Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130383a3a2f34382d3438203d3e20313430363431.roa
File:                     323630323a666364333a3130383a3a2f34382d3438203d3e20313430363431.roa (raw, json)
Hash identifier:          oP1o7BIEI8DUbw18nO8FHfCSA6Ao9F8JmDACczHycFw=
Subject key identifier:   DD:79:F4:EC:AF:22:7F:4F:A3:CA:5F:70:A3:63:CC:2B:92:62:48:82
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       5006F7E5B8C6421961997DC43A74C5CB9652769A
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130383a3a2f34382d3438203d3e20313430363431.roa
Signing time:             Tue 10 Jun 2025 14:40:49 +0000
ROA not before:           Tue 10 Jun 2025 14:35:49 +0000
ROA not after:            Tue 09 Jun 2026 14:40:49 +0000
asID:                     140641
IP address blocks:        2602:fcd3:108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:06:f7:e5:b8:c6:42:19:61:99:7d:c4:3a:74:c5:cb:96:52:76:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jun 10 14:35:49 2025 GMT
            Not After : Jun  9 14:40:49 2026 GMT
        Subject: CN=DD79F4ECAF227F4FA3CA5F70A363CC2B92624882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:b4:d5:0a:76:34:63:c3:eb:ff:93:56:df:
                    17:48:2a:b1:6e:80:8f:83:e9:6c:80:b4:4c:37:1e:
                    34:28:e7:ab:6c:99:3a:f4:2b:e2:69:ba:ec:e6:6b:
                    0a:63:3f:41:0c:78:92:c4:cb:a3:8c:82:7d:c9:e3:
                    4c:c2:8d:74:57:23:aa:82:1d:ed:e0:17:5a:e4:2a:
                    5e:44:40:74:c8:e1:99:70:49:1e:03:b5:dd:5f:2c:
                    a2:47:7e:24:b0:b2:bf:28:bc:76:aa:55:bd:2f:03:
                    1a:c4:a0:6f:c4:a0:07:c2:84:07:1e:f9:90:d3:a9:
                    49:33:11:31:cf:e6:b9:4d:aa:ae:b6:94:f7:ec:de:
                    60:67:64:79:55:0a:e2:11:4e:7b:42:24:04:81:19:
                    05:a9:18:eb:68:44:c6:97:26:96:32:91:04:7f:48:
                    c1:b7:fb:00:ab:59:1b:91:5f:3a:e5:26:47:60:78:
                    8c:1b:5f:13:85:4f:b5:75:86:9a:13:a5:2e:e8:7a:
                    78:56:46:08:11:0c:c6:25:56:da:a7:dc:04:b3:85:
                    63:32:3a:b9:e5:c2:04:df:82:79:d2:04:73:3f:cc:
                    d9:32:d9:d5:15:2c:b8:b7:e7:ef:31:59:9b:0f:ea:
                    80:e2:79:19:a5:e8:b7:9f:b4:77:e8:85:8d:a8:e6:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:79:F4:EC:AF:22:7F:4F:A3:CA:5F:70:A3:63:CC:2B:92:62:48:82
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3130383a3a2f34382d3438203d3e20313430363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:33:e3:b3:c0:2e:b3:9a:78:e9:52:94:63:0a:88:bd:49:6a:
         46:3e:59:c7:ba:39:9b:b1:7d:71:6d:b2:ec:78:2b:6f:e6:f1:
         34:3d:83:f9:fa:c7:d7:e5:20:e5:74:29:97:08:d6:e4:62:ac:
         0b:f8:b8:06:64:a6:a0:4c:05:4e:e8:de:b4:be:dd:9d:a0:48:
         df:10:29:55:6e:64:88:9b:a6:f3:26:dc:3b:5c:ba:1e:c6:e8:
         40:98:e9:eb:9d:27:c2:a7:81:dd:19:02:d0:01:ba:13:db:2c:
         e2:1f:4d:46:46:7d:a1:92:82:c6:d5:28:30:7b:58:10:99:95:
         d3:41:3a:ff:5a:8e:cb:56:43:c9:83:ac:5a:04:29:d7:6a:90:
         6a:03:ff:07:9f:e6:6d:c0:e7:5c:67:f7:13:21:10:8f:f3:7a:
         73:5b:68:16:b6:b5:0b:a1:17:c1:8d:3b:5a:86:eb:54:4b:39:
         51:61:8a:2a:6f:87:26:92:69:6d:11:2b:66:c7:6d:cb:b1:d0:
         57:b9:d5:db:26:69:b9:ba:36:25:18:7e:f4:f2:46:e2:f5:cb:
         da:c8:db:40:bc:b6:ac:a6:ea:b1:c7:6d:72:11:dd:a0:b0:84:
         5c:f8:c1:ac:b3:01:59:98:51:f4:fe:d1:4b:85:eb:6e:cb:ef:
         d3:f5:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:25:52 2025 by rpki-client