88:6e:70:64:
         8c:76:8a:f4:bf:7d:ae:c0:79:c9:c8:d7:27:5e:6a:15:59:ee:
         e1:fa:f5:32:71:b7:b3:12:45:e2:95:9d:41:0a:01:f6:2a:5e:
         e7:78:b6:3a:8e:21:49:78:7e:56:7c:c6:bc:ad:c8:8d:ae:0e:
         05:31:0e:eb:be:3a:ab:39:b6:00:9b:0f:51:7e:fd:01:5b:52:
         4c:dc:5c:fb:ad:b1:0b:21:29:29:71:37:8a:88:87:f1:28:43:
         83:22:bc:8a:cf:3c:5a:34:b4:13:fb:4f:11:22:d9:c1:6b:c9:
         05:99:fb:d7:74:7c:0b:00:28:af:20:ee:a8:71:ad:ca:5a:c2:
         74:a3:02:4a:15:9c:36:53:fd:02:bd:69:7b:a8:6b:16:a8:08:
         d7:9c:b4:c9:1e:d3:fb:90:4a:18:e7:30:5c:e0:91:e7:42:83:
         ae:29:d2:d2:3c:d6:20:a1:35:78:6c:9a:4a:90:62:0a:b5:f3:
         43:6a:7c:8f:35:13:fe:78:f6:92:98:fc:a8:21:c5:3c:17:f6:
         b4:70:ed:66:1a:85:f4:c9:e4:a1:43:49:ca:31:00:5d:fd:ad:
         34:58:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:19:52 2023 by rpki-client on console-ams.rpki-client.org