Route Origin Authorization

$ rpki-client -vvvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323030313a3530343a3133323a3a2f34382d3438203d3e2030.roa
File:                     323030313a3530343a3133323a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          bdHQA74aEwZSkhsW9r6ahtXT47B3bfVJGmYwWvxEKMU=
Subject key identifier:   B5:C1:C3:3B:EB:22:38:E5:75:41:C6:F6:8A:02:C8:F5:86:08:00:79
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       71B343EB1CECB319F63C7601309148CF3EAEB739
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323030313a3530343a3133323a3a2f34382d3438203d3e2030.roa
Signing time:             Tue 15 Sep 2026 10:42:10 +0000
ROA not before:           Tue 15 Sep 2026 10:37:10 +0000
ROA not after:            Tue 14 Sep 2027 10:42:10 +0000
asID:                     0
IP address blocks:        2001:504:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b3:43:eb:1c:ec:b3:19:f6:3c:76:01:30:91:48:cf:3e:ae:b7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Sep 15 10:37:10 2026 GMT
            Not After : Sep 14 10:42:10 2027 GMT
        Subject: CN=B5C1C33BEB2238E57541C6F68A02C8F586080079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d5:4e:86:98:b1:89:6b:dc:3b:42:4a:34:ec:
                    03:ac:40:e3:a9:dc:9e:fc:4b:ba:a4:ea:f8:1e:93:
                    70:bf:44:9e:ec:88:b9:3a:b1:76:3b:a0:8d:2b:74:
                    09:6d:e4:fc:f4:86:b4:41:f4:92:d5:d1:5f:84:73:
                    54:e1:ad:03:e1:ee:3c:c7:06:a5:df:0f:9b:3e:aa:
                    22:06:7f:e7:1c:b6:5a:09:34:86:d1:54:26:01:f1:
                    71:73:ba:cb:7f:b9:51:e5:d6:6e:36:ed:ee:39:0d:
                    37:d4:42:8b:ce:af:31:44:3e:3a:be:23:85:1f:c3:
                    34:80:a0:1a:95:82:00:ad:98:16:50:53:76:74:93:
                    ca:08:92:6d:82:9a:b0:85:d3:52:bc:1e:bf:3f:de:
                    aa:be:cd:fe:e2:01:16:82:d6:2b:af:64:80:57:00:
                    4c:be:54:a7:57:ae:35:b8:73:0f:aa:15:21:5a:0e:
                    c8:d8:75:d2:71:6c:fe:f5:e1:4b:e4:72:cc:a4:e3:
                    b0:92:6d:05:38:e1:0d:47:d4:be:25:74:e8:7d:6e:
                    99:d8:5a:2f:95:7a:09:85:10:4b:f3:bd:57:de:9a:
                    76:6c:8a:fa:0d:41:da:c8:b2:89:7f:cc:74:1f:fc:
                    77:1e:cd:95:73:f5:50:dc:86:d1:ab:b3:cc:61:4b:
                    a8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C1:C3:3B:EB:22:38:E5:75:41:C6:F6:8A:02:C8:F5:86:08:00:79
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323030313a3530343a3133323a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:132::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:2e:6f:97:05:e6:3e:19:2c:e6:5f:fd:49:e0:cd:1e:34:75:
         fc:0f:23:c6:6c:3d:a8:68:94:2c:a5:a2:7c:0d:07:e5:44:0f:
         4a:ad:5e:d3:48:75:61:94:6c:b5:5d:41:26:9d:90:8f:d1:0a:
         62:8a:e3:8e:19:cc:f6:88:11:97:0a:d8:4b:4c:a0:ac:ee:91:
         8f:ed:72:60:b2:73:6b:5a:d1:56:d5:9a:cb:e4:09:f3:f8:c1:
         1a:86:42:3e:59:3b:cd:8a:95:5e:56:c5:0b:12:9c:c3:76:47:
         df:b8:d0:49:ac:39:c4:08:00:8a:65:9e:0b:86:d1:fc:c2:ba:
         d9:64:d5:3e:e0:08:b5:96:0c:e5:49:f2:11:45:7a:49:0e:22:
         d2:38:fe:03:87:5e:1e:81:cb:c1:29:e4:63:87:48:d3:81:b0:
         a1:0f:53:3d:4b:6e:e7:a2:f8:d1:e8:19:f2:2b:e1:ed:3e:bd:
         f6:08:7e:4f:18:a3:dd:d6:d9:cc:1c:b5:46:9d:ba:d3:e9:e3:
         e9:e7:66:90:7e:93:73:18:f2:ec:2e:3e:59:84:f4:02:68:8d:
         31:7b:c5:fa:2c:3a:62:d1:25:49:28:23:f3:cc:38:de:68:56:
         e2:ff:13:4e:a2:75:1d:16:c2:5d:fa:ac:60:60:e2:ca:9a:20:
         32:73:88:b8
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIUcbND6xzssxn2PHYBMJFIzz6utzkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5
YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjYwOTE1MTAzNzEwWhcNMjcwOTE0MTA0MjEw
WjAzMTEwLwYDVQQDEyhCNUMxQzMzQkVCMjIzOEU1NzU0MUM2RjY4QTAyQzhGNTg2
MDgwMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tVOhpixiWvc
O0JKNOwDrEDjqdye/Eu6pOr4HpNwv0Se7Ii5OrF2O6CNK3QJbeT89Ia0QfSS1dFf
hHNU4a0D4e48xwal3w+bPqoiBn/nHLZaCTSG0VQmAfFxc7rLf7lR5dZuNu3uOQ03
1EKLzq8xRD46viOFH8M0gKAalYIArZgWUFN2dJPKCJJtgpqwhdNSvB6/P96qvs3+
4gEWgtYrr2SAVwBMvlSnV641uHMPqhUhWg7I2HXScWz+9eFL5HLMpOOwkm0FOOEN
R9S+JXTofW6Z2FovlXoJhRBL871X3pp2bIr6DUHayLKJf8x0H/x3Hs2Vc/VQ3IbR
q7PMYUuoTwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLXBwzvrIjjldUHG9ooCyPWG
CAB5MB8GA1UdIwQYMBaAFIuDxdoDs8wCnZUhWgEyBZeBSzjwMA4GA1UdDwEB/wQE
AwIHgDB+BgNVHR8EdzB1MHOgcaBvhm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNo
bm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzhCODNDNURB
MDNCM0NDMDI5RDk1MjE1QTAxMzIwNTk3ODE0QjM4RjAuY3JsMIHzBggrBgEFBQcB
AQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82
M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvN2FmYWYxYzFiNzdl
ZWRhMWEzYTJlYmFkYTRiNGRhYzg5YWNiZjM4YjNkZjc1ZDNjZTkuY2VyMIGWBggr
BgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUHMAuGd3JzeW5jOi8va3JpbGwuYWNjdXJp
c3RlY2hub2xvZ2llcy5jYS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzAvMzIz
MDMwMzEzYTM1MzAzNDNhMzEzMzMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzAu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAgAQUEATIwDQYJKoZIhvcNAQELBQADggEBADIub5cF5j4ZLOZf
/UngzR40dfwPI8ZsPaholCylonwNB+VED0qtXtNIdWGUbLVdQSadkI/RCmKK444Z
zPaIEZcK2EtMoKzukY/tcmCyc2ta0VbVmsvkCfP4wRqGQj5ZO82KlV5WxQsSnMN2
R9+40EmsOcQIAIplnguG0fzCutlk1T7gCLWWDOVJ8hFFekkOItI4/gOHXh6By8Ep
5GOHSNOBsKEPUz1Lbuei+NHoGfIr4e0+vfYIfk8Yo93W2cwctUadutPp4+nnZpB+
k3MY8uwuPlmE9AJojTF7xfosOmLRJUkoI/PMON5oVuL/E06idR0Wwl36rGBg4sqa
IDJziLg=
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:19:21 2026 by rpki-client