Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a613a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a613a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          CF7jbF8iH2kQMXD+eQDcF3hn39BPM5MDkUc50OVw7Ys=
Subject key identifier:   C2:E5:DA:53:4C:C6:1C:56:CB:12:DB:B9:26:54:7F:FF:F9:3A:55:5D
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       020631F2759B03B67A8364607D3469CAAF88F281
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a613a3a2f34382d3438203d3e203532323130.roa
Signing time:             Wed 11 Mar 2026 13:06:45 +0000
ROA not before:           Wed 11 Mar 2026 13:01:45 +0000
ROA not after:            Wed 10 Mar 2027 13:06:45 +0000
asID:                     52210
IP address blocks:        2602:fcd3:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 06:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:06:31:f2:75:9b:03:b6:7a:83:64:60:7d:34:69:ca:af:88:f2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 11 13:01:45 2026 GMT
            Not After : Mar 10 13:06:45 2027 GMT
        Subject: CN=C2E5DA534CC61C56CB12DBB926547FFFF93A555D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:3d:64:67:53:06:65:46:3c:8e:3e:19:f7:
                    54:76:95:96:8b:36:d1:26:03:d0:88:4e:c4:fa:3e:
                    58:84:b5:d5:0e:36:25:d7:9b:85:1f:de:34:31:ea:
                    56:70:65:aa:ea:26:21:0a:76:e7:60:a6:1f:aa:c2:
                    2c:f6:68:f7:f3:f7:12:81:dc:7a:c3:95:e8:21:6b:
                    64:0e:45:32:d9:ec:54:f0:49:db:61:d6:6c:70:be:
                    38:5f:db:67:07:7f:e8:aa:e8:0d:fe:c7:99:3d:7f:
                    3e:8b:e9:e6:d6:dc:25:e4:08:7c:e5:78:36:5e:8f:
                    72:17:69:59:89:91:7b:b5:7b:56:33:7c:6e:d5:0e:
                    43:dd:2c:40:79:1e:cc:85:a6:ae:91:a9:92:54:c8:
                    a2:cf:f1:c2:bd:42:99:f4:8e:15:a1:97:01:2c:c5:
                    b1:b7:15:51:1b:20:72:18:bc:fd:d0:fd:07:0f:3f:
                    63:a6:ba:59:1c:5f:79:56:01:1a:96:ea:71:73:84:
                    08:f1:32:d9:90:33:79:7e:09:f5:69:19:8c:23:97:
                    51:4d:e8:89:30:d2:47:3e:d6:e8:50:96:19:b5:c6:
                    f0:2e:13:5e:cb:68:c3:41:65:f7:9e:ba:ad:a6:45:
                    d8:7b:fc:94:69:c0:23:79:7a:ba:98:b5:71:5b:55:
                    19:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E5:DA:53:4C:C6:1C:56:CB:12:DB:B9:26:54:7F:FF:F9:3A:55:5D
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a613a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:08:13:70:36:e1:ad:40:65:0f:a5:dc:cd:b3:a5:31:97:d4:
         23:2a:f9:04:5c:d5:c4:4f:ef:88:43:6b:a0:e8:27:bf:20:85:
         3d:09:28:a8:b1:52:64:48:5a:72:d8:86:9c:e4:80:6d:8e:59:
         c0:4b:db:f0:b8:28:12:8a:25:2d:b0:6f:d6:d3:ed:f3:8e:ce:
         06:60:c2:dd:d8:7b:64:20:91:54:8a:44:12:c5:de:74:44:4d:
         0d:a5:73:2c:e7:5d:8d:f6:0d:ad:1e:82:89:f5:24:e0:7c:72:
         f2:82:81:70:55:ce:3c:f8:2e:70:fd:ea:24:59:38:27:09:f4:
         58:79:d6:ae:84:41:be:e6:c7:12:14:2a:bf:25:4c:e9:9d:e6:
         e4:2e:0c:a1:2c:59:22:f1:fe:87:62:7f:f1:be:75:36:3c:3e:
         50:5e:2b:83:4e:c2:46:6d:dd:2c:8c:08:4f:5a:46:43:58:c9:
         9a:c5:35:2d:91:7c:9b:38:53:0c:83:e6:2d:fb:03:53:9f:a2:
         fc:8f:e4:3d:b4:e5:2e:82:37:c7:6c:f8:24:fa:01:d1:f5:5e:
         1a:ce:a5:e8:6d:8d:91:78:3b:0c:54:8c:79:ce:23:de:72:d5:
         49:84:98:5f:72:b5:a6:88:8f:5f:1d:ab:1b:59:65:cd:21:fe:
         d4:62:17:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:05 2026 by rpki-client