Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/18/326130353a646663313a3a2f34302d3438203d3e203530323234.roa
File:                     326130353a646663313a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          v1MxL8iJIE6kQwYlPRYA+Z1Jx6iR0DW0AMzFmlpkqzA=
Subject key identifier:   ED:C4:C6:2E:F6:18:56:F6:E0:6E:71:22:1A:93:98:CB:FE:E1:A8:1A
Certificate issuer:       /CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
Certificate serial:       2DE5B02147218607D8203AF9B63830C4092AD9EC
Authority key identifier: 1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/18/326130353a646663313a3a2f34302d3438203d3e203530323234.roa
Signing time:             Fri 04 Jul 2025 23:28:29 +0000
ROA not before:           Fri 04 Jul 2025 23:23:29 +0000
ROA not after:            Fri 03 Jul 2026 23:28:29 +0000
asID:                     50224
IP address blocks:        2a05:dfc1::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl
                          rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e5:b0:21:47:21:86:07:d8:20:3a:f9:b6:38:30:c4:09:2a:d9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
        Validity
            Not Before: Jul  4 23:23:29 2025 GMT
            Not After : Jul  3 23:28:29 2026 GMT
        Subject: CN=EDC4C62EF61856F6E06E71221A9398CBFEE1A81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:4a:0b:3c:90:f0:53:3b:c0:d3:b8:20:a0:
                    0e:a3:43:63:42:86:ef:fb:f0:c2:5d:31:83:dd:12:
                    92:fa:5f:61:e7:42:7f:1f:1e:b9:eb:59:ab:30:e2:
                    bc:a6:35:35:09:8b:01:af:eb:35:87:5d:99:0a:d6:
                    0e:7c:9b:4d:27:26:4f:66:10:34:40:06:35:3c:40:
                    74:b1:a7:62:5f:31:07:d6:69:10:07:3b:7e:8e:7d:
                    f3:22:fe:c7:b2:b4:00:ba:0c:2f:7f:2d:7f:e1:62:
                    c6:2c:9a:6d:3d:7a:2a:17:85:4d:99:28:fb:f7:c8:
                    49:6a:20:08:f4:07:8a:79:59:07:5d:ca:ad:1c:32:
                    39:e2:38:11:d3:0c:24:e2:04:e3:79:9c:ef:1a:29:
                    c3:d2:6e:f9:8d:2e:95:f2:b3:ce:d7:b5:5c:41:ba:
                    13:c8:c3:2a:b3:13:00:9f:b4:83:e7:0b:2a:34:7b:
                    95:b8:66:7f:3e:1b:13:fa:d3:3c:f0:33:8c:fc:ae:
                    ac:45:11:19:f1:aa:d1:c0:7a:4e:9b:ac:3c:27:11:
                    5e:54:aa:b2:31:52:1b:bc:50:b3:c4:7a:19:a5:e7:
                    fa:47:95:1c:19:c2:11:19:e3:83:e3:ca:08:fb:e3:
                    74:8e:29:5a:c6:dd:97:1a:38:e0:62:b0:8f:5a:81:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C4:C6:2E:F6:18:56:F6:E0:6E:71:22:1A:93:98:CB:FE:E1:A8:1A
            X509v3 Authority Key Identifier:
                keyid:1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/18/326130353a646663313a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:b8:4d:37:f0:60:f8:08:16:0e:d7:8b:54:4b:09:f5:0f:
         bd:61:cf:54:94:d7:f0:fe:e0:67:1d:1b:4e:ec:f0:c7:1f:cf:
         90:37:5c:09:f7:c7:d1:72:a2:2e:58:46:f6:48:ec:f8:13:79:
         79:67:c4:0b:a4:5a:21:7e:6b:e6:98:19:8c:59:b3:c0:32:7f:
         93:e5:31:5c:4a:81:cd:33:4d:17:77:65:1e:2f:f5:60:34:41:
         48:2d:a4:be:c0:2a:d9:a0:d2:b2:aa:b0:d6:19:2e:30:e1:70:
         6e:71:3d:bc:4b:2d:ba:aa:8b:c4:c9:82:35:32:f7:bc:f0:c2:
         3e:99:12:6b:b7:7d:16:1e:ab:61:67:ad:f3:4f:e7:d1:75:ed:
         f2:85:6d:26:99:c3:12:fa:83:cc:3d:5b:be:3f:fc:a6:db:0d:
         f9:e2:85:63:be:43:a5:be:75:33:de:ec:66:50:3e:33:b8:3c:
         9f:ad:81:33:f0:73:12:c9:80:5b:12:89:65:d4:06:67:79:d1:
         a9:e8:50:b7:f6:b6:17:99:8d:9f:1b:f4:ed:16:33:86:42:c7:
         6b:39:cf:9c:50:89:f4:6b:b8:d2:9a:7d:5b:32:d2:a1:d3:17:
         94:2a:88:4f:c2:2b:82:82:7a:00:15:33:63:6c:6d:d0:48:80:
         9d:80:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:20:51 2025 by rpki-client