Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          dyvMMQpnURRipP9S987mJUBRlfVOfW/r7D/uNl/WWhw=
Subject key identifier:   1F:53:F5:43:14:3B:6E:95:6D:78:B8:84:5D:A2:EA:EB:12:9B:F7:44
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       744D334A95920B22344E32815DD6F896B40FF9E0
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa
Signing time:             Sun 17 Mar 2024 10:27:23 +0000
ROA not before:           Sun 17 Mar 2024 10:22:23 +0000
ROA not after:            Sun 16 Mar 2025 10:27:23 +0000
asID:                     52210
IP address blocks:        2602:fcd3:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 08:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4d:33:4a:95:92:0b:22:34:4e:32:81:5d:d6:f8:96:b4:0f:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:23 2024 GMT
            Not After : Mar 16 10:27:23 2025 GMT
        Subject: CN=1F53F543143B6E956D78B8845DA2EAEB129BF744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:7b:97:fe:d1:8d:28:94:99:8f:08:ab:88:
                    de:f6:d3:0d:11:8f:09:cc:2b:73:2f:71:e1:98:5d:
                    9b:14:27:d7:c3:32:1b:39:62:fc:5b:a9:e2:c8:80:
                    fa:2b:1a:95:cc:e9:ff:0d:0c:e2:d9:90:ec:34:4c:
                    09:25:95:ee:02:7f:5e:12:49:bf:c6:2e:d7:6b:6c:
                    bb:72:97:3c:98:9c:8b:98:f2:5c:f8:ec:12:06:5e:
                    f7:0a:55:58:ed:4c:1e:41:06:38:9c:06:48:25:53:
                    af:82:e9:bf:b9:03:72:a5:14:d7:66:c5:71:b2:32:
                    7e:52:86:15:a4:e9:b8:b7:db:aa:52:20:60:f6:54:
                    18:d8:1d:c9:bc:88:1e:54:82:9d:0b:43:90:58:a7:
                    be:db:4c:f8:e4:f8:3f:05:3a:56:55:ea:88:f1:d0:
                    14:13:09:92:75:8a:60:dc:a6:9b:03:a1:04:20:77:
                    8f:5c:8f:e6:9b:c1:f5:99:85:bd:27:9c:0b:20:8b:
                    fc:e1:2b:48:dc:19:a1:9d:14:39:b0:44:6e:80:9d:
                    27:9b:3f:4f:87:c9:a6:44:ff:14:b9:d7:53:ab:75:
                    94:2d:60:db:d6:ab:50:0a:96:3a:be:e6:ee:b0:78:
                    a5:f5:cc:a1:ab:32:4c:94:12:04:4c:19:ad:b3:38:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:F5:43:14:3B:6E:95:6D:78:B8:84:5D:A2:EA:EB:12:9B:F7:44
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:ce:bb:f4:ef:49:03:3a:13:9a:82:81:ed:62:47:19:0c:67:
         4a:ae:8b:8b:48:85:35:99:0a:2c:35:57:e2:b1:a8:71:c0:dd:
         95:b2:69:4b:23:20:8f:96:7c:d1:01:cb:45:40:de:18:ca:eb:
         9d:dd:f5:06:ea:11:03:e3:40:6d:5d:0c:4e:45:b9:7c:1f:38:
         a8:f2:ad:a6:52:54:6d:a4:56:5c:22:d4:15:c7:e9:7c:eb:84:
         92:45:a5:b5:12:f7:e5:be:17:56:fc:6a:c4:09:69:d3:25:a7:
         b4:0f:2f:2b:40:60:6b:b1:9e:42:c6:a7:e7:c4:00:92:a0:39:
         af:19:2b:a9:9a:c5:f0:a8:93:b6:b6:14:62:bb:71:8b:cd:c1:
         29:d6:4d:fa:f5:fc:6b:d3:40:c8:c1:46:81:68:4f:0e:8d:50:
         09:b3:34:af:d4:b3:60:10:0c:52:e0:d9:cd:e5:2f:a5:0d:f1:
         5c:8b:24:03:2a:d4:f8:61:48:f9:b2:5b:56:e2:38:b1:69:7a:
         c5:e9:ce:d6:22:db:8c:0d:da:cc:28:e9:10:19:33:2f:21:ea:
         ac:dc:fe:a4:f8:b8:69:ab:7b:b7:00:0b:f2:27:c1:7d:b2:ab:
         65:f0:d3:0f:62:41:dd:d5:09:f1:6c:77:0e:84:db:94:f6:23:
         17:f7:ef:da
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUdE0zSpWSCyI0TjKBXdb4lrQP+eAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5
YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjQwMzE3MTAyMjIzWhcNMjUwMzE2MTAyNzIz
WjAzMTEwLwYDVQQDEygxRjUzRjU0MzE0M0I2RTk1NkQ3OEI4ODQ1REEyRUFFQjEy
OUJGNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCh7l/7RjSiU
mY8Iq4je9tMNEY8JzCtzL3HhmF2bFCfXwzIbOWL8W6niyID6KxqVzOn/DQzi2ZDs
NEwJJZXuAn9eEkm/xi7Xa2y7cpc8mJyLmPJc+OwSBl73ClVY7UweQQY4nAZIJVOv
gum/uQNypRTXZsVxsjJ+UoYVpOm4t9uqUiBg9lQY2B3JvIgeVIKdC0OQWKe+20z4
5Pg/BTpWVeqI8dAUEwmSdYpg3KabA6EEIHePXI/mm8H1mYW9J5wLIIv84StI3Bmh
nRQ5sERugJ0nmz9Ph8mmRP8UuddTq3WULWDb1qtQCpY6vubusHil9cyhqzJMlBIE
TBmtsziN4wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFB9T9UMUO26VbXi4hF2i6usS
m/dEMB8GA1UdIwQYMBaAFIuDxdoDs8wCnZUhWgEyBZeBSzjwMA4GA1UdDwEB/wQE
AwIHgDB+BgNVHR8EdzB1MHOgcaBvhm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNo
bm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzhCODNDNURB
MDNCM0NDMDI5RDk1MjE1QTAxMzIwNTk3ODE0QjM4RjAuY3JsMIHzBggrBgEFBQcB
AQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82
M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvN2FmYWYxYzFiNzdl
ZWRhMWEzYTJlYmFkYTRiNGRhYzg5YWNiZjM4YjNkZjc1ZDNjZTkuY2VyMIGcBggr
BgEFBQcBCwSBjzCBjDCBiQYIKwYBBQUHMAuGfXJzeW5jOi8va3JpbGwuYWNjdXJp
c3RlY2hub2xvZ2llcy5jYS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzAvMzIz
NjMwMzIzYTY2NjM2NDMzM2EzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIz
MjMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAmAvzTAAUwDQYJKoZIhvcNAQELBQADggEBAIvOu/Tv
SQM6E5qCge1iRxkMZ0qui4tIhTWZCiw1V+KxqHHA3ZWyaUsjII+WfNEBy0VA3hjK
653d9QbqEQPjQG1dDE5FuXwfOKjyraZSVG2kVlwi1BXH6XzrhJJFpbUS9+W+F1b8
asQJadMlp7QPLytAYGuxnkLGp+fEAJKgOa8ZK6maxfCok7a2FGK7cYvNwSnWTfr1
/GvTQMjBRoFoTw6NUAmzNK/Us2AQDFLg2c3lL6UN8VyLJAMq1PhhSPmyW1biOLFp
esXpztYi24wN2swo6RAZMy8h6qzc/qT4uGmre7cAC/InwX2yq2Xw0w9iQd3VCfFs
dw6E25T2Ixf379o=
-----END CERTIFICATE-----
Generated at Thu Apr 25 08:30:39 2024 by rpki-client on console-fra.rpki-client.org