Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a373a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a373a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          yRkkoUo2504TeBc+f+UwuhkgnvdjhfRCPabcQw34Arg=
Subject key identifier:   60:76:C9:5F:D0:B6:0F:ED:50:8B:91:7C:FB:F2:32:98:0D:7E:A6:70
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       04A27BEF0ECB247C9CDB49BD8F88079480FFB06D
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a373a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Sun 26 Jul 2026 18:25:43 +0000
ROA not before:           Sun 26 Jul 2026 18:20:43 +0000
ROA not after:            Sun 25 Jul 2027 18:25:43 +0000
asID:                     212934
IP address blocks:        2602:fcd3:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a2:7b:ef:0e:cb:24:7c:9c:db:49:bd:8f:88:07:94:80:ff:b0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jul 26 18:20:43 2026 GMT
            Not After : Jul 25 18:25:43 2027 GMT
        Subject: CN=6076C95FD0B60FED508B917CFBF232980D7EA670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:ff:4e:3e:53:c8:72:ae:eb:8d:87:6f:ec:
                    2c:f3:f3:10:4b:01:e2:6b:2d:a5:f5:e0:91:c5:1d:
                    73:8d:72:26:2f:54:92:3b:f9:af:9d:e7:fe:12:c2:
                    02:bc:40:d7:be:92:0c:10:84:c0:0a:b9:9a:af:c5:
                    27:51:85:94:ac:15:8a:74:9e:72:2c:ea:24:7c:31:
                    c9:09:64:33:4b:0e:c1:6d:d6:71:47:17:9d:ac:91:
                    d0:c0:f1:0b:0d:e9:e0:7e:cd:09:77:26:48:05:de:
                    5c:a2:c8:5a:f1:0d:e3:2f:9f:2c:59:83:61:9d:78:
                    bd:51:da:01:50:65:d7:12:f1:41:ac:b0:c8:4e:fb:
                    3d:b7:20:ae:d2:bb:96:3a:de:27:76:d1:21:fd:f1:
                    d1:27:f9:0b:5f:1a:4a:e7:9e:22:f5:46:b8:43:30:
                    05:ec:c9:b3:16:3a:63:ad:93:c5:c2:eb:5b:32:49:
                    c1:4f:71:f4:70:cb:ae:93:dd:09:6d:bd:c5:77:dc:
                    1e:84:6d:ad:45:ac:12:b8:0a:61:c6:1a:06:13:2f:
                    43:98:92:d4:ae:fd:7f:53:da:e4:60:60:b5:96:3d:
                    94:d1:60:78:43:68:aa:33:0e:92:c2:02:15:16:1e:
                    da:e1:73:fd:df:a4:15:aa:75:66:1e:54:90:39:b3:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:76:C9:5F:D0:B6:0F:ED:50:8B:91:7C:FB:F2:32:98:0D:7E:A6:70
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a373a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:a4:7d:db:25:41:5e:ee:5c:66:ff:0d:97:64:de:9d:2e:
         09:11:6c:ae:8e:e3:69:40:7f:4e:3b:a1:1e:b5:8b:a1:29:a3:
         e3:af:eb:33:5c:e2:af:ce:93:17:92:0a:f4:78:d1:e7:1e:e9:
         11:11:49:f1:dc:1c:ce:2a:66:66:43:01:fd:89:88:91:96:6e:
         39:d1:a0:63:99:e2:88:f5:2b:5e:a7:17:66:af:60:f3:66:54:
         a1:9e:1a:73:f0:d2:57:2e:0e:64:5d:10:8d:58:3b:aa:e9:b5:
         2c:59:14:d0:5d:9c:01:c0:4e:fa:30:cc:05:fd:34:7d:c1:69:
         68:1e:1f:c6:47:45:c9:fe:a2:b7:ae:5b:c2:d8:05:90:3e:99:
         57:40:76:30:55:8a:72:5c:21:45:9a:16:92:e9:43:c2:c5:13:
         ac:64:ac:7f:d9:3a:d5:91:1c:d7:a4:c4:5b:00:0b:c9:c1:66:
         98:8d:85:14:0f:d4:fb:29:77:ae:7e:0c:2b:f6:f1:dd:24:dc:
         7c:fe:f2:3c:bd:71:a4:aa:eb:53:be:58:fe:e2:60:85:0d:9c:
         e9:7b:e9:e5:5a:ef:f2:5a:99:4c:99:ff:08:5a:08:74:9a:39:
         9c:de:50:56:2c:34:36:bb:b2:01:fd:31:af:0d:85:4f:3b:83:
         61:f1:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:26:10 2026 by rpki-client