Route Origin Authorization

$ rpki-client -vvvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3134392e3131322e37342e302f32342d3234203d3e2030.roa
File:                     3134392e3131322e37342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          VwUgGfCF2NxdZ9eKJb2veEkDycmZkD4v4+NWTPK3P6g=
Subject key identifier:   D5:8E:9A:F5:D2:E9:ED:A7:22:0C:FE:C9:5C:1D:30:2F:7E:0B:80:45
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       3862851D30CD02296A63BCA29557B99E91D1AEA5
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3134392e3131322e37342e302f32342d3234203d3e2030.roa
Signing time:             Tue 15 Sep 2026 10:42:10 +0000
ROA not before:           Tue 15 Sep 2026 10:37:10 +0000
ROA not after:            Tue 14 Sep 2027 10:42:10 +0000
asID:                     0
IP address blocks:        149.112.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:62:85:1d:30:cd:02:29:6a:63:bc:a2:95:57:b9:9e:91:d1:ae:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Sep 15 10:37:10 2026 GMT
            Not After : Sep 14 10:42:10 2027 GMT
        Subject: CN=D58E9AF5D2E9EDA7220CFEC95C1D302F7E0B8045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:3a:1a:1f:f1:d4:85:a7:72:de:1e:c8:ec:
                    e6:2c:af:3f:21:0e:c3:cb:7d:6a:08:f8:c1:ed:95:
                    b1:77:6f:c7:e0:78:b9:4a:62:1e:79:8c:36:9c:7f:
                    61:4f:e0:d2:44:77:79:c6:94:59:2b:b6:6d:b7:fa:
                    f8:e8:d2:77:5d:f3:64:31:c6:e8:82:74:f3:87:14:
                    c8:be:be:9a:19:a4:45:4c:fd:4f:2f:d7:5b:dc:48:
                    ab:f2:af:7d:ee:04:43:be:3d:13:a7:64:2c:c0:0a:
                    d1:dd:3c:45:5c:e7:11:91:c8:c4:b1:e9:fd:48:a3:
                    df:f7:de:16:f9:b7:e9:af:de:19:0c:9e:d5:01:2d:
                    85:24:82:db:88:93:cb:e4:f8:c4:81:d4:a8:9b:5c:
                    11:1f:59:0d:15:bc:1f:e4:e1:9e:06:5a:1d:fa:1d:
                    7d:64:14:ad:2b:fe:07:45:d9:e9:cf:bf:7b:8c:7a:
                    9a:e1:60:08:06:4c:da:be:fe:85:36:37:c1:b2:75:
                    92:bd:63:29:58:d7:e7:54:63:17:8c:57:4d:a9:e3:
                    80:70:db:5e:a7:fa:cd:0a:a2:21:2e:72:3c:85:5f:
                    d1:ea:7f:c9:73:2e:91:cf:c2:eb:d9:54:b4:4a:e4:
                    92:45:ce:28:22:f6:7d:d8:f1:6e:63:60:53:df:85:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8E:9A:F5:D2:E9:ED:A7:22:0C:FE:C9:5C:1D:30:2F:7E:0B:80:45
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3134392e3131322e37342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:76:48:ba:81:e5:8e:18:b5:06:3f:8c:68:09:fd:de:e4:17:
         c2:9a:66:28:cc:e7:a2:d2:97:00:68:13:54:62:b7:5c:87:42:
         36:3e:8a:cb:26:53:09:02:c7:54:5b:68:15:ed:79:1d:72:69:
         f9:e4:5f:c6:7e:4e:ad:94:85:b7:a4:4e:c5:e1:8c:28:29:9c:
         df:ac:ef:bf:ac:8d:65:87:80:c1:7b:26:6f:d8:c0:ac:5b:b2:
         1f:05:b2:aa:e2:ee:4d:6e:af:14:ce:16:3e:3a:2d:83:0c:a2:
         fa:e6:dd:96:26:dc:5d:57:ea:19:f5:fc:91:bc:74:18:c2:3f:
         78:f2:eb:c7:5a:24:c1:33:d0:1e:33:17:9b:d7:8a:44:6a:1a:
         c3:89:eb:b6:6b:e3:e9:4a:44:09:d7:7a:0b:92:df:7f:c6:63:
         06:7e:58:16:ae:4f:0c:a1:d9:10:b4:ca:d6:89:84:27:8b:0a:
         5a:98:73:60:ea:93:2f:4e:f1:65:7f:e4:df:52:2b:e2:37:8c:
         16:67:83:67:b4:d2:2c:39:21:7f:6b:85:a4:50:60:2e:78:24:
         e0:6f:0a:8c:00:49:79:b0:82:9d:e3:e7:41:f7:1e:8d:e0:b6:
         ca:e7:a9:3a:e3:96:48:ea:6c:bd:9b:a5:64:8e:fe:23:e9:6f:
         85:3c:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:28:17 2026 by rpki-client