Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/18/326130613a363034303a3a2f34302d3430203d3e203539393230.roa
File:                     326130613a363034303a3a2f34302d3430203d3e203539393230.roa (raw, json)
Hash identifier:          +isVvu27c8ETjqKh4/4s5ZgC5EPQzgjhZ9M6Vl+S5+k=
Subject key identifier:   A8:CD:82:F0:DF:6D:C2:6E:34:83:67:B6:65:F3:78:8B:D2:31:1B:59
Certificate issuer:       /CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
Certificate serial:       54A2AEDE508C38E9D7CCF1F14026902E35D9E466
Authority key identifier: 1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/18/326130613a363034303a3a2f34302d3430203d3e203539393230.roa
Signing time:             Fri 04 Jul 2025 23:28:29 +0000
ROA not before:           Fri 04 Jul 2025 23:23:29 +0000
ROA not after:            Fri 03 Jul 2026 23:28:29 +0000
asID:                     59920
IP address blocks:        2a0a:6040::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl
                          rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 08:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a2:ae:de:50:8c:38:e9:d7:cc:f1:f1:40:26:90:2e:35:d9:e4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
        Validity
            Not Before: Jul  4 23:23:29 2025 GMT
            Not After : Jul  3 23:28:29 2026 GMT
        Subject: CN=A8CD82F0DF6DC26E348367B665F3788BD2311B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:f2:a3:e8:b7:1a:48:ec:b3:48:b2:ab:53:
                    c8:8f:c8:b7:e0:b0:1c:23:9d:1c:a9:50:0b:e2:15:
                    22:de:78:20:9f:d0:15:1d:ba:4c:94:50:7a:96:be:
                    7c:21:2c:71:80:8f:4b:c4:e9:b1:9d:55:1e:39:96:
                    dd:2f:c5:a7:46:77:6b:cb:8e:16:08:82:45:be:dd:
                    3d:6b:f6:f9:89:04:fd:57:8e:16:68:34:55:4b:cb:
                    e6:6e:c7:d6:ed:24:38:ed:24:74:cf:a2:61:fc:d5:
                    53:ff:4c:9a:81:19:01:b5:bf:1b:21:96:c7:33:7d:
                    88:d4:ff:1b:52:df:bc:7c:fa:62:9e:91:a2:37:7a:
                    65:76:64:ad:0a:cc:96:5c:49:66:77:73:3b:8d:b5:
                    a4:d0:7e:0f:a3:10:25:60:9b:e0:72:bb:52:49:ac:
                    52:25:82:a5:c2:bb:b0:43:b4:cd:46:6f:09:80:45:
                    1f:f9:6a:7a:7e:5d:33:fa:94:37:36:28:c4:1a:f3:
                    b8:4b:2d:d4:b2:bf:f3:da:cc:2d:22:98:1e:ac:cb:
                    bc:61:a0:6d:ac:39:88:8d:51:91:63:90:b5:2c:cd:
                    ab:74:a8:26:06:c8:e7:a6:9d:e7:11:0e:b4:50:ae:
                    0b:3e:3b:16:66:0b:0a:0d:1a:bc:45:54:d6:28:52:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CD:82:F0:DF:6D:C2:6E:34:83:67:B6:65:F3:78:8B:D2:31:1B:59
            X509v3 Authority Key Identifier:
                keyid:1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/18/326130613a363034303a3a2f34302d3430203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:d4:e4:8d:8b:54:db:ec:d3:ad:ad:66:fd:11:eb:55:76:
         29:10:61:7d:c1:fa:16:c9:0b:99:5b:69:ee:88:aa:15:87:48:
         31:ba:65:1e:5f:75:6d:76:cd:1a:5a:72:ef:97:b7:8c:02:43:
         cd:09:93:ed:f0:2e:96:6b:75:56:b8:21:e2:61:ef:01:1e:b4:
         9c:2f:9a:b6:fa:e1:d9:71:95:50:f1:e3:45:cc:b3:5c:58:03:
         46:b0:35:01:a3:8d:64:41:92:19:06:ea:f1:21:98:aa:b2:69:
         16:1a:2d:46:33:95:46:03:91:4d:3a:c6:17:5f:ce:d4:5a:39:
         27:b9:64:1f:50:65:1c:09:78:20:49:05:0d:35:2a:f0:75:4f:
         f7:58:0f:d7:fa:85:59:40:3e:ea:7d:f9:99:d7:e0:04:5f:b7:
         8c:95:3d:44:c6:e7:8c:1b:15:41:f6:93:41:7c:b3:7e:cf:a6:
         f8:25:d0:ae:c1:51:9c:a6:06:87:5e:58:dd:c4:94:e2:b1:df:
         1b:bf:f1:8a:b1:51:f5:54:cd:0a:53:47:a6:21:7b:41:54:eb:
         c5:de:ba:a6:d2:53:68:65:04:13:ab:10:b3:96:f4:04:85:63:
         e4:57:66:cd:1c:07:04:3f:25:f0:1c:c1:7f:8f:91:12:16:ab:
         65:a5:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:58:10 2025 by rpki-client