Route Origin Authorization

$ rpki-client -vvvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa
File:                     3230342e31302e3139342e302f32342d3234203d3e203631303033.roa (raw, json)
Hash identifier:          DTSJxr0L9ywxvTsZu7DVwsnZrEyVWLbF7oZ5FDO0PH0=
Subject key identifier:   E8:A1:3C:54:DA:66:C5:F6:9E:C0:CC:1D:E4:51:7E:CE:E7:63:46:33
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       587383450398B7E3EF69EBDF729FB32B365C3030
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa
Signing time:             Sat 29 Aug 2026 18:13:33 +0000
ROA not before:           Sat 29 Aug 2026 18:08:33 +0000
ROA not after:            Sat 28 Aug 2027 18:13:33 +0000
asID:                     61003
IP address blocks:        204.10.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:73:83:45:03:98:b7:e3:ef:69:eb:df:72:9f:b3:2b:36:5c:30:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Aug 29 18:08:33 2026 GMT
            Not After : Aug 28 18:13:33 2027 GMT
        Subject: CN=E8A13C54DA66C5F69EC0CC1DE4517ECEE7634633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:40:a0:d2:ba:7f:ef:3f:47:5d:f9:52:ed:
                    a8:08:5e:b6:2f:ce:de:d6:85:8f:20:f6:10:32:ca:
                    31:78:bb:6f:40:fe:cc:f9:b2:c3:f0:c5:5e:4c:17:
                    17:7c:ff:1d:ce:44:dc:17:c5:be:b6:15:db:16:da:
                    3f:96:d1:ac:ac:23:11:c6:ae:a4:a1:08:d9:e5:be:
                    ca:63:ba:78:a3:0f:10:ce:16:4e:cb:b2:28:d2:8e:
                    47:10:b5:cb:8c:a5:45:79:66:17:55:8d:76:20:85:
                    14:58:37:7a:37:18:11:51:58:65:71:39:e8:bb:41:
                    1a:90:5c:b2:1c:a4:e3:c4:75:f6:63:a6:96:45:68:
                    e9:12:82:f3:b6:78:5a:59:4a:de:d9:29:df:d1:75:
                    29:5c:5b:d3:2c:c3:fc:e9:64:7e:31:e8:a5:5d:23:
                    50:7c:18:12:72:47:8c:8e:1b:42:35:3f:73:87:cb:
                    fe:d6:00:57:a2:15:c0:c4:54:0b:81:56:87:4c:f5:
                    c1:c2:7c:11:80:c9:a0:76:99:5c:c2:27:1f:a2:4c:
                    8c:02:a7:44:81:1c:d2:27:f6:34:e5:10:19:de:e7:
                    f7:6d:f4:46:82:e6:92:53:e9:47:14:db:e9:56:d6:
                    54:b3:ed:ed:49:f7:7d:f8:3c:8b:61:83:55:e2:02:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A1:3C:54:DA:66:C5:F6:9E:C0:CC:1D:E4:51:7E:CE:E7:63:46:33
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:04:ca:97:b9:72:96:45:9a:57:ec:02:f1:07:e9:97:e8:ce:
         d9:c7:c4:e0:07:37:a4:a9:25:45:30:51:8b:cb:c0:4d:25:f6:
         58:bb:1b:99:99:36:76:18:52:51:33:9c:59:81:2f:04:d4:84:
         74:03:2e:ea:d5:8a:54:00:01:45:21:5f:6e:07:d1:cb:b7:de:
         f2:3c:62:a0:2a:2f:a5:2e:b8:55:25:7f:df:a1:2a:08:6e:3c:
         89:73:03:21:71:dc:09:26:05:6c:65:7f:f0:c6:0b:87:94:4b:
         ad:dd:45:10:94:86:de:93:a2:34:aa:b9:88:37:94:c8:36:41:
         74:8f:11:38:9e:0a:bc:71:72:b0:9b:b9:52:bc:7e:33:0f:25:
         98:7c:64:17:a3:93:d9:22:e9:e9:02:9b:fd:c0:a6:9f:42:83:
         fd:39:ea:99:3b:b9:df:a7:6c:38:e0:31:e1:10:ed:7f:0d:ef:
         ba:4a:32:3d:46:d2:da:03:0d:19:0f:94:d6:76:50:54:04:94:
         b7:13:d3:a9:e2:47:4b:43:9d:fc:4f:56:e4:f4:8e:e9:76:4f:
         97:bb:1f:83:13:e8:ec:8c:48:60:e0:d7:2a:51:d1:ba:7e:7b:
         f3:b0:45:91:bf:d2:bd:7a:70:08:fa:59:12:64:e7:32:df:3c:
         0d:b5:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:08:59 2026 by rpki-client