Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/32332e3135342e38312e302f32342d3234203d3e203533333536.roa
File:                     32332e3135342e38312e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          1zc4nHwV27jCfKyk3YivSylo4k9H98VDUKEVuK3YuwQ=
Subject key identifier:   8D:A9:5C:55:B8:D4:1B:EE:66:13:D8:05:80:FC:C8:9C:DC:7F:67:17
Certificate issuer:       /CN=8f6916d4631916fcce2fe6916d1edc81ead470cede8ca75225
Certificate serial:       66634013111E56ABD47157BA7FFD09A89D38D320
Authority key identifier: E4:93:9D:13:6D:D5:C5:2A:FD:57:50:6B:F2:E9:FB:7B:E0:AF:54:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4631916fcce2fe6916d1edc81ead470cede8ca75225.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/32332e3135342e38312e302f32342d3234203d3e203533333536.roa
Signing time:             Sat 02 May 2026 16:12:38 +0000
ROA not before:           Sat 02 May 2026 16:07:38 +0000
ROA not after:            Sat 01 May 2027 16:12:38 +0000
asID:                     53356
IP address blocks:        23.154.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/E4939D136DD5C52AFD57506BF2E9FB7BE0AF543E.crl
                          rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/E4939D136DD5C52AFD57506BF2E9FB7BE0AF543E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4631916fcce2fe6916d1edc81ead470cede8ca75225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/1146938c-c605-4779-bf60-820a16fa701c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/1146938c-c605-4779-bf60-820a16fa701c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 10:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:63:40:13:11:1e:56:ab:d4:71:57:ba:7f:fd:09:a8:9d:38:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4631916fcce2fe6916d1edc81ead470cede8ca75225
        Validity
            Not Before: May  2 16:07:38 2026 GMT
            Not After : May  1 16:12:38 2027 GMT
        Subject: CN=8DA95C55B8D41BEE6613D80580FCC89CDC7F6717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:ec:ba:60:39:b0:7d:83:9a:b4:eb:0e:94:
                    ce:a2:12:55:5b:22:a6:2d:3c:75:1d:8c:7d:77:7a:
                    18:49:1d:51:9f:8f:3a:0f:50:33:dc:5b:17:3c:55:
                    6e:8f:63:52:f3:a8:36:e5:6e:84:f5:06:56:27:5b:
                    75:77:49:6c:65:64:c8:40:98:8c:5f:5a:a9:8b:9a:
                    f7:17:56:f0:a3:00:54:44:c3:26:95:02:2e:58:17:
                    42:a6:94:b5:a9:d1:dd:98:fd:20:65:6d:cb:ed:4d:
                    af:c1:b0:db:b1:2f:a1:ca:bb:05:03:0d:45:0a:3a:
                    ac:5b:d8:13:bb:c2:7b:07:8f:9b:06:0e:0f:52:84:
                    fc:38:2c:c4:e0:0e:53:fe:1a:eb:ad:0d:17:a5:3f:
                    6e:5f:7d:6c:5d:1d:ef:ec:51:fc:00:48:6e:48:79:
                    6b:f0:81:b4:43:c3:d8:44:23:90:3b:af:50:8d:03:
                    35:2d:7e:44:89:4f:ef:d0:c1:d2:79:2d:45:e4:f2:
                    2f:b2:05:a0:cb:9b:8f:3a:f1:10:f5:75:79:05:01:
                    f9:92:2b:0b:c8:7a:dc:4f:37:19:ac:00:b6:8d:14:
                    1d:7f:c3:28:78:09:87:2c:dd:eb:9b:1a:7c:d3:c4:
                    91:a2:5e:d1:cf:0e:62:a1:c4:b6:a5:51:c9:09:ff:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A9:5C:55:B8:D4:1B:EE:66:13:D8:05:80:FC:C8:9C:DC:7F:67:17
            X509v3 Authority Key Identifier:
                keyid:E4:93:9D:13:6D:D5:C5:2A:FD:57:50:6B:F2:E9:FB:7B:E0:AF:54:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/E4939D136DD5C52AFD57506BF2E9FB7BE0AF543E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4631916fcce2fe6916d1edc81ead470cede8ca75225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/32332e3135342e38312e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:1d:b7:26:db:5a:22:51:8d:61:a0:69:25:29:6e:23:08:d8:
         5e:03:05:13:e7:df:70:14:0f:76:2b:0e:2f:63:b6:86:d7:b0:
         ba:4d:b5:7f:d4:55:90:9c:56:42:bf:51:79:88:1e:2d:c9:6b:
         2d:4c:8b:0e:e3:a5:64:e9:11:b8:46:a4:0f:21:fd:e8:09:61:
         c2:e9:1f:a7:54:89:ef:27:23:25:9e:88:6a:83:4b:f2:39:31:
         8a:58:2d:aa:d8:57:ee:7b:6b:8d:7f:ed:2a:c6:ca:21:ea:21:
         04:7e:44:26:bf:da:35:06:6b:5e:94:3a:10:34:bd:85:f3:11:
         79:9b:fd:ee:27:83:04:bf:39:a2:21:36:b2:bd:78:fb:34:ed:
         1e:07:e3:83:c5:d6:69:33:25:99:63:9e:ba:9a:18:fa:b9:fe:
         77:4d:20:43:4a:45:b6:8b:47:7b:04:38:03:ea:37:5a:d9:29:
         ae:aa:1c:1f:c6:e5:20:6f:06:11:09:58:52:b9:32:58:30:72:
         15:4c:24:41:34:61:04:76:af:e9:90:4b:94:a1:74:04:ae:7e:
         82:7a:13:9f:8d:aa:03:f8:be:19:d0:f1:85:f6:3e:9c:cc:c7:
         16:2f:4a:f0:d5:e8:38:ba:f2:95:7c:e6:f9:e0:44:fd:73:72:
         bc:b7:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:12 2026 by rpki-client