Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          DQO9UhEQ9vjPHTkKl7YrGBH32SzzVj0yKc73An+1944=
Subject key identifier:   97:25:FA:F6:B1:28:25:0F:BA:F7:F4:35:C3:1A:BC:EC:80:C2:59:95
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       6056A1522C882099F28DDB8031037B92AC0F943C
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa
Signing time:             Sun 18 Jan 2026 11:41:10 +0000
ROA not before:           Sun 18 Jan 2026 11:36:10 +0000
ROA not after:            Sun 17 Jan 2027 11:41:10 +0000
asID:                     52210
IP address blocks:        2602:fcd3:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:56:a1:52:2c:88:20:99:f2:8d:db:80:31:03:7b:92:ac:0f:94:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jan 18 11:36:10 2026 GMT
            Not After : Jan 17 11:41:10 2027 GMT
        Subject: CN=9725FAF6B128250FBAF7F435C31ABCEC80C25995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:ad:68:27:d2:2f:76:83:4e:22:70:ab:d1:
                    13:19:a4:c9:3c:5b:50:3e:89:df:75:c1:90:82:25:
                    52:03:04:a2:2f:5a:e7:50:af:77:17:68:90:08:8e:
                    03:77:77:0a:14:35:94:95:bb:1b:29:f3:85:8b:8a:
                    ac:cc:67:f7:56:28:65:76:3c:c3:7c:d0:29:83:93:
                    16:be:7a:32:ef:4b:cd:ff:38:cc:c1:b5:e9:fd:40:
                    93:06:3b:20:9a:1f:65:6d:e3:d6:05:18:bd:48:f5:
                    4b:19:fc:71:53:dd:b3:5a:6d:98:f1:92:9a:da:2f:
                    85:40:6a:a7:91:0d:48:c2:53:32:98:e6:2d:60:5d:
                    6a:f4:bb:67:f7:3a:c6:98:ad:fb:b8:6a:50:5a:b7:
                    e2:03:a0:26:e1:3a:ad:db:ab:fd:13:49:a4:39:d8:
                    a1:48:c3:cb:3f:04:36:f7:2e:e7:6f:f2:eb:9f:9c:
                    bf:46:8c:ae:d4:f0:9a:47:14:42:06:a4:aa:3b:a7:
                    e9:8e:fc:29:b2:76:f8:8f:44:3d:c7:06:02:b7:ed:
                    fc:01:2c:6c:a0:56:ec:4d:83:74:7e:26:82:f8:0e:
                    79:af:32:24:ce:6b:70:3c:e7:0b:43:47:21:c2:1a:
                    e9:48:b6:9b:62:46:27:d3:bd:f3:e6:f9:8c:4a:c3:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:25:FA:F6:B1:28:25:0F:BA:F7:F4:35:C3:1A:BC:EC:80:C2:59:95
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:76:ae:96:6b:f3:a7:e7:ed:ee:ad:3a:b6:c2:ab:4a:17:52:
         8d:05:bf:88:e7:b5:4e:79:12:b0:e9:b8:4d:df:e7:42:c9:cb:
         41:b1:97:6c:34:2a:e2:c1:62:24:37:ca:e2:c4:bd:31:6d:b0:
         7d:b5:b5:1d:59:0d:12:3e:b8:a6:3e:19:bd:23:8a:81:e3:f6:
         1b:ea:79:44:ff:25:58:8f:ab:10:d9:07:56:7f:c1:70:ff:2b:
         ef:0e:38:8d:bf:10:9a:07:7c:4f:8e:1a:3d:d8:76:7c:17:14:
         85:06:c6:85:8d:fc:d9:ca:1b:59:d5:4a:cf:f2:ba:c9:ea:da:
         ea:80:a3:00:66:89:f4:bb:b0:23:fb:2b:d4:8e:b0:25:b3:f3:
         9a:cd:54:75:77:a4:00:22:a7:02:c0:30:0f:35:ec:d4:d7:7f:
         bc:82:f2:2a:58:38:68:72:33:d5:2d:aa:0d:8d:39:60:ef:a0:
         9f:da:de:21:4d:e6:a7:51:b4:fd:43:92:8c:b8:59:a5:02:96:
         d1:67:38:21:d5:eb:dd:96:e5:db:8a:27:5c:29:b1:55:75:7b:
         ab:7f:d7:79:90:64:d6:4a:a9:84:4c:ae:43:cc:54:a0:b8:cd:
         d4:a5:4c:28:d5:24:10:61:28:d3:d0:82:76:41:9a:c1:3a:05:
         48:66:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:31 2026 by rpki-client