Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330313a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3330313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          +UXq0qhUi+yi9pvWOuZ0AKtdLFJ5HNV9pPsUX00iWP4=
Subject key identifier:   D0:9C:82:E7:22:3D:AC:46:A7:C7:C2:D7:20:43:2F:A8:8C:79:F9:25
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       3EA911838C208105E87EF60B8BF713864C0CA3EB
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330313a3a2f34382d3438203d3e203530323234.roa
Signing time:             Wed 16 Jul 2025 16:02:21 +0000
ROA not before:           Wed 16 Jul 2025 15:57:21 +0000
ROA not after:            Wed 15 Jul 2026 16:02:21 +0000
asID:                     50224
IP address blocks:        2a14:6f45:301::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 20:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a9:11:83:8c:20:81:05:e8:7e:f6:0b:8b:f7:13:86:4c:0c:a3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Jul 16 15:57:21 2025 GMT
            Not After : Jul 15 16:02:21 2026 GMT
        Subject: CN=D09C82E7223DAC46A7C7C2D720432FA88C79F925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:d9:83:0b:e5:67:93:9f:5f:cb:4e:fd:e8:
                    e6:52:d1:3c:b5:25:1f:e1:ad:da:df:b7:6d:9f:4d:
                    55:1c:af:e9:32:79:ac:e5:eb:12:ab:56:a8:5c:0d:
                    74:79:74:f0:54:c6:c0:5a:6f:2a:be:3a:bb:54:b6:
                    e7:a7:5a:5f:a3:5f:ca:73:d1:b7:56:40:b3:ab:67:
                    b3:0b:ad:c9:3e:90:8a:d4:49:d4:73:16:2c:cf:af:
                    2f:b4:11:a1:2d:b4:56:61:6d:bf:82:80:13:76:a6:
                    c2:17:b1:4c:04:76:cb:c6:9d:0e:11:d9:0c:59:9f:
                    ad:e9:e3:0d:b3:74:63:5f:a5:40:45:dc:46:7b:18:
                    b1:82:b1:d3:30:16:15:68:1b:d8:4e:bf:33:9f:5c:
                    c1:1c:0e:7e:31:40:5e:ce:94:b8:39:02:3c:52:19:
                    d7:9b:8b:7d:d4:30:a6:74:7f:fd:04:47:08:ef:5a:
                    6e:0f:54:11:65:7f:ba:63:88:4e:3b:ff:a5:c0:03:
                    b9:d6:70:2d:3a:a6:75:ea:a6:a3:ea:7c:69:92:e9:
                    55:4c:54:3c:89:d3:bd:b2:3e:b7:39:7d:ce:ed:1c:
                    8e:93:89:38:3f:8b:da:2f:9b:35:d6:6a:51:2a:26:
                    ab:b4:fb:5d:cf:c2:1e:0a:46:79:eb:4e:74:dd:01:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9C:82:E7:22:3D:AC:46:A7:C7:C2:D7:20:43:2F:A8:8C:79:F9:25
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330313a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:301::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:74:c1:eb:c8:f6:90:c6:c2:da:7c:a6:95:e8:97:3b:85:
         25:b4:55:31:2f:07:cd:52:83:7d:f0:23:60:e1:b0:c8:48:b0:
         d2:da:a5:4e:a9:72:f7:07:96:4b:6b:64:9a:47:00:62:89:b0:
         37:04:03:26:59:22:b0:59:66:5d:7d:76:cb:01:b9:7e:2e:3b:
         b0:69:46:f1:e5:e4:8f:c0:30:26:8a:ec:18:56:eb:f2:20:49:
         14:9c:a3:38:ec:80:4d:bf:f1:4a:68:e8:23:8e:27:90:01:fc:
         df:d7:85:d2:64:99:fb:93:90:39:dc:4f:a4:10:84:56:6f:12:
         25:34:96:37:b3:f1:30:fd:fc:58:d0:fb:65:1b:3f:88:b8:50:
         37:aa:59:33:63:51:66:b8:3f:17:61:d4:d5:2f:91:d7:e3:5d:
         c5:aa:9f:9b:76:99:39:a2:ed:d5:13:6e:6a:6d:ca:73:6d:2c:
         c0:22:67:92:c0:b0:74:13:18:53:e5:59:ad:12:fd:5c:20:94:
         41:e8:b9:e4:0c:ed:70:ca:ce:21:b3:f7:66:e8:5d:19:62:b1:
         b9:76:bf:ca:4b:88:84:4c:1d:19:4c:f8:e2:e7:d4:d1:19:f1:
         22:b5:ec:92:ea:ae:ba:e1:2d:c1:06:68:67:54:10:90:01:61:
         bc:2e:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:06:18 2025 by rpki-client