Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/18/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa
File:                     326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa (raw, json)
Hash identifier:          TE03AePkvJbRjhbmf79L58kPhhzf4kah0VyapEpy8B8=
Subject key identifier:   1B:EE:B5:95:C1:99:E9:B9:28:3A:7A:99:BC:F5:77:EC:9D:17:CA:EF
Certificate issuer:       /CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
Certificate serial:       4FB258B97E332A29D9714CA94D015508B8C4B213
Authority key identifier: 1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/18/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa
Signing time:             Fri 04 Jul 2025 23:28:29 +0000
ROA not before:           Fri 04 Jul 2025 23:23:29 +0000
ROA not after:            Fri 03 Jul 2026 23:28:29 +0000
asID:                     199177
IP address blocks:        2a05:dfc1:1fd0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl
                          rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b2:58:b9:7e:33:2a:29:d9:71:4c:a9:4d:01:55:08:b8:c4:b2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
        Validity
            Not Before: Jul  4 23:23:29 2025 GMT
            Not After : Jul  3 23:28:29 2026 GMT
        Subject: CN=1BEEB595C199E9B9283A7A99BCF577EC9D17CAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:a0:97:c4:b0:d9:a2:1a:16:fa:1f:61:3f:
                    f3:9c:7a:fb:6f:b2:a1:3a:77:ed:80:58:e6:d2:99:
                    c8:64:45:fb:56:b8:c4:85:e0:09:f4:cc:e9:21:15:
                    02:aa:0f:cd:d8:50:b4:6c:12:28:94:2c:8b:85:97:
                    07:d3:ad:24:c3:49:d6:6a:11:27:54:93:f0:b2:47:
                    7c:d6:0f:c0:7b:e4:d5:b9:1b:fe:2e:31:9b:b5:b0:
                    cb:77:f6:d4:c5:7c:aa:b6:ec:db:14:1e:a6:98:89:
                    43:0c:de:a2:83:ab:5e:14:81:ae:c1:63:43:13:ea:
                    ff:96:40:d2:3d:6b:c4:fd:7f:34:0b:78:4b:92:db:
                    16:de:b1:2e:4a:cc:46:11:f5:6b:57:f4:58:5a:73:
                    d2:87:c4:6d:11:e0:31:b5:fd:07:7d:24:ed:7c:62:
                    81:81:ee:5f:d3:e8:ea:74:db:9a:f5:70:6d:a4:3f:
                    61:1d:66:42:69:62:f9:d2:85:2e:37:6a:14:b5:06:
                    69:8a:e6:87:c9:de:68:f7:6b:6f:7e:d9:d9:34:13:
                    ce:5b:ff:a7:63:db:ec:41:8b:a2:6d:6a:cb:ce:5f:
                    96:56:11:46:83:99:13:c3:48:37:5c:2c:9d:ce:33:
                    a8:59:6c:04:19:ce:45:ea:23:d1:f5:b9:ef:bf:3c:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:B5:95:C1:99:E9:B9:28:3A:7A:99:BC:F5:77:EC:9D:17:CA:EF
            X509v3 Authority Key Identifier:
                keyid:1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/18/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1fd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:08:87:a1:dc:0e:8e:2d:57:17:5d:62:08:f6:de:d0:fa:74:
         67:74:12:c3:c9:d7:91:1f:62:c4:92:d1:b5:0d:ff:73:8b:36:
         aa:92:65:3b:3c:b1:ad:47:1e:1f:43:c0:6e:05:57:a4:2c:5c:
         2e:81:75:75:3b:cb:7b:56:3d:ce:47:78:b1:30:8f:dc:0c:22:
         76:99:52:4a:77:ff:d3:76:0b:93:7b:e3:ed:0f:41:fd:ef:fa:
         6a:a1:a9:6f:e2:e6:14:41:3f:17:df:7c:dc:ed:6f:84:62:1a:
         81:9d:af:ef:ec:5f:13:54:42:67:89:d2:a3:f7:49:32:19:ba:
         c7:37:7c:b4:ed:7a:fd:68:1b:5b:19:93:56:0a:74:08:e6:af:
         1b:90:33:ea:8e:8c:13:fe:c2:c6:09:48:c6:c9:2d:da:1a:f1:
         36:54:ee:ee:35:1f:25:a3:bc:5b:19:77:0d:a2:08:f6:fe:fc:
         67:95:95:53:b9:5e:5d:58:ae:80:4d:b8:ba:b6:ee:32:e9:f0:
         42:23:9d:73:71:61:64:e4:99:3e:11:53:b4:42:7c:06:9f:0f:
         01:d4:00:1a:43:dc:84:02:3b:af:e5:4f:29:6c:4b:88:c3:7e:
         53:8a:23:f8:32:a5:74:e2:ae:5c:9f:5c:97:f1:66:8a:9b:12:
         c2:90:84:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:28:49 2025 by rpki-client