Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a316630303a3a2f34332d3438203d3e203439313539.roa
File:                     326130353a646663313a316630303a3a2f34332d3438203d3e203439313539.roa (raw, json)
Hash identifier:          a9IjbCU7vLWgFISFmhxWsfPX2BG1r6S/eJLjxKGj154=
Subject key identifier:   A3:8D:7E:EB:18:46:57:95:2A:26:0A:76:C1:21:70:7B:8F:D5:07:38
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       742CC67E3AF85BB479CE752249B40813A9C1787D
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a316630303a3a2f34332d3438203d3e203439313539.roa
Signing time:             Mon 24 Jul 2023 10:25:17 +0000
ROA not before:           Mon 24 Jul 2023 10:20:17 +0000
ROA not after:            Mon 22 Jul 2024 10:25:17 +0000
asID:                     49159
IP address blocks:        2a05:dfc1:1f00::/43 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2c:c6:7e:3a:f8:5b:b4:79:ce:75:22:49:b4:08:13:a9:c1:78:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Jul 24 10:20:17 2023 GMT
            Not After : Jul 22 10:25:17 2024 GMT
        Subject: CN=A38D7EEB184657952A260A76C121707B8FD50738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fc:f5:a5:10:28:79:99:66:e0:20:a9:a6:bc:
                    30:e9:80:3d:b6:b5:80:69:de:d0:c2:8f:2b:ec:47:
                    25:7a:c9:9c:32:ae:59:ed:a7:e5:ea:f9:68:76:76:
                    4c:00:0e:78:99:02:c6:d6:42:b3:20:d5:5d:a7:e9:
                    86:d8:c4:64:41:5e:91:43:a0:02:49:71:79:4b:48:
                    b2:4a:fa:ce:bd:0b:5b:aa:d9:aa:5c:ca:f7:41:24:
                    8e:17:89:db:d8:06:e3:db:8c:5d:8f:0e:c5:48:5b:
                    7d:0a:61:ab:08:cf:41:f6:b8:21:2f:57:f1:f4:60:
                    df:2b:26:83:e9:9d:c8:00:5e:79:65:9f:bd:2f:30:
                    3d:45:dc:f4:f7:d6:5e:83:3e:f9:6b:89:60:12:07:
                    52:2e:35:8e:39:da:0b:40:27:b4:a6:b8:29:09:d3:
                    d9:17:79:91:0c:34:2c:cf:fc:60:b6:1d:83:a4:2d:
                    8e:7d:20:33:02:8a:7b:32:f5:fb:0f:12:74:8f:b2:
                    fa:86:68:dd:d0:a9:f4:e0:93:75:a4:40:79:9a:4e:
                    aa:d3:9f:c5:f9:6b:5d:3c:eb:76:b8:15:1e:86:c0:
                    47:40:89:d1:95:7a:7c:79:04:50:c6:f5:89:c2:77:
                    a5:93:6d:e6:c5:e0:a1:d1:61:d7:be:29:12:d6:20:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8D:7E:EB:18:46:57:95:2A:26:0A:76:C1:21:70:7B:8F:D5:07:38
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a316630303a3a2f34332d3438203d3e203439313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1f00::/43

    Signature Algorithm: sha256WithRSAEncryption
         70:ab:94:c8:1a:a4:b2:12:5e:fc:a3:cc:40:c9:da:6b:2e:31:
         da:d9:a6:b0:bf:ef:1f:80:60:6d:29:10:4a:fd:3a:39:d5:e0:
         f8:9c:f9:d7:48:8b:dc:e1:19:e2:c9:73:bb:17:08:69:6c:b6:
         8c:8c:0f:34:f7:64:76:5e:cd:9f:83:0f:98:a5:e1:1f:d4:6d:
         92:46:bf:09:1b:00:d2:4a:83:9f:01:4a:61:61:6f:e6:89:07:
         4e:a3:ca:54:a9:dc:2b:c2:9a:db:f3:94:98:4d:a6:98:8e:2e:
         1e:56:99:9f:fa:bd:1e:2d:26:ce:01:ee:2d:c0:f6:3f:71:0c:
         e8:c5:9f:a4:8f:84:4a:e4:32:1c:2d:d0:bf:5e:a5:7a:85:ba:
         df:d3:b8:ae:20:37:ec:11:0f:dc:cb:a8:93:da:a0:c7:71:01:
         04:79:fa:69:09:64:41:ab:88:7b:b6:f8:ab:19:60:db:e4:84:
         9a:1a:da:b5:48:1f:99:94:02:b7:75:92:d8:0b:c9:c1:74:1a:
         e6:e9:c8:2f:b5:7e:16:8e:e4:bd:99:91:a7:52:fa:cb:a6:b7:
         aa:f4:8f:95:72:ed:ef:cd:8a:2e:a7:eb:0f:03:c6:f1:35:5b:
         5d:d4:24:07:6d:18:99:19:86:19:ae:c3:62:e9:a1:6d:19:6c:
         81:0a:4a:58
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIUdCzGfjr4W7R5znUiSbQIE6nBeH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yMzA3MjQxMDIwMTdaFw0yNDA3MjIxMDI1MTdaMDMxMTAvBgNV
BAMTKEEzOEQ3RUVCMTg0NjU3OTUyQTI2MEE3NkMxMjE3MDdCOEZENTA3MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu/PWlECh5mWbgIKmmvDDpgD22
tYBp3tDCjyvsRyV6yZwyrlntp+Xq+Wh2dkwADniZAsbWQrMg1V2n6YbYxGRBXpFD
oAJJcXlLSLJK+s69C1uq2apcyvdBJI4XidvYBuPbjF2PDsVIW30KYasIz0H2uCEv
V/H0YN8rJoPpncgAXnlln70vMD1F3PT31l6DPvlriWASB1IuNY452gtAJ7SmuCkJ
09kXeZEMNCzP/GC2HYOkLY59IDMCinsy9fsPEnSPsvqGaN3QqfTgk3WkQHmaTqrT
n8X5a10863a4FR6GwEdAidGVenx5BFDG9YnCd6WTbebF4KHRYde+KRLWIMlFAgMB
AAGjggH6MIIB9jAdBgNVHQ4EFgQUo41+6xhGV5UqJgp2wSFwe4/VBzgwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYI
KwYBBQUHMAuGaHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwMzUzYTY0NjY2MzMxM2EzMTY2MzAzMDNhM2EyZjM0MzMyZDM0MzgyMDNk
M2UyMDM0MzkzMTM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUqBd/BHwAwDQYJKoZIhvcNAQELBQAD
ggEBAHCrlMgapLISXvyjzEDJ2msuMdrZprC/7x+AYG0pEEr9OjnV4Pic+ddIi9zh
GeLJc7sXCGlstoyMDzT3ZHZezZ+DD5il4R/UbZJGvwkbANJKg58BSmFhb+aJB06j
ylSp3CvCmtvzlJhNppiOLh5WmZ/6vR4tJs4B7i3A9j9xDOjFn6SPhErkMhwt0L9e
pXqFut/TuK4gN+wRD9zLqJPaoMdxAQR5+mkJZEGriHu2+KsZYNvkhJoa2rVIH5mU
Ard1ktgLycF0GubpyC+1fhaO5L2ZkadS+sumt6r0j5Vy7e/Nii6n6w8DxvE1W13U
JAdtGJkZhhmuw2LpoW0ZbIEKSlg=
-----END CERTIFICATE-----
Generated at Mon May 20 13:11:27 2024 by rpki-client on console-fra.rpki-client.org