Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/18/326130613a363034303a3a2f34302d3438203d3e203530323234.roa
File:                     326130613a363034303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          dCMUIq+2dAO/uSxT4086opNo+x9YaxwKAYPICzbEyc0=
Subject key identifier:   96:CD:CF:6A:1F:99:12:1E:27:67:27:8D:14:B7:38:6E:7C:E5:AD:95
Certificate issuer:       /CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
Certificate serial:       4DF7D9C973448F0EFB6A45A722ACD8081077AE72
Authority key identifier: 1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/18/326130613a363034303a3a2f34302d3438203d3e203530323234.roa
Signing time:             Fri 04 Jul 2025 23:28:29 +0000
ROA not before:           Fri 04 Jul 2025 23:23:29 +0000
ROA not after:            Fri 03 Jul 2026 23:28:29 +0000
asID:                     50224
IP address blocks:        2a0a:6040::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl
                          rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f7:d9:c9:73:44:8f:0e:fb:6a:45:a7:22:ac:d8:08:10:77:ae:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C55B4B3B81DE68079381C019FA0C6BB51860388
        Validity
            Not Before: Jul  4 23:23:29 2025 GMT
            Not After : Jul  3 23:28:29 2026 GMT
        Subject: CN=96CDCF6A1F99121E2767278D14B7386E7CE5AD95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:83:70:31:16:c3:0d:ef:28:4d:74:9a:49:
                    dc:1f:8d:d0:4b:f3:4a:fd:f3:58:98:36:14:bc:21:
                    ec:01:48:77:f6:e7:cc:bb:48:7b:cd:fd:3e:4c:57:
                    a1:d2:d6:2a:42:dd:3e:da:89:54:a7:5f:3e:43:a1:
                    dc:72:e4:85:5c:8c:3a:5c:28:6c:e9:e0:48:2a:93:
                    12:41:a1:e4:71:6f:80:06:1b:37:ca:0f:09:78:cf:
                    27:59:83:95:b2:bf:c7:02:1c:f3:d6:c5:33:66:5e:
                    6b:04:7d:7a:6f:fc:97:ba:60:62:96:53:e2:ec:61:
                    41:af:2b:3b:d1:2e:7a:6a:c5:a3:04:54:a2:25:33:
                    a8:c8:3c:bd:fd:3d:27:4c:44:6c:3f:9e:e3:05:3f:
                    e0:0c:d7:d0:21:ae:46:33:e1:35:d7:a5:d6:e8:7f:
                    e9:78:f6:df:87:73:87:ab:d6:8d:d6:67:c5:72:20:
                    38:e1:9e:aa:9b:d3:a5:0e:d9:61:be:05:64:0c:a8:
                    3d:9f:a9:70:97:6a:21:58:8e:b1:eb:74:fc:d0:1f:
                    a8:8e:b0:5b:a8:5a:b6:6c:d8:3f:14:39:9a:9c:7f:
                    3d:c0:84:1b:41:5d:e0:34:e6:eb:05:11:95:7e:9b:
                    b7:7e:71:8f:e5:31:1f:72:9a:e6:bb:c6:97:c8:3b:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CD:CF:6A:1F:99:12:1E:27:67:27:8D:14:B7:38:6E:7C:E5:AD:95
            X509v3 Authority Key Identifier:
                keyid:1C:55:B4:B3:B8:1D:E6:80:79:38:1C:01:9F:A0:C6:BB:51:86:03:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/18/326130613a363034303a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:05:e6:d6:29:ba:b9:f8:50:8c:47:e6:d0:d2:5b:00:b2:
         0b:67:c1:17:61:58:9c:d5:1b:2b:2a:ac:f1:85:51:7c:ef:51:
         34:67:7c:60:89:1f:4d:3a:e8:7d:e8:e1:a6:30:e0:df:66:53:
         23:23:82:5d:34:2c:bd:11:05:7f:98:36:ed:c5:69:b8:5f:e4:
         bb:ce:be:4d:0c:15:a3:9f:ef:19:07:9e:91:dc:a3:40:3e:f3:
         1d:2a:2b:31:03:74:3e:cb:ea:fb:49:c3:b2:1c:bf:ff:ae:68:
         e9:e1:18:16:b0:2d:ae:1a:ca:f0:52:96:6b:d6:ee:2e:b7:b2:
         c7:2d:7b:45:83:a3:49:c7:94:b6:cd:43:b7:d0:bc:19:bf:9a:
         97:eb:f9:2f:47:6b:32:d0:7d:fb:2d:42:cd:a8:a5:d8:41:17:
         46:30:db:24:29:bc:ca:09:fa:f3:fe:46:4c:57:bc:1c:6f:0e:
         ca:1a:e9:79:6e:52:cb:c8:4d:de:ed:b7:f4:cc:ae:b7:63:9d:
         67:7f:25:53:9d:d8:ee:18:74:9c:f7:0c:da:7d:3a:dc:ab:c0:
         dc:a0:e1:52:bf:79:39:88:8a:b8:a5:6c:ac:23:f8:7a:6e:d3:
         f3:8c:42:bb:15:d9:4b:48:6c:3d:3f:47:3b:7a:62:65:25:8d:
         47:58:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:00:57 2025 by rpki-client