Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133323a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a3133323a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          wd9q8yrgbRYYe5ngYAS4yqEWVJCkTe4K8yquGLd1xFw=
Subject key identifier:   54:AC:A6:71:CA:2A:66:DB:F9:6E:BE:C5:F7:4C:1A:C6:F9:DF:EC:38
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       0A1EBF28A7E8716CA550DD5654751A07EC8CD19E
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133323a3a2f34382d3438203d3e203532323130.roa
Signing time:             Fri 02 May 2025 14:40:39 +0000
ROA not before:           Fri 02 May 2025 14:35:39 +0000
ROA not after:            Fri 01 May 2026 14:40:39 +0000
asID:                     52210
IP address blocks:        2602:fcd3:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 04:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1e:bf:28:a7:e8:71:6c:a5:50:dd:56:54:75:1a:07:ec:8c:d1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: May  2 14:35:39 2025 GMT
            Not After : May  1 14:40:39 2026 GMT
        Subject: CN=54ACA671CA2A66DBF96EBEC5F74C1AC6F9DFEC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a8:eb:fb:67:3e:fe:04:23:0b:00:8c:54:70:
                    f5:b8:b9:6b:db:95:e5:c0:a6:d3:79:ec:b6:6c:1c:
                    8c:5b:97:44:a2:1c:10:32:e3:2a:a3:e7:4e:f5:98:
                    ea:85:ee:da:d9:4a:11:2d:d4:8a:6d:00:75:d4:22:
                    bd:92:88:5e:3a:76:d8:33:23:a6:06:42:76:d7:6f:
                    67:1a:3c:b5:8b:db:c9:48:ae:f1:90:18:d4:5d:19:
                    36:82:44:b0:19:04:06:5e:34:bc:51:ec:c8:37:76:
                    ed:77:60:f2:81:9b:7b:59:3d:2b:2f:a9:d9:2f:de:
                    43:bc:cd:22:a0:ac:48:fd:e1:ae:3f:5c:43:73:e2:
                    3f:5b:9d:db:9a:c8:1d:da:86:94:0a:59:4e:c8:74:
                    7f:94:82:49:ae:14:56:cc:7e:06:76:14:39:72:4e:
                    d7:85:60:bf:b9:d7:ab:da:2f:85:92:79:38:23:23:
                    73:83:68:a8:75:9a:b3:f1:61:79:3b:49:05:c0:81:
                    3a:f5:c2:4b:71:8d:00:2c:99:59:d1:51:dd:56:25:
                    5d:75:fe:32:bc:12:2a:ea:2b:e8:b3:84:9b:2b:e5:
                    1c:1e:4f:72:00:82:9e:1b:ec:6b:20:ba:fb:68:77:
                    24:0d:0e:22:23:91:80:b2:2c:51:0d:af:f8:f8:51:
                    d6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:A6:71:CA:2A:66:DB:F9:6E:BE:C5:F7:4C:1A:C6:F9:DF:EC:38
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3133323a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:132::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:48:d1:f7:6e:14:13:8d:aa:c4:ed:82:4a:b3:cf:5b:71:1e:
         e0:a7:1a:0c:c5:ad:b4:1b:bf:f1:c9:b4:89:2b:69:42:11:20:
         c3:d4:9d:28:34:56:95:91:00:db:0f:7f:66:8a:98:d3:4f:91:
         40:41:ab:fd:27:c4:4a:de:8a:91:92:a4:a6:0b:73:de:e6:bc:
         39:0b:f5:de:a0:50:48:a4:1a:42:99:58:d7:d2:26:21:72:9f:
         28:d6:d8:5a:65:10:d2:10:41:a4:0c:17:70:10:54:91:fd:d5:
         b0:31:e5:3e:f3:f0:86:f5:d4:dd:e4:74:d3:38:84:41:3f:3b:
         a6:2c:44:6a:d4:a6:85:f1:61:1f:04:39:6c:cc:c5:04:ac:2c:
         2d:53:3f:d2:7a:02:48:76:2e:8a:29:f9:26:a1:17:bc:27:43:
         f4:de:40:25:87:b6:42:b1:d3:86:33:69:86:9c:93:8e:df:b3:
         d1:61:3b:82:d0:c7:e7:be:a9:0d:db:7b:81:59:76:b4:43:9c:
         eb:ee:5d:f4:c6:b1:48:58:fa:19:cf:ce:54:fb:26:ba:6e:1d:
         d6:e7:67:3f:55:ab:5c:1c:61:ba:73:cc:5b:a0:23:f1:43:99:
         03:a4:8d:8f:aa:1d:d0:75:84:b3:e6:56:e9:b5:81:87:66:ba:
         a4:54:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:16:54 2025 by rpki-client