Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3a2f34302d3430203d3e203530323234.roa
File:                     326131343a366634353a3a2f34302d3430203d3e203530323234.roa (raw, json)
Hash identifier:          J2ekyktMa+Dqz5giZgC9k+TmQgR/vDeLxvemJMaaG/Y=
Subject key identifier:   91:1B:FC:D4:D2:4C:8C:BE:0E:C7:E4:9A:15:42:8A:8D:B7:39:4B:31
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       02FE8061E9D4D0E2212CC27E67E9A9E5E4249204
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3a2f34302d3430203d3e203530323234.roa
Signing time:             Fri 18 Jul 2025 15:02:22 +0000
ROA not before:           Fri 18 Jul 2025 14:57:22 +0000
ROA not after:            Fri 17 Jul 2026 15:02:22 +0000
asID:                     50224
IP address blocks:        2a14:6f45::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 20:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fe:80:61:e9:d4:d0:e2:21:2c:c2:7e:67:e9:a9:e5:e4:24:92:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Jul 18 14:57:22 2025 GMT
            Not After : Jul 17 15:02:22 2026 GMT
        Subject: CN=911BFCD4D24C8CBE0EC7E49A15428A8DB7394B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:91:fd:bb:25:bb:0f:63:2a:b4:23:88:fe:
                    bd:0e:77:67:11:2a:1a:90:9b:cc:00:12:1f:ed:c9:
                    ac:ef:d4:05:80:79:be:ad:58:5c:6c:23:aa:66:19:
                    4a:d1:9a:24:58:4c:21:6b:4e:53:87:98:a4:96:24:
                    0d:65:9a:e0:15:d3:a4:65:6c:90:2a:da:89:93:b0:
                    65:d2:d8:f3:5e:11:56:d6:6e:e4:2b:81:b2:5c:be:
                    83:b7:91:35:18:23:3f:dd:f3:74:32:92:0f:d9:a2:
                    b8:ed:51:d6:19:1d:45:99:ce:f9:45:3e:94:b9:ee:
                    17:f8:05:d6:5f:5c:ee:c3:68:b2:9f:8e:db:4e:d6:
                    fe:1f:3b:be:c1:50:8c:0d:f2:df:96:2e:cc:6f:f3:
                    48:3a:9a:70:c4:8b:08:01:5e:6b:cf:6c:05:65:94:
                    7d:cf:6f:b0:f2:64:12:a4:1a:d7:bb:66:55:fd:69:
                    74:f4:cc:f3:ea:48:17:54:2a:59:98:20:99:84:ff:
                    5c:5d:76:88:d6:a1:e4:a4:29:fe:9a:2c:54:55:d6:
                    95:03:2a:c6:a3:a6:40:4f:5f:4b:3b:36:89:08:35:
                    01:41:95:69:1e:f0:43:93:40:2a:65:d9:4c:f4:88:
                    38:7a:4b:fa:7e:cf:c7:87:54:d5:66:5c:f7:82:8a:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:FC:D4:D2:4C:8C:BE:0E:C7:E4:9A:15:42:8A:8D:B7:39:4B:31
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3a2f34302d3430203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:69:cd:db:28:64:0e:1e:46:41:ee:1b:b2:c3:7e:46:cb:57:
         fd:8d:e3:c7:9c:eb:f3:07:f4:eb:8a:08:56:16:66:d3:75:dd:
         f4:7f:7f:b6:45:3a:f4:93:a2:5e:59:dd:1f:9a:3e:3a:5a:48:
         49:e5:4a:55:fd:8e:e4:2c:64:93:f1:fa:7d:9c:42:4f:ba:cc:
         bb:85:57:bc:d5:b4:2d:4e:2b:16:ab:c6:d0:a5:e5:a2:b3:7c:
         5d:8c:be:4b:d6:a6:bd:89:c6:73:1d:4b:0a:d2:af:b3:fc:7d:
         6e:e4:09:9d:d4:62:5f:da:e9:d8:9f:e2:c5:3c:7e:c6:c6:48:
         75:2f:32:a0:ae:53:ab:33:da:12:ef:5a:d7:be:21:da:af:c0:
         75:e6:a3:28:88:82:10:73:2a:cf:0f:cd:71:e6:3d:01:a3:af:
         38:e0:1b:00:71:28:8a:16:38:f7:9a:14:5e:3e:cc:78:7e:6e:
         ce:55:4c:3b:5a:dc:4d:93:3c:25:32:23:b8:b1:aa:e7:ee:1c:
         a6:f9:24:03:aa:fb:f0:01:ca:4c:14:27:2e:b5:7d:03:27:b9:
         b3:63:67:ed:c5:4c:b2:38:2b:71:f2:7b:62:29:85:7f:de:f7:
         45:6c:da:b4:09:41:5d:6e:06:75:3d:7c:58:6d:76:a5:19:80:
         38:a7:1b:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 09:07:30 2025 by rpki-client