Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203530323234.roa
File:                     326130353a646663313a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          GUD1nsncCEO/ykzNTyutBk4hLIybbEDaJR+i2v2JweE=
Subject key identifier:   CC:A1:7E:47:3F:A2:92:8E:5A:30:06:0F:3C:C1:56:48:B7:82:FB:BB
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       3A1AB7EE4859E277018CFE94F2226EADAD67A6B6
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203530323234.roa
Signing time:             Mon 17 Feb 2025 12:58:40 +0000
ROA not before:           Mon 17 Feb 2025 12:53:40 +0000
ROA not after:            Mon 16 Feb 2026 12:58:40 +0000
asID:                     50224
IP address blocks:        2a05:dfc1::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 15:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1a:b7:ee:48:59:e2:77:01:8c:fe:94:f2:22:6e:ad:ad:67:a6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Feb 17 12:53:40 2025 GMT
            Not After : Feb 16 12:58:40 2026 GMT
        Subject: CN=CCA17E473FA2928E5A30060F3CC15648B782FBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ac:3c:d6:c0:60:8e:d7:06:1f:39:01:9a:69:
                    29:bf:5d:7f:a4:8a:b7:9b:79:6f:d4:a2:75:8e:15:
                    7d:8a:63:65:b2:61:f5:a1:5c:72:b4:04:d1:d6:09:
                    5a:54:0c:ae:f6:7d:50:62:5b:56:29:4b:2f:92:5c:
                    db:5c:84:35:d2:3e:0c:b1:10:6c:96:5e:77:74:85:
                    32:2b:d4:4c:df:09:a1:ac:05:f0:10:65:52:f0:ed:
                    e1:bf:c8:a7:d2:40:2c:30:64:61:fd:f3:e7:4a:12:
                    de:b3:c9:0f:5b:41:f6:d7:c5:e2:b7:dc:b8:e9:1a:
                    97:96:f6:a1:46:7d:f4:d1:ea:60:60:26:61:ec:0d:
                    a4:bd:97:7f:7c:46:0f:c6:71:a6:0d:ca:2b:27:70:
                    b4:29:92:13:ee:57:cb:60:22:91:ea:76:dd:32:32:
                    26:07:b7:51:55:c7:f9:17:97:6d:d9:a4:2c:fb:7d:
                    24:20:bc:bf:b2:9a:d4:92:46:22:da:7f:44:21:5b:
                    20:ce:74:b2:91:90:64:13:7e:3c:5d:01:84:aa:b5:
                    a9:ef:15:5b:98:6a:6b:63:cd:74:b8:2e:fa:83:46:
                    5d:bb:88:79:fa:f4:72:80:9a:22:fd:a5:52:6c:c8:
                    4b:f0:4a:71:5e:6f:8a:5b:11:ab:a4:32:81:70:6f:
                    57:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:7E:47:3F:A2:92:8E:5A:30:06:0F:3C:C1:56:48:B7:82:FB:BB
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:c2:c2:7b:e1:1e:e4:24:7d:40:55:ae:ff:db:e0:99:86:08:
         6a:d0:f6:f0:01:34:6b:64:07:28:fb:22:f0:2f:2b:d5:82:47:
         2e:23:a0:d9:7d:1a:14:73:5e:b0:7d:23:d0:a5:39:a5:e8:4f:
         91:67:3d:32:78:5a:48:a1:1d:0c:6c:1b:c2:b6:c0:1f:61:f0:
         f0:c5:2c:70:c8:cd:51:e1:72:06:98:89:55:e2:a4:62:ee:0c:
         00:6c:3c:29:16:78:b2:99:e6:5c:ec:0b:0f:4f:36:3f:ef:9a:
         2d:41:a6:ce:a4:8a:46:2b:5e:54:c8:e6:c2:81:17:0c:45:38:
         d6:66:0b:a0:1c:e5:cc:9e:8c:8d:94:90:84:ad:81:78:87:4f:
         4f:72:38:71:a5:7f:c9:e4:96:90:75:93:3a:7d:16:8a:17:95:
         47:a6:3e:a3:07:9c:53:61:52:5e:ee:eb:3f:fe:a2:96:28:9c:
         4c:44:c7:bd:e4:94:12:ba:5a:dc:e9:c1:75:18:5b:5b:c0:0b:
         ed:55:d5:d7:e9:59:71:b1:0d:47:68:b7:89:e1:8f:89:1e:38:
         11:a6:76:ab:18:08:c8:43:e9:a6:c2:ad:f6:e0:83:cc:43:05:
         e4:9b:0e:05:1c:a8:6c:63:51:21:bf:96:84:a7:1e:67:ae:a3:
         79:20:77:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:32:20 2025 by rpki-client