Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a643a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a643a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          0zenDATviesCoDVCuyOnxLkyrRHxvIMfu73fsXzyIhE=
Subject key identifier:   FA:C2:47:A9:12:F1:81:36:B5:80:92:FC:B9:BC:37:D7:86:A1:12:9E
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       1E6F169EBEEFC231D572B861D33116AFC3BF299C
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a643a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Thu 24 Apr 2025 17:40:38 +0000
ROA not before:           Thu 24 Apr 2025 17:35:38 +0000
ROA not after:            Thu 23 Apr 2026 17:40:38 +0000
asID:                     212934
IP address blocks:        2602:fcd3:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 03:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6f:16:9e:be:ef:c2:31:d5:72:b8:61:d3:31:16:af:c3:bf:29:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 24 17:35:38 2025 GMT
            Not After : Apr 23 17:40:38 2026 GMT
        Subject: CN=FAC247A912F18136B58092FCB9BC37D786A1129E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:96:9d:47:d2:8b:c7:f3:9a:9b:12:65:6e:
                    30:a1:a7:c2:45:95:a5:c9:46:57:b2:fe:69:4a:2e:
                    41:d5:ed:82:e0:0a:90:9a:49:69:6d:1c:28:4e:69:
                    65:0b:7b:6a:9f:5e:ea:85:a4:5d:77:28:d6:59:63:
                    91:bf:cc:2e:57:c0:a2:3e:80:f7:6a:4c:cd:2a:e6:
                    8c:11:c2:ad:b7:6f:7e:cd:bb:cf:46:86:a5:0a:9b:
                    73:fb:aa:32:5f:eb:3f:25:8f:d0:43:08:0d:18:79:
                    d4:fa:68:9f:79:e9:0b:6f:2c:3c:f2:80:cb:f8:3f:
                    c2:56:43:b4:f6:bb:44:d7:09:67:4e:a1:53:8e:f1:
                    98:00:73:16:10:be:d2:c1:54:8f:e0:c7:26:74:f3:
                    03:d5:bc:89:cb:1d:5e:3f:2c:01:20:e5:c3:60:3e:
                    6a:19:29:0b:05:ce:ee:92:75:8f:23:7f:0f:0c:e2:
                    69:e3:72:2a:82:90:a2:d0:6b:24:c5:be:cd:86:56:
                    66:48:37:3b:f8:0e:5a:00:6f:5a:a2:90:b0:66:4c:
                    f9:e3:eb:a5:48:1c:75:20:6e:70:5d:58:0d:38:ed:
                    b9:fe:a0:fc:1e:29:97:f7:e6:fc:60:eb:28:2d:63:
                    0e:52:89:23:c2:06:e9:58:eb:65:76:fa:a8:a0:37:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C2:47:A9:12:F1:81:36:B5:80:92:FC:B9:BC:37:D7:86:A1:12:9E
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a643a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:fc:21:bc:ac:2c:f2:e9:f3:5d:01:12:c3:93:73:76:6f:
         23:05:3f:f2:78:63:74:b9:80:59:20:78:f9:a8:32:e3:5f:1d:
         4d:fb:17:db:97:40:a0:24:cc:ae:00:de:44:f8:84:fa:5f:b7:
         89:ae:31:af:17:bb:db:7a:30:67:84:05:22:a7:c3:32:3e:7b:
         2c:33:63:a4:f1:ba:d7:65:ce:47:da:8a:ae:b9:bc:9f:0a:7b:
         5a:e9:64:60:f3:1e:7c:f0:8b:c4:16:3c:9f:d0:29:c8:a9:96:
         49:cc:f8:ec:f3:d9:cb:a5:32:7d:ee:8c:3a:03:e2:db:75:40:
         30:97:0e:fc:2f:5f:81:7a:4f:1c:3e:78:3c:19:35:2a:b9:99:
         52:72:5f:8f:c4:6b:9a:fd:17:a6:64:96:94:cb:19:db:ca:28:
         d4:74:40:3b:a3:82:5b:f5:4e:e2:ee:84:e3:cb:b6:b2:be:a2:
         cf:69:18:4a:d8:41:f4:48:c2:af:b4:79:f3:e0:16:fa:fb:9c:
         23:92:fc:13:e0:c3:ec:ff:07:22:db:4c:12:30:f7:b2:d8:2b:
         ed:50:e2:2a:5b:28:1e:6d:69:1e:4e:ca:d2:97:5f:a4:6f:32:
         de:96:c6:89:18:9e:0c:7b:d1:a5:80:09:64:8c:59:78:da:3f:
         a0:25:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:22:30 2025 by rpki-client