Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31303a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31303a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          gcn/ucrS8TixZBJXJUa+k24XBp//LQugk4r2ZgwdZVw=
Subject key identifier:   CD:A7:78:CA:8D:7F:4F:B7:32:C9:86:2B:F1:55:A1:DE:72:A6:88:5F
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       7B444EB6DC88FFC952D19A69CC4433519E5CA8F6
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31303a3a2f34382d3438203d3e203530323234.roa
Signing time:             Fri 14 Feb 2025 15:58:39 +0000
ROA not before:           Fri 14 Feb 2025 15:53:39 +0000
ROA not after:            Fri 13 Feb 2026 15:58:39 +0000
asID:                     50224
IP address blocks:        2a0a:6040:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 15:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:44:4e:b6:dc:88:ff:c9:52:d1:9a:69:cc:44:33:51:9e:5c:a8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Feb 14 15:53:39 2025 GMT
            Not After : Feb 13 15:58:39 2026 GMT
        Subject: CN=CDA778CA8D7F4FB732C9862BF155A1DE72A6885F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:7c:f3:0a:c8:03:8c:0b:07:64:12:ae:32:
                    eb:06:19:73:83:60:a4:b9:01:68:ec:57:bd:20:8d:
                    b3:c1:90:de:f3:fe:bd:03:b6:17:cc:9f:03:99:33:
                    76:09:42:a0:0e:4f:79:bf:fa:3a:c7:64:c8:f5:3c:
                    96:95:03:1c:c0:6e:79:c7:98:57:d6:9a:8c:f2:cb:
                    37:52:98:4c:99:52:52:04:22:c7:63:60:9d:e1:c4:
                    a7:84:62:a7:a8:84:ad:9e:50:18:bc:e0:8e:58:38:
                    b7:db:2d:63:04:02:fa:62:99:dc:29:bf:be:c4:c4:
                    6d:68:c1:af:a3:30:68:6d:10:2f:16:e7:5b:9c:b2:
                    1d:c6:9a:4d:f9:e9:a7:8b:f7:84:44:c2:04:6e:ac:
                    c5:9f:eb:cb:2f:0a:1f:52:67:c9:cf:46:80:91:dd:
                    55:3d:51:f0:7f:0a:65:f7:b6:ed:7d:16:b0:16:b6:
                    7b:82:90:18:5a:a4:33:04:f6:6f:4b:a9:ca:44:35:
                    b5:8d:c4:d9:b2:3c:68:4a:0a:3f:91:d6:cb:07:0f:
                    1f:a2:61:3a:19:15:84:a1:11:7b:4e:a0:75:fb:a9:
                    f8:7f:cf:cb:ab:18:2e:f3:26:3f:68:5f:1b:a8:57:
                    b8:ca:ab:45:40:f4:bc:d3:d9:cb:22:15:75:93:27:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A7:78:CA:8D:7F:4F:B7:32:C9:86:2B:F1:55:A1:DE:72:A6:88:5F
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31303a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:df:b4:70:07:8c:0b:8a:ca:ae:75:83:c9:3a:9b:27:28:
         c4:04:f9:eb:39:01:1b:a2:0c:40:89:3e:19:39:79:92:ed:a4:
         46:e7:97:b3:91:2c:e2:d7:68:bf:ac:e3:ad:cf:c1:25:76:0e:
         12:24:8a:22:31:90:77:f2:15:ab:ed:b0:03:8e:66:05:26:99:
         59:74:16:5f:a8:b2:03:29:f3:94:83:c4:da:5b:e0:9d:20:7f:
         60:95:10:95:84:92:6c:82:bb:e5:b1:f1:ec:5f:5a:e0:93:72:
         dc:b6:46:bc:9b:65:01:f7:a0:93:09:fc:6e:09:dc:6d:85:36:
         40:7a:dd:1a:d8:ec:98:39:e1:bc:48:3a:ac:45:7a:4e:62:cf:
         6c:fd:8e:08:e6:4e:40:9a:af:0c:66:81:12:fc:e2:54:ee:32:
         fb:ec:a3:ff:f1:95:34:b5:ac:c3:ec:c6:f0:1c:eb:9f:20:3a:
         c0:a7:53:02:c7:f1:5e:57:22:66:fa:3a:6c:b0:bf:64:e0:78:
         97:68:d0:05:20:e7:59:a2:fd:5f:5f:4b:54:3e:fc:6e:c2:7b:
         cc:85:a2:69:31:20:02:ca:d6:60:24:33:ca:30:0f:7b:d6:3f:
         dd:56:4a:af:be:3c:1f:41:ff:60:6d:e6:0c:81:06:49:c4:b7:
         10:ef:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:37:33 2025 by rpki-client