Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/18/326130613a363034303a313030303a3a2f34302d3430203d3e203530323234.roa
File:                     326130613a363034303a313030303a3a2f34302d3430203d3e203530323234.roa (raw, json)
Hash identifier:          DpUQ2HF+BV0/AvZ8AtgeX7U0SUU3fOQZcVFUxRPkYZk=
Subject key identifier:   B2:2D:D1:F7:D8:E1:33:82:76:4D:CC:8D:DF:8E:F4:53:E1:3B:FC:3D
Certificate issuer:       /CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
Certificate serial:       4AE558C302C999A10EDCBC8B74094837146A0032
Authority key identifier: 1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/18/326130613a363034303a313030303a3a2f34302d3430203d3e203530323234.roa
Signing time:             Fri 04 Jul 2025 23:28:30 +0000
ROA not before:           Fri 04 Jul 2025 23:23:30 +0000
ROA not after:            Fri 03 Jul 2026 23:28:30 +0000
asID:                     50224
IP address blocks:        2a0a:6040:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl
                          rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e5:58:c3:02:c9:99:a1:0e:dc:bc:8b:74:09:48:37:14:6a:00:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
        Validity
            Not Before: Jul  4 23:23:30 2025 GMT
            Not After : Jul  3 23:28:30 2026 GMT
        Subject: CN=B22DD1F7D8E13382764DCC8DDF8EF453E13BFC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:27:6b:4c:0c:02:97:7e:1b:44:a7:c8:73:66:
                    ad:21:c3:04:6c:96:59:c6:f9:a7:1d:d1:c5:f5:bd:
                    d5:cf:aa:ec:8b:e5:ec:9e:2b:8a:03:f0:c0:3d:ce:
                    da:64:f8:12:df:70:6a:59:f6:db:1a:22:c4:f5:4c:
                    69:53:8e:86:f9:37:a4:0d:c9:9c:89:16:12:a3:36:
                    b2:fb:47:9a:8e:a0:73:96:15:94:bf:52:9b:7c:6c:
                    41:f0:1f:19:4e:e9:07:26:64:32:e4:f6:c6:b2:e1:
                    d5:f1:47:46:c5:d2:d7:ee:b9:6f:6a:a5:b6:4e:2c:
                    21:50:8e:3d:69:69:d5:84:61:ab:46:ef:3b:5c:1d:
                    d9:59:37:23:b8:70:28:e3:e9:d9:30:10:44:7c:66:
                    b1:51:21:b1:ad:6f:56:a4:da:7d:fb:e6:5d:33:19:
                    c9:71:3e:de:23:57:1d:b1:9d:77:f6:fa:10:ce:d7:
                    7c:93:2e:42:32:7c:12:e2:f1:5c:02:f0:3c:4a:c4:
                    d3:16:29:f0:f5:66:44:7a:ed:db:f7:82:84:92:0e:
                    a7:be:a1:c4:42:c9:05:3a:81:61:6f:36:c8:b6:ae:
                    9a:5b:bf:7a:e4:19:7d:8a:49:03:8f:63:20:15:31:
                    a3:4e:9c:62:92:fc:2d:7c:3c:f2:d3:a6:a5:54:05:
                    eb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2D:D1:F7:D8:E1:33:82:76:4D:CC:8D:DF:8E:F4:53:E1:3B:FC:3D
            X509v3 Authority Key Identifier:
                keyid:1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/18/326130613a363034303a313030303a3a2f34302d3430203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:2e:23:32:20:a6:90:c0:f7:47:9c:99:7e:aa:f3:cc:39:cf:
         0e:c5:30:de:c7:74:27:4c:ee:12:bc:7c:dd:59:16:c7:fa:79:
         02:ca:1f:78:fe:42:12:1c:d7:50:f6:91:e1:7c:3d:8c:43:50:
         33:f3:b0:a2:d8:00:f6:6c:fb:b9:b8:af:06:e5:95:a9:5a:72:
         a0:6c:ca:b6:87:a7:14:df:a6:67:00:8d:07:c2:4e:78:85:f7:
         83:37:09:5c:2f:ca:33:76:17:51:29:fd:40:65:43:52:e4:d9:
         25:d4:f6:6a:cb:de:32:9f:f4:8b:22:58:0c:c2:97:43:24:41:
         b4:eb:56:90:67:af:c4:87:1e:37:16:b4:7c:67:60:aa:b1:fb:
         07:e7:b5:ec:26:ca:1d:75:9b:4a:34:b1:f0:6e:e2:0a:10:23:
         af:74:30:5e:42:6e:54:58:d3:bd:f4:b9:48:d6:c1:77:d8:f6:
         4d:15:1d:79:18:b8:d5:04:5e:b8:ad:78:9a:e8:f8:d6:ce:ed:
         fc:f8:77:28:04:d3:49:ac:a3:f4:c3:72:d6:cb:c9:17:98:9c:
         7e:18:50:10:f0:88:32:f5:39:32:c6:5f:10:a0:ad:08:4d:07:
         2d:c9:e2:0a:2f:b9:ef:cb:42:e4:d5:6a:f5:26:42:8b:76:d6:
         5c:18:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:35:31 2025 by rpki-client