Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          xqX8kPZDiZZOmZRc/jUcKRrdpjq299ny6Bob1xWFI78=
Subject key identifier:   66:44:CA:C1:98:C4:C4:6A:03:1D:F7:B7:97:23:31:0B:F5:55:9D:FA
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       05605C356FB0E6C997E27CBE4110A4C4660912C8
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa
Signing time:             Thu 17 Jul 2025 15:02:22 +0000
ROA not before:           Thu 17 Jul 2025 14:57:22 +0000
ROA not after:            Thu 16 Jul 2026 15:02:22 +0000
asID:                     50224
IP address blocks:        2a14:6f45:313::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 20:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:60:5c:35:6f:b0:e6:c9:97:e2:7c:be:41:10:a4:c4:66:09:12:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Jul 17 14:57:22 2025 GMT
            Not After : Jul 16 15:02:22 2026 GMT
        Subject: CN=6644CAC198C4C46A031DF7B79723310BF5559DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:c7:0b:d3:c7:35:33:80:3e:cc:78:df:d0:
                    e9:42:9e:bb:46:4c:4b:da:4d:59:9b:bb:a9:2b:ee:
                    33:82:54:ec:b1:f2:97:79:cc:76:e7:ff:f2:76:e8:
                    06:eb:4d:7f:26:ee:f9:54:88:7d:c6:86:45:f3:94:
                    1e:58:8d:8a:cc:fb:04:72:62:b0:c7:e4:00:38:e1:
                    80:ca:27:a0:30:d6:5d:bf:d6:9b:ea:f5:ad:f6:04:
                    25:a9:f7:b9:e8:39:d4:20:24:da:d4:77:8f:4b:e5:
                    ac:e6:ef:7b:ca:8d:e5:a0:b6:2e:e5:b3:0e:ef:86:
                    85:05:7a:18:3b:45:4f:5b:bd:e0:b0:f6:64:03:85:
                    69:61:c3:be:ab:08:f8:b9:8e:0e:92:37:ed:5a:f0:
                    49:98:a9:c7:f2:e6:aa:e2:83:5a:85:b7:28:5a:b3:
                    71:ef:8a:f3:cc:53:97:c0:4a:a7:12:5f:8a:a5:5b:
                    9a:75:1c:15:ec:cc:f9:f2:ef:63:7d:cc:5d:57:e8:
                    28:83:b1:4b:27:fe:e2:82:f3:98:a4:7d:cc:2a:01:
                    aa:26:64:47:ed:58:7c:47:44:7f:89:9a:f8:99:88:
                    5b:e7:e9:f3:5a:2f:0b:cc:06:66:eb:e2:84:01:d7:
                    fd:f0:f5:5b:af:20:13:9e:e6:59:28:fc:86:c3:60:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:44:CA:C1:98:C4:C4:6A:03:1D:F7:B7:97:23:31:0B:F5:55:9D:FA
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:313::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:b0:37:f9:46:39:b8:6a:b1:db:8b:ca:00:3e:58:81:2c:ac:
         87:25:ec:da:7d:aa:c7:dc:56:44:13:ed:65:5b:2d:a1:aa:f6:
         72:05:45:7f:25:4a:47:be:71:1b:e4:56:e5:d5:e5:92:8d:0a:
         6a:e8:d0:ae:44:63:70:c3:ac:a3:cb:50:b4:1b:94:2c:80:6b:
         a5:b5:c0:e7:39:62:a7:0c:4b:62:cf:c1:75:ac:2c:27:da:0b:
         19:1c:70:f3:97:8b:4d:af:9f:16:de:64:6b:a2:80:78:d4:d6:
         de:e9:af:09:d6:a9:04:55:f9:06:79:45:3b:ac:72:15:78:19:
         c3:4b:f9:be:02:2b:15:54:14:37:dd:c3:a2:1b:9a:02:64:42:
         5e:8c:c8:50:96:8c:42:7d:59:d8:25:db:99:af:b5:67:07:91:
         86:c5:84:82:8f:6d:e2:ff:65:98:0f:39:59:aa:63:3a:cf:2a:
         54:26:5d:bd:18:c4:03:ba:82:d7:fb:28:99:b1:69:f6:c2:86:
         39:89:ee:2b:11:4b:4b:8d:86:4c:8d:80:32:29:c8:c2:b0:05:
         57:c6:7f:ae:72:c8:61:d4:00:50:90:42:df:c6:25:3c:96:f5:
         ec:e2:7c:b6:a3:6b:df:04:20:e1:30:a4:28:a9:86:94:26:42:
         8c:e4:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:06:22 2025 by rpki-client