Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/3139322e36372e33352e3132382f32352d3332203d3e20323135383230.roa
File:                     3139322e36372e33352e3132382f32352d3332203d3e20323135383230.roa (raw, json)
Hash identifier:          jIfQRkACWyTiR5Mbmv0I29M0Ux0EBQynCrVg5YmGNIs=
Subject key identifier:   7F:4C:1A:FC:76:F1:02:1F:45:DA:04:D0:20:20:22:F9:B9:C6:26:FC
Certificate issuer:       /CN=A9362D4E85AC589FD5EAF1AFB38B36251868267D
Certificate serial:       84B6D002B7534C1D07EA11A7B13054693AFBF8
Authority key identifier: A9:36:2D:4E:85:AC:58:9F:D5:EA:F1:AF:B3:8B:36:25:18:68:26:7D
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/3139322e36372e33352e3132382f32352d3332203d3e20323135383230.roa
Signing time:             Wed 11 Sep 2024 11:58:24 +0000
ROA not before:           Wed 11 Sep 2024 11:53:24 +0000
ROA not after:            Wed 10 Sep 2025 11:58:24 +0000
asID:                     215820
IP address blocks:        192.67.35.128/25 maxlen: 32

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 05:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            84:b6:d0:02:b7:53:4c:1d:07:ea:11:a7:b1:30:54:69:3a:fb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9362D4E85AC589FD5EAF1AFB38B36251868267D
        Validity
            Not Before: Sep 11 11:53:24 2024 GMT
            Not After : Sep 10 11:58:24 2025 GMT
        Subject: CN=7F4C1AFC76F1021F45DA04D0202022F9B9C626FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:59:01:30:5b:52:b4:02:a0:41:8a:7f:fc:b0:
                    b4:53:55:34:77:c7:ca:84:f1:c3:1f:d5:97:c5:1e:
                    8b:af:0c:e2:43:4a:c0:fc:e9:f3:0f:f7:cc:a2:65:
                    38:b6:6d:81:4a:f5:e8:64:ea:37:e8:70:ce:b3:78:
                    2a:71:86:aa:f8:d2:27:9a:ce:78:bd:9f:11:af:6f:
                    57:0b:f4:6b:36:d8:1a:08:4a:1f:cc:98:d7:75:c9:
                    88:85:cc:79:74:f5:77:1c:5b:ab:f2:3b:e1:a6:aa:
                    73:2e:51:cc:a5:73:59:b0:86:85:2b:ed:75:92:3b:
                    a6:65:ec:e0:1a:3a:02:79:74:68:ff:26:9e:dc:24:
                    79:f1:db:a4:af:15:d8:d4:ac:10:46:9e:10:67:f4:
                    7d:0f:94:6a:09:0e:77:c5:5e:33:2d:65:c0:97:b0:
                    d8:64:83:d9:73:18:7b:f7:16:63:23:f7:5b:01:6a:
                    6e:56:2a:f8:ed:be:07:b8:9b:10:97:96:bc:b2:fe:
                    a4:8a:d2:09:c3:f1:b3:db:db:9f:2c:64:ae:0c:26:
                    1b:b6:3b:8e:4a:e6:1a:98:11:3b:86:81:e2:4b:88:
                    c4:57:d4:22:8b:83:48:63:6f:c6:7e:21:0c:fc:f7:
                    9d:08:71:d8:a5:c8:ec:ed:fe:03:fe:4c:e0:ca:77:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4C:1A:FC:76:F1:02:1F:45:DA:04:D0:20:20:22:F9:B9:C6:26:FC
            X509v3 Authority Key Identifier:
                keyid:A9:36:2D:4E:85:AC:58:9F:D5:EA:F1:AF:B3:8B:36:25:18:68:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/3139322e36372e33352e3132382f32352d3332203d3e20323135383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.35.128/25

    Signature Algorithm: sha256WithRSAEncryption
         0f:74:73:3e:ef:7c:fa:c5:23:51:3a:75:5c:c6:41:41:f5:05:
         f8:6c:e9:a3:a1:02:41:27:49:72:b2:1f:8c:e6:7c:05:86:f4:
         c3:43:e7:63:3c:a6:d6:ee:69:06:d3:be:a0:e6:2e:56:ff:41:
         e7:8b:ca:05:56:15:e3:78:1f:7d:ee:a6:7d:0d:c7:23:ff:d8:
         9d:01:44:96:e3:61:a6:5c:52:42:cf:a5:7d:af:60:fa:04:d8:
         3b:1a:0a:a9:2e:d4:1d:ce:5b:f0:e5:7b:bd:01:60:51:82:7d:
         d6:6b:fc:69:bc:90:ec:d1:99:06:30:e5:57:29:d5:84:2c:74:
         0b:12:11:0a:91:1f:91:03:17:96:8d:18:36:cb:65:48:00:40:
         fa:d9:5c:33:b9:d0:61:3c:1a:8e:79:3a:98:db:a5:69:a5:7d:
         b8:a3:78:e2:c2:57:1d:b0:d8:fc:2e:d1:11:c2:ad:fc:06:6d:
         4d:72:2d:23:25:29:a9:38:38:c7:ff:75:ef:f0:bc:24:22:01:
         dc:a6:6a:c3:80:90:80:00:74:59:f6:07:81:c3:94:48:02:a4:
         93:ca:a4:90:70:73:86:89:4b:87:9a:c5:cc:9a:cb:e2:9c:97:
         c8:ff:21:1a:eb:7c:8c:93:c9:0d:3b:6b:a2:66:29:53:e3:ea:
         ea:2c:dc:76
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUAIS20AK3U0wdB+oRp7EwVGk6+/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkzNjJENEU4NUFDNTg5RkQ1RUFGMUFGQjM4QjM2MjUx
ODY4MjY3RDAeFw0yNDA5MTExMTUzMjRaFw0yNTA5MTAxMTU4MjRaMDMxMTAvBgNV
BAMTKDdGNEMxQUZDNzZGMTAyMUY0NURBMDREMDIwMjAyMkY5QjlDNjI2RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcWQEwW1K0AqBBin/8sLRTVTR3
x8qE8cMf1ZfFHouvDOJDSsD86fMP98yiZTi2bYFK9ehk6jfocM6zeCpxhqr40iea
zni9nxGvb1cL9Gs22BoISh/MmNd1yYiFzHl09XccW6vyO+GmqnMuUcylc1mwhoUr
7XWSO6Zl7OAaOgJ5dGj/Jp7cJHnx26SvFdjUrBBGnhBn9H0PlGoJDnfFXjMtZcCX
sNhkg9lzGHv3FmMj91sBam5WKvjtvge4mxCXlryy/qSK0gnD8bPb258sZK4MJhu2
O45K5hqYETuGgeJLiMRX1CKLg0hjb8Z+IQz8950IcdilyOzt/gP+TODKd4htAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUf0wa/HbxAh9F2gTQICAi+bnGJvwwHwYDVR0j
BBgwFoAUqTYtToWsWJ/V6vGvs4s2JRhoJn0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzUvQTkzNjJENEU4NUFDNTg5RkQ1RUFGMUFGQjM4QjM2MjUxODY4MjY3RC5j
cmwwgYkGCCsGAQUFBwEBBH0wezB5BggrBgEFBQcwAoZtcnN5bmM6Ly9rcmlsbC5h
Y2N1cmlzdGVjaG5vbG9naWVzLmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMv
MC9BOTM2MkQ0RTg1QUM1ODlGRDVFQUYxQUZCMzhCMzYyNTE4NjgyNjdELmNlcjCB
sQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUFBzALhoGRcnN5bmM6Ly9yc3luYy5w
YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1NDEt
YmNjMS0yNzY1NDNhMjVjN2QvNS8zMTM5MzIyZTM2MzcyZTMzMzUyZTMxMzIzODJm
MzIzNTJkMzMzMjIwM2QzZTIwMzIzMTM1MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHwEMjgDAN
BgkqhkiG9w0BAQsFAAOCAQEAD3RzPu98+sUjUTp1XMZBQfUF+Gzpo6ECQSdJcrIf
jOZ8BYb0w0PnYzym1u5pBtO+oOYuVv9B54vKBVYV43gffe6mfQ3HI//YnQFEluNh
plxSQs+lfa9g+gTYOxoKqS7UHc5b8OV7vQFgUYJ91mv8abyQ7NGZBjDlVynVhCx0
CxIRCpEfkQMXlo0YNstlSABA+tlcM7nQYTwajnk6mNulaaV9uKN44sJXHbDY/C7R
EcKt/AZtTXItIyUpqTg4x/917/C8JCIB3KZqw4CQgAB0WfYHgcOUSAKkk8qkkHBz
holLh5rFzJrL4pyXyP8hGut8jJPJDTtromYpU+Pq6izcdg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:16 2024 by rpki-client on console-ams.rpki-client.org