Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3130303a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3130303a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          6UckCPD0UZpsdIpSI21FxZFEqK2/u9y2qX8lAbF8oXA=
Subject key identifier:   57:91:48:D6:49:AB:AE:AA:C6:FF:5C:B3:C9:DD:B3:90:B0:9B:8B:29
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       1B18563B8F534C40292E475B6543994B12302FA4
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3130303a3a2f34382d3438203d3e203530323234.roa
Signing time:             Wed 16 Jul 2025 16:02:22 +0000
ROA not before:           Wed 16 Jul 2025 15:57:22 +0000
ROA not after:            Wed 15 Jul 2026 16:02:22 +0000
asID:                     50224
IP address blocks:        2a14:6f45:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 20:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:18:56:3b:8f:53:4c:40:29:2e:47:5b:65:43:99:4b:12:30:2f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Jul 16 15:57:22 2025 GMT
            Not After : Jul 15 16:02:22 2026 GMT
        Subject: CN=579148D649ABAEAAC6FF5CB3C9DDB390B09B8B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:4e:ba:77:22:00:6f:a7:5e:f3:b5:8f:95:
                    d2:76:45:79:7c:e8:52:ed:5e:c8:6b:a5:73:a7:60:
                    62:56:3e:0c:e3:dc:2b:53:68:b8:b4:04:f0:80:f5:
                    7d:93:12:2f:70:e7:52:d3:ee:6a:84:85:a5:b2:f6:
                    10:8f:23:fa:44:0c:ff:9f:25:87:f7:8d:e8:df:d1:
                    1c:a8:b4:a4:78:ac:7a:13:f4:9e:72:e8:34:6b:2f:
                    10:68:0a:0d:cf:37:7d:ab:89:0b:69:40:4d:a0:9f:
                    e6:0a:eb:9c:bc:a4:5e:a2:c9:2d:51:57:af:42:6c:
                    70:d2:55:7b:64:fe:2d:47:e1:25:2a:c6:7f:a6:11:
                    33:ce:b9:3c:57:88:92:b8:b3:f4:e3:89:0d:6e:7c:
                    09:ce:a7:fa:2e:58:fb:a1:a1:83:42:1c:9a:d2:95:
                    55:6f:b9:8f:10:ed:f3:96:31:8d:12:67:e7:e5:38:
                    a1:af:e5:aa:b9:83:b1:b9:e8:84:56:d3:99:f9:e6:
                    e4:17:8e:f3:6b:b6:fb:1e:0e:88:c2:d5:67:4a:0c:
                    b5:65:82:5a:2e:e8:01:0f:2c:75:ec:bb:f7:36:97:
                    d1:ae:73:c9:b8:56:56:e0:44:da:b8:f0:6e:f9:50:
                    0d:88:12:e8:09:c9:61:a0:a5:f2:39:d5:17:09:a2:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:91:48:D6:49:AB:AE:AA:C6:FF:5C:B3:C9:DD:B3:90:B0:9B:8B:29
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3130303a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:4e:17:fa:ab:a7:4d:f5:4b:f2:29:37:af:51:03:3f:a8:e6:
         84:84:d1:c5:a9:ef:ab:04:f7:4e:e7:f9:36:8e:bc:c3:f0:87:
         a8:9a:e0:82:1d:63:17:b6:f5:b6:25:cf:c9:6f:54:79:a6:c7:
         cb:47:e4:8a:65:8c:0e:1b:50:08:bf:4f:c9:87:2a:d1:d8:10:
         0a:bd:eb:b4:b7:d6:8b:f4:17:a1:ce:53:b1:d9:e0:88:7e:6a:
         75:3b:8d:83:f4:06:67:11:20:03:df:e1:33:b9:15:36:21:cc:
         a5:fa:56:a0:bb:ba:ab:8a:59:c4:c0:7e:a9:6a:3a:a5:ce:ea:
         d2:49:a4:b5:ed:ee:4a:9e:dc:74:56:05:da:83:d0:c3:3e:37:
         e5:37:66:43:10:4a:e4:bf:ef:63:f6:0d:2b:6e:54:87:50:5c:
         a6:50:ea:9c:91:46:96:75:69:3d:16:c9:cb:25:c2:5d:2f:7d:
         40:43:ae:7a:d9:24:cf:72:f4:87:dc:56:72:b1:4c:de:56:89:
         fb:0b:8b:74:62:8c:9b:4c:96:cf:14:da:31:df:eb:d5:04:e7:
         e5:e3:f4:81:e7:c5:0f:23:ca:d1:df:61:00:2e:03:88:a0:e5:
         b6:b4:8d:a0:17:0e:39:d0:f4:29:2d:65:68:b9:0f:6b:fa:6c:
         cf:1e:eb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:07:27 2025 by rpki-client