Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130373a3a2f34382d3438203d3e203533363637.roa
File:                     323630323a666364333a3130373a3a2f34382d3438203d3e203533363637.roa (raw, json)
Hash identifier:          p6vqXzxq2Dme15SYVQ1+4xkZmkFaLjw3qjqA/8//MJw=
Subject key identifier:   05:10:D2:54:49:2A:AC:E6:88:8A:CB:50:2F:E4:AF:48:B8:09:D8:AA
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       4C90B47A9F9CF357928691CDC775E8A81C853EDC
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130373a3a2f34382d3438203d3e203533363637.roa
Signing time:             Tue 10 Jun 2025 14:40:49 +0000
ROA not before:           Tue 10 Jun 2025 14:35:49 +0000
ROA not after:            Tue 09 Jun 2026 14:40:49 +0000
asID:                     53667
IP address blocks:        2602:fcd3:107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:90:b4:7a:9f:9c:f3:57:92:86:91:cd:c7:75:e8:a8:1c:85:3e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jun 10 14:35:49 2025 GMT
            Not After : Jun  9 14:40:49 2026 GMT
        Subject: CN=0510D254492AACE6888ACB502FE4AF48B809D8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6f:0f:d1:bb:33:08:96:f2:25:15:d1:92:96:
                    26:78:89:a9:b6:5e:55:3b:7d:eb:de:47:eb:c6:18:
                    f4:3c:f1:a7:9d:b9:50:c5:3c:a3:8d:d1:7a:f4:13:
                    0d:9d:92:84:92:b2:fa:ae:ee:12:ee:13:78:00:ce:
                    1a:04:28:9d:92:9a:da:1b:b8:d4:c7:38:94:e5:1c:
                    4f:b9:51:3c:3a:1f:8c:91:52:32:44:8e:e6:92:c7:
                    42:53:10:6a:d7:79:3b:b2:d2:29:49:5e:d0:1f:db:
                    56:7f:44:b1:d9:88:2e:72:9f:43:5a:4f:8a:90:3b:
                    66:3d:f8:8f:4e:15:4f:54:27:7a:9a:19:1b:d0:22:
                    ac:db:82:a0:cb:ab:38:45:b1:83:dc:3b:46:1a:c7:
                    3a:52:3c:c1:b6:83:85:03:87:71:d0:f7:30:92:d9:
                    bd:33:41:03:fe:fd:25:ea:ee:45:70:fa:aa:24:b6:
                    5d:49:7b:8e:a2:f4:43:12:c9:80:ae:7f:7a:fb:e0:
                    d8:72:93:87:3b:ae:63:2a:71:58:b2:ea:35:b7:fa:
                    0a:2f:ef:ee:99:de:75:f7:53:ee:e0:06:ea:b3:d1:
                    70:f9:63:0c:55:de:3e:ab:c7:92:61:c2:11:bf:21:
                    76:ff:e2:a6:a6:22:82:9e:12:86:14:3a:6a:bb:03:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:10:D2:54:49:2A:AC:E6:88:8A:CB:50:2F:E4:AF:48:B8:09:D8:AA
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130373a3a2f34382d3438203d3e203533363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:107::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:36:56:0b:cd:b0:35:df:90:bc:e5:87:b1:4c:bc:07:8e:
         a3:bf:f0:2d:2a:37:21:3d:ed:01:a1:b7:53:a6:b0:30:e7:37:
         fe:47:76:07:b3:c6:f1:c4:52:5b:98:81:71:b4:e7:5c:e4:30:
         69:a8:e6:7e:e7:bc:4e:c2:a4:0d:00:b9:9f:ba:93:5c:99:7d:
         78:20:e2:62:f1:ff:d5:77:c4:d7:8a:a8:ba:ce:5f:10:d9:07:
         d4:08:45:c2:b8:ac:d4:d4:22:9a:14:10:fc:6b:18:e2:b5:e0:
         74:f9:f9:5e:a3:38:88:83:df:dd:85:6b:a0:f8:5c:8c:a9:35:
         ea:71:d2:86:ca:fa:4c:fa:24:6e:f4:04:a2:da:bc:ef:f0:81:
         13:f4:00:3e:89:da:51:43:7d:dd:32:f3:03:50:fd:dc:3e:43:
         28:61:fe:79:44:51:66:b3:b8:94:5a:01:06:94:b9:4c:16:06:
         b0:66:b7:62:2b:4e:2a:85:91:6a:d0:54:9c:19:3f:1b:a6:63:
         7b:93:7f:86:d8:24:1d:a0:27:99:fb:e7:14:a3:f6:33:16:a4:
         0a:62:e1:22:ed:57:c8:82:4b:24:44:dc:f7:2e:2e:f7:a7:cd:
         0a:f7:4e:60:79:19:23:4e:b3:fb:06:88:a6:29:da:01:fd:4e:
         80:e0:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:26:53 2025 by rpki-client