Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31323a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a31323a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          AqHC0mnHFfcxxq75FJbrC3SNux33pw0fyhqFg1LcFeQ=
Subject key identifier:   08:4D:57:43:A4:D8:18:7B:1B:F3:C0:67:C6:2F:90:B3:C6:0D:88:17
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       6AA54F78E25D3589FD842A192A2C8E78FAC5DA25
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31323a3a2f34382d3438203d3e203438353831.roa
Signing time:             Sun 24 Mar 2024 10:15:51 +0000
ROA not before:           Sun 24 Mar 2024 10:10:51 +0000
ROA not after:            Sun 23 Mar 2025 10:15:51 +0000
asID:                     48581
IP address blocks:        2a0a:6040:12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 21:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a5:4f:78:e2:5d:35:89:fd:84:2a:19:2a:2c:8e:78:fa:c5:da:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 10:10:51 2024 GMT
            Not After : Mar 23 10:15:51 2025 GMT
        Subject: CN=084D5743A4D8187B1BF3C067C62F90B3C60D8817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:08:b7:d0:4f:2f:63:96:3c:6c:af:00:97:
                    8f:62:f8:fb:c3:24:91:84:f7:62:21:63:36:f3:17:
                    39:d8:ff:fc:ca:8c:38:c7:61:6c:dc:0d:92:2a:df:
                    60:9e:f5:da:14:21:9c:3f:20:79:f2:cd:6c:10:22:
                    a1:ad:45:3b:20:50:bf:60:70:a9:55:14:8e:e1:bb:
                    6f:78:83:21:ef:ca:0e:2e:10:b9:74:e9:0c:3b:ac:
                    7c:bc:61:cf:6d:16:97:d3:ec:fe:c0:64:57:66:06:
                    a2:18:97:dd:3a:81:0f:6c:03:24:7f:af:a5:a9:3d:
                    0c:4c:e6:b1:f7:ac:e2:61:fc:af:10:18:be:b5:ad:
                    3e:c6:df:ba:e7:33:0a:51:bd:c2:d0:17:d3:e5:0d:
                    ac:11:00:2c:82:55:74:e1:27:cd:88:72:26:10:6b:
                    e5:a7:10:9d:84:8f:4b:a6:a3:b9:1c:b3:0a:1c:eb:
                    0e:ea:3d:31:2b:2e:2f:4c:7f:18:01:ad:a9:0c:aa:
                    a8:45:69:7c:2e:d4:a3:08:68:a1:05:40:4a:18:8d:
                    a0:9e:e5:f3:9c:ca:43:c7:af:50:f3:fb:58:47:bd:
                    04:20:fe:61:81:68:03:34:55:15:25:3f:13:e8:51:
                    9b:58:6b:51:95:fa:9f:14:80:54:f1:3f:be:8c:43:
                    62:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4D:57:43:A4:D8:18:7B:1B:F3:C0:67:C6:2F:90:B3:C6:0D:88:17
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31323a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:2a:91:37:3c:81:03:2a:09:a4:0b:02:b6:ce:67:57:e8:b2:
         2f:23:93:cc:ae:8d:ba:e7:d6:61:ab:de:b0:cd:cc:c3:1c:a2:
         54:d1:2f:96:45:43:58:ee:09:d4:e6:cb:ba:1f:2b:07:dd:a1:
         1e:8c:92:fb:d7:46:da:c2:81:31:16:d1:99:b6:bf:86:cd:f6:
         56:9c:7b:a0:0d:32:6b:08:b4:4e:d9:a5:24:2f:0b:3e:6d:81:
         fb:6f:3e:6e:e2:60:a6:cb:e0:6d:34:07:e8:89:dc:5c:36:53:
         a6:2e:40:55:b7:ab:a8:ec:59:c2:f4:a6:9f:a8:f1:0d:64:3b:
         fa:c3:43:a2:24:c3:fc:96:21:0f:a6:bd:b0:18:5e:4f:85:35:
         ba:cf:60:c6:c5:ec:d4:ac:79:69:cb:3a:3d:9e:cf:03:6c:83:
         8f:fd:4d:2e:57:91:d6:40:3f:71:c1:81:62:cf:ae:69:7f:14:
         c3:f5:55:b4:1c:2e:91:07:b9:26:f5:78:80:37:bd:30:31:6f:
         d1:1a:58:a5:64:70:a9:d2:ff:7c:5c:59:8e:c9:bf:c7:1d:8c:
         3f:6b:8a:66:d1:b7:75:9b:39:fc:6b:ec:5e:84:d4:a4:e0:4b:
         fe:33:f0:e1:c4:53:50:96:80:8e:4e:30:58:f6:26:72:33:bf:
         0d:cb:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:18:45 2024 by rpki-client on console-ams.rpki-client.org