Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          uCxGEl6Uh4OxkucLSjJxEKlXAcPJGLfX+WZkPALUEkM=
Subject key identifier:   4A:EE:4E:CB:30:E6:13:05:52:B1:31:1E:63:E0:66:01:AF:BC:16:97
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       2811A8EE4C4DD6092A567038EE967821D49DE68D
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa
Signing time:             Fri 18 Jul 2025 15:02:22 +0000
ROA not before:           Fri 18 Jul 2025 14:57:22 +0000
ROA not after:            Fri 17 Jul 2026 15:02:22 +0000
asID:                     50224
IP address blocks:        2a14:6f45:311::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 20:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:11:a8:ee:4c:4d:d6:09:2a:56:70:38:ee:96:78:21:d4:9d:e6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Jul 18 14:57:22 2025 GMT
            Not After : Jul 17 15:02:22 2026 GMT
        Subject: CN=4AEE4ECB30E6130552B1311E63E06601AFBC1697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:ba:b5:81:b8:78:2a:ef:4c:94:23:23:eb:
                    56:39:22:f0:77:11:9e:4c:0f:20:98:6c:38:99:9c:
                    d7:ce:5a:9b:10:7a:ef:71:e3:97:b1:e5:4d:c5:27:
                    db:3c:57:fa:a0:95:f3:32:7b:51:fc:80:fd:e4:17:
                    6c:e8:99:4c:29:34:47:7f:6d:17:22:a1:ce:4b:c6:
                    83:28:93:4a:a0:4d:59:b4:4b:4c:d6:8f:fc:f2:47:
                    67:89:77:49:ea:61:f4:de:d0:5a:6a:24:73:1d:a1:
                    4a:a5:9d:1c:40:f2:b8:2b:7d:ec:ff:79:fb:1c:9b:
                    bb:7b:ce:d1:9c:4b:3f:3d:bf:a2:50:3d:ec:9e:a9:
                    04:c4:51:4c:c5:f2:17:55:3f:cf:8c:d7:1f:9c:05:
                    49:34:ae:1a:3a:35:ec:ef:b3:76:3a:b4:b6:a3:13:
                    b6:fa:48:64:a9:cb:46:88:6b:38:ee:f0:b3:73:c0:
                    07:a5:ef:6a:00:0d:99:4b:8f:b0:c3:ca:5a:8e:0b:
                    64:97:29:46:d3:45:0d:de:55:b6:7d:aa:b9:b9:94:
                    6f:2d:5c:e3:91:30:8a:64:52:2a:6b:9b:9d:1c:56:
                    70:05:69:d3:fa:d7:e1:83:77:89:f1:ec:69:04:fa:
                    d2:fd:ca:02:ba:f9:0a:6d:e7:c6:b2:56:8a:53:71:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EE:4E:CB:30:E6:13:05:52:B1:31:1E:63:E0:66:01:AF:BC:16:97
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:311::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:4c:4a:16:29:a7:1b:ca:4f:07:b6:de:32:3b:a5:bb:2f:08:
         35:6e:8f:60:c3:81:59:d9:f2:d2:7f:ec:0f:87:3d:85:8a:fe:
         50:0b:75:30:03:db:97:53:f8:1a:01:cf:00:55:29:f6:a2:df:
         ab:8d:65:8b:b7:f7:3a:94:e5:2b:99:e0:5a:b3:8c:10:c9:6e:
         55:16:ea:42:6a:3b:3d:47:2d:ad:db:2f:1d:49:ab:1e:79:9f:
         ec:9e:fb:61:e7:af:80:81:35:f1:b8:7b:2d:8b:7c:fc:aa:5e:
         64:e4:9d:3d:19:5f:a4:f1:4e:5a:e6:16:e0:6d:3b:21:04:8c:
         fb:ec:44:70:33:9a:c8:bd:45:bb:cd:4e:24:bf:9d:6c:b0:fd:
         30:61:3b:fd:63:f2:17:ed:76:67:f2:d9:a4:ef:23:8b:18:12:
         fd:62:16:b8:2d:31:e6:40:38:ee:68:2c:b3:ff:48:06:1a:5b:
         6a:5a:eb:91:39:ec:d9:3a:65:4c:69:7e:58:f3:b6:31:b7:42:
         5b:3c:d9:10:3e:e6:e8:fb:64:c5:dd:ce:ee:64:05:bd:2b:2f:
         d8:8d:22:4b:01:2c:c2:f5:c9:27:c5:b9:c6:bd:04:ef:f6:cc:
         0a:de:b2:1b:58:29:47:54:95:3c:36:26:4a:e9:17:f1:8b:ef:
         0a:4d:a8:b2
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIUKBGo7kxN1gkqVnA47pZ4IdSd5o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDOTJEOUIxQzgzMDdCNzBDNDcyOTAxNjZENTk4OUNF
RkFCRENDNDAeFw0yNTA3MTgxNDU3MjJaFw0yNjA3MTcxNTAyMjJaMDMxMTAvBgNV
BAMTKDRBRUU0RUNCMzBFNjEzMDU1MkIxMzExRTYzRTA2NjAxQUZCQzE2OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV6rq1gbh4Ku9MlCMj61Y5IvB3
EZ5MDyCYbDiZnNfOWpsQeu9x45ex5U3FJ9s8V/qglfMye1H8gP3kF2zomUwpNEd/
bRcioc5LxoMok0qgTVm0S0zWj/zyR2eJd0nqYfTe0FpqJHMdoUqlnRxA8rgrfez/
efscm7t7ztGcSz89v6JQPeyeqQTEUUzF8hdVP8+M1x+cBUk0rho6Nezvs3Y6tLaj
E7b6SGSpy0aIazju8LNzwAel72oADZlLj7DDylqOC2SXKUbTRQ3eVbZ9qrm5lG8t
XOORMIpkUiprm50cVnAFadP61+GDd4nx7GkE+tL9ygK6+Qpt58ayVopTceq7AgMB
AAGjggIfMIICGzAdBgNVHQ4EFgQUSu5OyzDmEwVSsTEeY+BmAa+8FpcwHwYDVR0j
BBgwFoAUBMktmxyDB7cMRykBZtWYnO+r3MQwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzE1LzA0QzkyRDlCMUM4MzA3QjcwQzQ3MjkwMTY2RDU5ODlDRUZBQkRDQzQuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2
LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMDRDOTJEOUIxQzgzMDdCNzBDNDcyOTAxNjZE
NTk4OUNFRkFCRENDNC5jZXIwgYMGCCsGAQUFBwELBHcwdTBzBggrBgEFBQcwC4Zn
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTUvMzI2MTMxMzQz
YTM2NjYzNDM1M2EzMzMxMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMwMzIz
MjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKhRvRQMRMA0GCSqGSIb3DQEBCwUAA4IBAQDJTEoWKacb
yk8Htt4yO6W7Lwg1bo9gw4FZ2fLSf+wPhz2Fiv5QC3UwA9uXU/gaAc8AVSn2ot+r
jWWLt/c6lOUrmeBas4wQyW5VFupCajs9Ry2t2y8dSaseeZ/snvth56+AgTXxuHst
i3z8ql5k5J09GV+k8U5a5hbgbTshBIz77ERwM5rIvUW7zU4kv51ssP0wYTv9Y/IX
7XZn8tmk7yOLGBL9Yha4LTHmQDjuaCyz/0gGGltqWuuROezZOmVMaX5Y87Yxt0Jb
PNkQPubo+2TF3c7uZAW9Ky/YjSJLASzC9cknxbnGvQTv9swK3rIbWClHVJU8NiZK
6Rfxi+8KTaiy
-----END CERTIFICATE-----
Generated at Mon Jul 21 09:06:21 2025 by rpki-client