Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
File:                     326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa (raw, json)
Hash identifier:          ac94RfYRpfEUxIZEvv3OUNfLNnWtFFP0b8he3g1FYRE=
Subject key identifier:   A3:F1:89:E1:64:E4:F4:F5:FF:C5:75:26:37:E8:AB:BB:6F:AB:5A:26
Certificate issuer:       /CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Certificate serial:       381F21395E7A148C13218FBAA71BAD7749CC562F
Authority key identifier: BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
Signing time:             Fri 04 Jul 2025 15:28:16 +0000
ROA not before:           Fri 04 Jul 2025 15:23:16 +0000
ROA not after:            Fri 03 Jul 2026 15:28:16 +0000
asID:                     52210
IP address blocks:        2a0a:6040:c500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1f:21:39:5e:7a:14:8c:13:21:8f:ba:a7:1b:ad:77:49:cc:56:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
        Validity
            Not Before: Jul  4 15:23:16 2025 GMT
            Not After : Jul  3 15:28:16 2026 GMT
        Subject: CN=A3F189E164E4F4F5FFC5752637E8ABBB6FAB5A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:04:c7:8a:12:8e:3a:3a:03:62:3b:1b:2a:
                    ed:cc:f0:84:1f:e6:b5:85:6d:51:d0:82:9a:18:35:
                    58:75:2e:a5:60:f9:90:7e:a7:de:ab:3e:34:7e:19:
                    b5:ee:f7:66:18:8d:cb:57:be:01:7f:26:d3:cb:55:
                    af:b1:ce:1b:c0:56:7c:58:56:ae:f0:bb:4d:82:75:
                    5b:a9:57:bb:af:9f:34:c0:1b:15:4f:71:f9:c1:ee:
                    69:09:ff:bf:c7:0d:6a:65:d5:0e:53:23:b2:ce:3b:
                    2f:af:c8:c5:c6:08:ce:eb:cf:69:bd:cd:62:df:59:
                    1e:b5:c6:d6:ea:14:70:67:a9:98:07:07:5c:f9:0d:
                    37:5d:8b:11:32:65:b4:d0:76:62:c2:f1:72:0d:65:
                    61:65:4d:4a:7b:87:0f:e4:ef:d0:a3:16:83:21:c3:
                    2f:c5:32:c2:4c:c7:37:09:86:e6:fc:95:82:1a:1b:
                    4c:d0:03:82:d3:32:f4:42:9e:4f:ff:8d:48:fe:27:
                    d4:cd:f6:1f:34:41:9d:4c:dd:d7:2b:ea:ba:b2:a7:
                    93:c6:fa:bd:f8:b2:63:96:0f:9c:5f:bb:fa:7c:54:
                    51:b6:f7:82:f7:77:51:48:bd:4e:2a:98:47:78:fa:
                    70:dd:23:d6:17:60:7a:1d:6a:52:26:a4:62:d1:41:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F1:89:E1:64:E4:F4:F5:FF:C5:75:26:37:E8:AB:BB:6F:AB:5A:26
            X509v3 Authority Key Identifier:
                keyid:BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:01:70:94:d2:87:e8:fb:19:ff:87:21:c4:48:4b:19:27:d5:
         b7:b8:f1:84:50:76:d5:5e:9a:49:5f:19:54:64:28:80:2e:e3:
         d8:a0:3f:ed:c7:9f:3e:22:48:e1:f4:ed:73:49:3f:82:bc:37:
         d5:0b:d0:88:88:1d:b2:5e:5f:6c:88:62:4d:2e:99:4e:a4:e2:
         4b:e1:f5:8c:43:42:ea:d6:ad:a1:64:41:0a:db:95:eb:d8:dc:
         c1:2d:07:15:e9:60:81:52:e1:db:ca:e7:6f:c2:00:e2:e1:78:
         99:43:03:0f:e8:44:56:62:f1:14:e1:1d:e3:c3:8c:0a:59:21:
         28:33:7c:3a:e3:d0:15:ab:14:bb:2b:34:de:ea:00:73:ad:2d:
         71:f4:a6:d2:f1:cc:19:61:84:24:c7:f7:0c:19:85:77:dd:b3:
         9e:7c:1a:97:35:fc:70:9a:09:93:1c:8d:c6:18:1a:29:8f:d9:
         28:40:8d:ed:81:32:2b:ec:8f:df:7b:db:bc:57:05:9d:c3:5a:
         d7:ed:d3:b0:55:11:57:05:54:a7:3d:d0:6e:db:d5:90:0f:b4:
         29:28:30:e9:0e:7e:ea:da:b3:0e:92:1a:12:ed:a3:68:fb:d0:
         29:4b:18:c2:7b:c6:41:12:9c:9d:76:08:06:d2:86:a9:e3:f8:
         e3:08:a0:13
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUOB8hOV56FIwTIY+6pxutd0nMVi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0Nzg3NzdEODJDNDk2MjI1RDhBMUVCQ0U0RkI0RDNE
OUVGN0Q1MjAeFw0yNTA3MDQxNTIzMTZaFw0yNjA3MDMxNTI4MTZaMDMxMTAvBgNV
BAMTKEEzRjE4OUUxNjRFNEY0RjVGRkM1NzUyNjM3RThBQkJCNkZBQjVBMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0QTHihKOOjoDYjsbKu3M8IQf
5rWFbVHQgpoYNVh1LqVg+ZB+p96rPjR+GbXu92YYjctXvgF/JtPLVa+xzhvAVnxY
Vq7wu02CdVupV7uvnzTAGxVPcfnB7mkJ/7/HDWpl1Q5TI7LOOy+vyMXGCM7rz2m9
zWLfWR61xtbqFHBnqZgHB1z5DTddixEyZbTQdmLC8XINZWFlTUp7hw/k79CjFoMh
wy/FMsJMxzcJhub8lYIaG0zQA4LTMvRCnk//jUj+J9TN9h80QZ1M3dcr6rqyp5PG
+r34smOWD5xfu/p8VFG294L3d1FIvU4qmEd4+nDdI9YXYHodalImpGLRQcQPAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUo/GJ4WTk9PX/xXUmN+iru2+rWiYwHwYDVR0j
BBgwFoAUv0eHd9gsSWIl2KHrzk+009nvfVIwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzUvQkY0Nzg3NzdEODJDNDk2MjI1
RDhBMUVCQ0U0RkI0RDNEOUVGN0Q1Mi5jcmwwegYIKwYBBQUHAQEEbjBsMGoGCCsG
AQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VE
SUUtUlBLSS80L0JGNDc4Nzc3RDgyQzQ5NjIyNUQ4QTFFQkNFNEZCNEQzRDlFRjdE
NTIuY2VyMIGjBggrBgEFBQcBCwSBljCBkzCBkAYIKwYBBQUHMAuGgYNyc3luYzov
L2tyaWxsLmFjY3VyaXN0ZWNobm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hu
b2xvZ2llcy81LzMyNjEzMDYxM2EzNjMwMzQzMDNhNjMzNTMwMzAzYTNhMmYzNDMw
MmQzNDMwMjAzZDNlMjAzNTMyMzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMUwDQYJKoZI
hvcNAQELBQADggEBACMBcJTSh+j7Gf+HIcRISxkn1be48YRQdtVemklfGVRkKIAu
49igP+3Hnz4iSOH07XNJP4K8N9UL0IiIHbJeX2yIYk0umU6k4kvh9YxDQurWraFk
QQrblevY3MEtBxXpYIFS4dvK52/CAOLheJlDAw/oRFZi8RThHePDjApZISgzfDrj
0BWrFLsrNN7qAHOtLXH0ptLxzBlhhCTH9wwZhXfds558Gpc1/HCaCZMcjcYYGimP
2ShAje2BMivsj99727xXBZ3DWtft07BVEVcFVKc90G7b1ZAPtCkoMOkOfurasw6S
GhLto2j70ClLGMJ7xkESnJ12CAbShqnj+OMIoBM=
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:40:56 2025 by rpki-client