Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a623a3a2f34382d3438203d3e20343031303338.roa
File:                     323630323a666364333a623a3a2f34382d3438203d3e20343031303338.roa (raw, json)
Hash identifier:          vKWxMBHKId1lWyqkNUQuMR63MWOsj5DvXikxaViXi20=
Subject key identifier:   E2:15:F2:F0:14:B7:12:51:1E:2E:5B:DA:E1:AF:64:AD:22:6B:B1:C7
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       1800DEF29258385AC27A8CD641062A28D98EDE6A
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a623a3a2f34382d3438203d3e20343031303338.roa
Signing time:             Wed 08 May 2024 12:07:19 +0000
ROA not before:           Wed 08 May 2024 12:02:19 +0000
ROA not after:            Wed 07 May 2025 12:07:19 +0000
asID:                     401038
IP address blocks:        2602:fcd3:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 05:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:00:de:f2:92:58:38:5a:c2:7a:8c:d6:41:06:2a:28:d9:8e:de:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: May  8 12:02:19 2024 GMT
            Not After : May  7 12:07:19 2025 GMT
        Subject: CN=E215F2F014B712511E2E5BDAE1AF64AD226BB1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:1d:c5:a6:e3:39:2c:90:29:7a:80:34:e0:
                    e7:43:47:37:0f:ab:db:7a:df:aa:83:83:a1:7a:e9:
                    8b:f3:b3:68:a3:44:fd:22:35:89:52:e8:8a:96:11:
                    1d:8b:18:4b:c2:45:74:1f:ad:33:ad:fc:9d:dd:59:
                    3f:d0:bf:d8:d7:74:9a:64:4c:4e:f5:9d:59:19:5b:
                    d3:07:15:2a:b9:43:ad:70:8b:57:0b:b6:98:92:00:
                    07:b0:9b:c5:8a:f1:a0:e9:4c:06:cc:d9:67:a1:d5:
                    70:f6:e4:5a:a4:d0:7c:3f:5a:6b:d5:b6:60:dc:0a:
                    e0:cf:23:3e:78:8a:6b:aa:b5:b3:e4:c1:7b:9e:6d:
                    bf:f2:01:be:46:67:34:13:ff:24:3f:eb:46:14:9a:
                    2b:e4:47:56:fd:93:a0:0e:54:4f:bb:af:bf:e9:56:
                    8b:1c:20:1c:dd:c4:40:78:29:a9:2b:11:76:b6:34:
                    7e:14:a2:46:07:ba:75:04:12:4b:df:6a:8a:05:40:
                    23:d5:fb:fc:e1:f2:c4:e9:09:98:7d:68:dc:6d:78:
                    69:95:9a:d6:5b:59:49:bc:14:ef:47:a0:e3:57:a6:
                    d7:18:23:b6:a9:66:74:6f:e7:b4:56:77:9c:1d:3b:
                    eb:34:8e:7b:ac:a6:80:e5:41:10:7a:cf:2e:81:35:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:15:F2:F0:14:B7:12:51:1E:2E:5B:DA:E1:AF:64:AD:22:6B:B1:C7
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a623a3a2f34382d3438203d3e20343031303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:b8:8d:d8:d2:37:d2:ed:d6:01:7c:28:75:4a:b1:56:f0:
         c9:b4:b8:95:e4:3f:4e:1e:b2:12:09:2f:ff:cc:21:f2:3a:65:
         7f:d3:e4:78:9b:45:d9:41:20:3d:cc:8e:c6:a9:7d:84:a9:43:
         3e:9c:6b:d5:37:98:c0:a6:2c:7f:6d:1d:25:16:da:29:95:cf:
         79:3a:2b:de:a0:9e:84:20:03:f3:a1:ca:a6:be:4b:8a:fa:ac:
         80:2e:06:31:b1:d4:a7:a1:81:e0:6a:67:e1:e0:53:ce:ff:aa:
         1a:65:f9:55:ab:21:3e:f6:bb:11:10:46:4e:29:58:2b:c1:14:
         33:58:16:e9:d0:68:95:73:e9:0c:76:89:0d:44:66:06:df:ec:
         a6:5f:41:02:d3:7d:ca:cf:8d:5a:91:c8:94:2f:f3:20:d4:ef:
         64:6b:f3:50:db:25:78:ab:9e:a2:e5:f9:59:f6:07:b2:b2:02:
         33:cd:3c:4c:ab:d6:4b:df:b5:b6:79:00:ce:a5:99:5a:12:d3:
         c4:81:4f:86:1e:9b:a2:18:9c:4b:68:b5:53:44:36:59:e0:ef:
         e6:81:45:7e:16:63:f5:2c:0f:e4:e0:1d:05:63:aa:0a:e3:52:
         d7:7b:20:10:be:ac:db:24:6a:3b:13:ce:b7:3a:50:8d:ec:3d:
         1f:cf:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:31 2024 by rpki-client on console-fra.rpki-client.org