Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133362e302f32342d3234203d3e203532323130.roa
File:                     32332e3133302e3133362e302f32342d3234203d3e203532323130.roa (raw, json)
Hash identifier:          8AH05DwMuQ+IP+NDKkviyYnO1uu+UwbB9r0QoNAEimw=
Subject key identifier:   A2:61:E3:94:9D:D5:18:45:70:B5:5E:B9:15:75:C4:D8:74:AF:49:EA
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       75EF829B8E0397E48F1C98D34DE2B12F9DD7D09C
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133362e302f32342d3234203d3e203532323130.roa
Signing time:             Sun 18 Jan 2026 11:41:13 +0000
ROA not before:           Sun 18 Jan 2026 11:36:13 +0000
ROA not after:            Sun 17 Jan 2027 11:41:13 +0000
asID:                     52210
IP address blocks:        23.130.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ef:82:9b:8e:03:97:e4:8f:1c:98:d3:4d:e2:b1:2f:9d:d7:d0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jan 18 11:36:13 2026 GMT
            Not After : Jan 17 11:41:13 2027 GMT
        Subject: CN=A261E3949DD5184570B55EB91575C4D874AF49EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:7f:e5:20:2f:de:ec:55:12:87:12:51:e4:
                    29:c9:97:3d:6e:13:aa:bc:b0:8b:0e:14:5b:73:24:
                    17:a7:00:2d:ff:c6:64:49:0b:6c:91:9e:96:fa:e3:
                    b4:5f:15:bf:95:c6:7e:74:fd:b8:eb:9a:22:3d:5b:
                    52:f8:61:48:cb:ea:ab:12:9b:db:3c:84:2f:17:e4:
                    f9:de:74:8e:c7:a9:7f:f7:51:30:77:b6:b6:8e:44:
                    c6:f0:d7:ce:4e:cb:2c:a1:99:aa:81:84:87:bf:f5:
                    7c:72:a2:b1:6d:94:6c:99:ce:c3:2a:63:a1:98:9d:
                    e9:47:3b:c1:e4:34:ad:9f:b5:73:15:fc:18:f4:ac:
                    64:83:fd:e5:a5:8e:f8:1e:ef:6e:f5:7d:10:fa:11:
                    cf:8d:60:64:ef:6e:47:b3:01:f5:3b:11:87:7f:05:
                    19:b3:ac:6b:e2:be:c8:32:f9:db:61:46:6c:b2:c2:
                    1d:8a:3e:20:34:13:b7:68:66:d7:b7:23:2b:c3:82:
                    f2:75:30:13:64:dd:9b:94:fd:3b:dc:de:ab:c4:7e:
                    02:1e:3a:c5:c6:10:2e:0c:b6:29:33:97:12:da:42:
                    15:7d:9c:14:32:c9:bf:21:28:22:80:78:23:de:59:
                    68:7c:e2:ae:86:30:2b:ef:a2:98:76:75:9f:10:be:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:61:E3:94:9D:D5:18:45:70:B5:5E:B9:15:75:C4:D8:74:AF:49:EA
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/32332e3133302e3133362e302f32342d3234203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:ba:c4:a4:5d:2d:a3:97:33:17:4f:f1:0b:d7:fd:35:4c:
         f4:04:0f:33:5f:d8:0b:ca:73:71:64:e8:59:2e:cd:6c:e4:ab:
         ab:e8:99:47:4a:4a:3b:82:e7:09:f8:a7:95:d0:45:62:19:88:
         5a:15:1f:0e:3e:cf:c6:4c:a4:41:82:0f:6e:60:3a:bf:ef:1d:
         d3:30:09:02:2a:9f:2f:57:33:bd:6d:60:af:31:11:9d:8f:51:
         0f:80:b2:78:72:db:ba:d5:aa:e3:fb:6b:c3:64:a7:3f:6d:50:
         2b:ff:34:59:fe:57:22:9a:27:ac:44:9d:86:4b:4f:40:2b:ca:
         03:78:cd:36:46:b8:4c:5c:cc:8a:d4:0d:10:96:17:ab:2c:bb:
         1a:9d:33:95:aa:7d:83:56:b6:53:cf:24:d5:3e:e4:d4:92:56:
         53:84:8f:03:e6:89:e7:8a:a1:62:f6:d1:2c:b3:50:9e:75:81:
         15:18:27:bb:be:51:8f:e8:83:80:02:73:14:22:d5:ca:7f:ae:
         78:35:0e:84:14:76:21:44:f2:73:bf:ed:a3:95:fd:b4:5f:8b:
         ae:1a:81:75:b8:92:c6:a2:69:9f:8e:dc:88:98:91:a6:11:d7:
         b0:37:30:fa:3b:3b:70:fc:dd:dd:dc:a3:8e:e5:35:dd:72:19:
         5a:ba:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:39 2026 by rpki-client