Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa
File:                     323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa (raw, json)
Hash identifier:          RTxZ87VtWLXzfjxki5t+ykOVDqe2y597gs+5+/2oe6M=
Subject key identifier:   4C:3B:3E:BF:B9:61:A3:5D:03:7B:9B:B3:F9:A1:91:C9:3F:31:89:4A
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       6CDB29E71D89B8864AFE7FDF6001C677C8A48094
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa
Signing time:             Sun 10 May 2026 09:08:19 +0000
ROA not before:           Sun 10 May 2026 09:03:19 +0000
ROA not after:            Sun 09 May 2027 09:08:19 +0000
asID:                     54197
IP address blocks:        2602:fcd3:200::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 03:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:db:29:e7:1d:89:b8:86:4a:fe:7f:df:60:01:c6:77:c8:a4:80:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: May 10 09:03:19 2026 GMT
            Not After : May  9 09:08:19 2027 GMT
        Subject: CN=4C3B3EBFB961A35D037B9BB3F9A191C93F31894A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:88:24:8f:7a:0f:bc:34:0d:ce:23:4e:11:
                    4f:d1:b3:f0:ca:36:91:9d:54:dc:d0:3b:6b:bc:1c:
                    65:f8:c7:3f:07:91:37:04:37:5a:57:70:61:d3:2c:
                    4b:ae:57:e0:a8:20:aa:79:1b:d7:89:c6:a8:1f:b6:
                    07:a3:6c:1e:c5:f0:5a:e0:42:64:7e:00:73:7f:b2:
                    f8:fc:86:91:87:ba:4c:28:a5:06:f1:10:6b:17:f7:
                    a8:39:da:aa:15:4c:97:90:da:79:5f:33:3b:7c:a0:
                    5c:1a:b3:be:87:b6:28:b2:ff:64:f0:81:1f:39:7c:
                    d5:f2:e9:70:6c:2f:91:14:6a:7c:99:32:fe:db:ab:
                    b9:91:53:53:2e:9f:36:79:2f:65:08:42:29:9f:90:
                    6b:2c:e0:e5:77:56:db:c3:2a:4f:5c:9d:d0:2e:c3:
                    52:a4:6b:10:1a:b1:f5:a9:84:9c:45:4e:e9:d1:7b:
                    dc:56:6a:bb:74:cf:d9:c1:9b:eb:81:f3:87:d0:84:
                    6c:c1:5c:25:9b:f2:20:9b:74:e6:0e:47:3e:61:f0:
                    15:0f:0a:36:5b:f6:fe:7a:3d:f8:c5:bb:28:06:56:
                    01:e0:62:a1:a0:90:36:f6:86:3e:72:d8:a8:a4:15:
                    64:4c:37:2f:41:0a:f2:f0:71:14:98:a1:48:72:c6:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3B:3E:BF:B9:61:A3:5D:03:7B:9B:B3:F9:A1:91:C9:3F:31:89:4A
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:57:50:be:4e:4f:10:72:2e:20:3c:2b:20:25:8a:f0:5f:
         be:b8:db:7d:a8:10:bd:52:fd:68:fe:63:e0:26:d2:94:93:07:
         4d:dc:ea:bb:8a:3a:98:99:84:28:b5:99:c7:ae:77:fe:50:7d:
         25:be:b8:3c:d8:a5:a7:f1:fe:40:db:be:44:9f:05:63:63:e8:
         50:72:fb:12:ec:c0:d8:b2:d3:35:3c:32:9e:1d:75:66:da:e6:
         70:b8:30:80:fd:54:2c:e8:13:75:0c:00:95:24:9a:c0:2a:a2:
         8f:53:68:66:b3:9c:8e:6b:00:07:c4:1d:82:d3:4c:c4:35:34:
         92:19:6b:e0:2a:99:ab:7e:02:3e:d3:7f:18:b2:7f:46:64:a3:
         a1:b3:72:dd:c7:d3:a2:f3:46:35:a9:85:bb:57:fa:2f:cf:a0:
         b6:d5:51:fa:b5:81:9b:16:74:11:7e:72:44:36:26:68:e6:07:
         6e:e9:43:28:03:dc:68:ed:16:fc:26:15:c1:7e:98:55:e3:ed:
         6d:3c:98:1e:8c:28:ce:5f:4e:ee:c4:eb:ac:e1:87:d0:e1:48:
         35:d4:9b:e5:49:35:cc:34:3b:8f:b2:bd:21:5d:be:d0:90:5e:
         a3:0a:09:5e:d9:96:c0:97:b1:36:c3:a8:4c:68:d5:7b:2a:8e:
         be:f9:09:9c
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIUbNsp5x2JuIZK/n/fYAHGd8ikgJQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5
YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjYwNTEwMDkwMzE5WhcNMjcwNTA5MDkwODE5
WjAzMTEwLwYDVQQDEyg0QzNCM0VCRkI5NjFBMzVEMDM3QjlCQjNGOUExOTFDOTNG
MzE4OTRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEiIJI96D7w0
Dc4jThFP0bPwyjaRnVTc0DtrvBxl+Mc/B5E3BDdaV3Bh0yxLrlfgqCCqeRvXicao
H7YHo2wexfBa4EJkfgBzf7L4/IaRh7pMKKUG8RBrF/eoOdqqFUyXkNp5XzM7fKBc
GrO+h7Yosv9k8IEfOXzV8ulwbC+RFGp8mTL+26u5kVNTLp82eS9lCEIpn5BrLODl
d1bbwypPXJ3QLsNSpGsQGrH1qYScRU7p0XvcVmq7dM/ZwZvrgfOH0IRswVwlm/Ig
m3TmDkc+YfAVDwo2W/b+ej34xbsoBlYB4GKhoJA29oY+ctiopBVkTDcvQQry8HEU
mKFIcsZFnwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFEw7Pr+5YaNdA3ubs/mhkck/
MYlKMB8GA1UdIwQYMBaAFIuDxdoDs8wCnZUhWgEyBZeBSzjwMA4GA1UdDwEB/wQE
AwIHgDB+BgNVHR8EdzB1MHOgcaBvhm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNo
bm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzhCODNDNURB
MDNCM0NDMDI5RDk1MjE1QTAxMzIwNTk3ODE0QjM4RjAuY3JsMIHzBggrBgEFBQcB
AQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82
M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvN2FmYWYxYzFiNzdl
ZWRhMWEzYTJlYmFkYTRiNGRhYzg5YWNiZjM4YjNkZjc1ZDNjZTkuY2VyMIGhBggr
BgEFBQcBCwSBlDCBkTCBjgYIKwYBBQUHMAuGgYFyc3luYzovL2tyaWxsLmFjY3Vy
aXN0ZWNobm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzMy
MzYzMDMyM2E2NjYzNjQzMzNhMzIzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIw
MzUzNDMxMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/NMCADANBgkqhkiG9w0BAQsFAAOCAQEA
OkVXUL5OTxByLiA8KyAlivBfvrjbfagQvVL9aP5j4CbSlJMHTdzqu4o6mJmEKLWZ
x653/lB9Jb64PNilp/H+QNu+RJ8FY2PoUHL7EuzA2LLTNTwynh11ZtrmcLgwgP1U
LOgTdQwAlSSawCqij1NoZrOcjmsAB8QdgtNMxDU0khlr4CqZq34CPtN/GLJ/RmSj
obNy3cfTovNGNamFu1f6L8+gttVR+rWBmxZ0EX5yRDYmaOYHbulDKAPcaO0W/CYV
wX6YVePtbTyYHowozl9O7sTrrOGH0OFINdSb5Uk1zDQ7j7K9IV2+0JBeowoJXtmW
wJexNsOoTGjVeyqOvvkJnA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:43:19 2026 by rpki-client