Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa
File:                     323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa (raw, json)
Hash identifier:          9ZMOsnN1ohw0sgooBUqOC4vVbJEblpBjl1YChMsY7Rs=
Subject key identifier:   21:41:F6:00:15:09:F9:7A:73:BE:A4:86:64:15:63:D0:9A:D1:BE:DE
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       294EA1F7078AE36B857CDEAE66CEEAD7F7C2A4CD
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa
Signing time:             Sun 08 Jun 2025 08:40:47 +0000
ROA not before:           Sun 08 Jun 2025 08:35:47 +0000
ROA not after:            Sun 07 Jun 2026 08:40:47 +0000
asID:                     54197
IP address blocks:        2602:fcd3:200::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4e:a1:f7:07:8a:e3:6b:85:7c:de:ae:66:ce:ea:d7:f7:c2:a4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jun  8 08:35:47 2025 GMT
            Not After : Jun  7 08:40:47 2026 GMT
        Subject: CN=2141F6001509F97A73BEA486641563D09AD1BEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:93:9b:01:1a:69:f3:bf:bd:18:1e:aa:ea:
                    54:59:d0:b4:f9:1e:dc:3c:a3:51:6c:42:2a:85:cb:
                    9d:d1:ed:b8:31:3b:d7:f6:71:39:80:c2:83:3f:ce:
                    76:85:51:54:4f:8f:84:58:1d:24:8a:7c:58:f3:dc:
                    61:74:30:44:a2:b7:9a:9c:dc:fd:23:35:17:e5:c3:
                    f8:46:1b:9c:fb:52:ec:a6:f2:ba:f0:31:c4:af:f8:
                    25:75:3d:57:81:e4:b2:09:83:8f:cf:e3:95:0e:82:
                    80:f7:af:3a:56:c1:0b:98:85:4d:f1:c0:2a:a0:1d:
                    e7:bf:2d:34:fa:1a:a2:18:20:38:df:f7:d7:71:10:
                    97:cf:76:f2:52:c5:74:36:78:81:a7:ba:cc:bc:59:
                    e7:27:ef:a9:86:94:d7:ae:15:22:43:d3:64:a2:7d:
                    9f:47:13:65:df:4d:56:62:69:e1:0b:86:05:26:9e:
                    63:1e:b2:da:4e:0c:65:22:74:ac:d3:8a:ab:77:4d:
                    84:1b:0e:5d:18:4a:ad:6d:d3:f6:98:f0:65:9c:39:
                    56:58:82:88:58:7f:c7:82:fa:a5:2f:5d:30:8f:ed:
                    43:78:cb:2f:29:50:54:e9:29:16:64:af:56:d2:13:
                    8a:c0:65:b9:65:8b:07:70:24:18:1e:b6:3b:b5:0c:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:41:F6:00:15:09:F9:7A:73:BE:A4:86:64:15:63:D0:9A:D1:BE:DE
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:da:a7:13:43:c4:e2:1e:72:f4:27:23:04:94:a4:d1:94:
         d8:95:d5:2b:80:49:2d:ab:12:09:c3:5a:9e:ea:e7:85:73:dd:
         85:54:5e:2d:7e:49:c3:35:25:81:54:b1:57:08:2d:e6:49:18:
         64:4c:3e:70:9c:e4:fb:b9:96:60:d8:f2:a2:95:94:a4:2d:2a:
         69:15:00:80:f0:90:a6:d1:38:c4:d6:56:2c:3f:e6:05:61:16:
         80:4a:64:8a:80:6a:42:50:1a:32:26:b5:f7:30:92:ae:67:c1:
         ab:69:8e:36:fc:c9:86:39:3a:f1:0c:ea:13:e7:19:92:8f:92:
         dc:26:e6:4a:be:09:94:4a:a5:45:65:67:47:8f:e2:02:c2:5e:
         fd:f8:7c:61:87:7d:9a:32:7b:17:c6:cc:21:e4:40:c0:52:c1:
         09:bd:bd:cb:8e:98:78:d7:bb:a0:c9:f5:59:a0:21:5b:dc:34:
         e2:54:20:44:4a:dc:38:8a:a4:ae:c1:09:af:4c:73:4d:1e:16:
         de:b9:51:d4:bf:59:4b:9f:68:89:86:19:b6:21:bf:85:73:1b:
         8b:52:2a:1c:ff:82:32:b8:7e:a6:f4:e0:78:30:ca:49:94:a5:
         8b:72:38:ed:7e:01:ea:cc:b4:b9:b5:08:a4:93:02:72:17:41:
         f4:5d:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:02 2025 by rpki-client