Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31323a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31323a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          rEw89xlNaKO2g4OaoU64P7lmDNY4dnyLayGcDssjDu4=
Subject key identifier:   AF:F7:6D:20:CA:49:74:2C:D4:5A:06:28:2C:4B:29:75:2E:11:5B:51
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       307B568B3CC7FE203ADAE1B7BC73B180C8041959
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31323a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 22 Apr 2024 11:12:52 +0000
ROA not before:           Mon 22 Apr 2024 11:07:52 +0000
ROA not after:            Mon 21 Apr 2025 11:12:52 +0000
asID:                     50224
IP address blocks:        2a0a:6040:12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7b:56:8b:3c:c7:fe:20:3a:da:e1:b7:bc:73:b1:80:c8:04:19:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Apr 22 11:07:52 2024 GMT
            Not After : Apr 21 11:12:52 2025 GMT
        Subject: CN=AFF76D20CA49742CD45A06282C4B29752E115B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:36:da:94:95:21:f4:b0:ac:27:cf:56:74:
                    ba:ca:1a:80:f6:96:e6:11:c6:65:63:41:a7:d2:48:
                    4a:e5:d0:83:5c:05:f2:ea:7f:b9:9f:ad:b9:77:52:
                    84:4d:e6:2f:74:4c:1d:03:40:0d:99:1c:f5:c8:a7:
                    0f:68:b3:cf:f3:8d:8f:27:d8:2f:75:db:c7:fc:ba:
                    39:cf:41:fc:e8:ff:49:1b:74:84:cc:76:3d:85:80:
                    cb:44:81:52:0f:b3:b9:b0:c2:ba:ee:56:dc:56:a7:
                    ad:7b:c5:d4:dc:11:6a:42:dd:c2:ab:84:10:8d:2c:
                    56:bd:52:a3:ab:0a:10:57:f7:9d:e1:c0:b6:e8:14:
                    dc:1c:a0:5f:d4:89:7a:b7:02:8f:bf:40:6d:78:06:
                    b5:78:98:ce:e7:30:01:23:a4:05:97:f6:93:70:94:
                    ef:e5:19:3e:21:77:0f:22:91:fa:1f:1c:54:ce:b1:
                    ec:d3:95:c0:dc:97:a2:f4:01:64:c8:ba:43:dd:53:
                    bb:68:9b:c5:07:c1:92:3d:22:43:c2:02:01:87:3a:
                    3c:96:ec:32:90:56:00:15:1e:fd:c3:c5:26:a2:f5:
                    8f:1f:91:e5:fe:99:ac:94:34:93:22:04:a3:e5:fd:
                    24:89:ba:71:d3:66:88:a8:9d:37:20:e3:3b:30:a8:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F7:6D:20:CA:49:74:2C:D4:5A:06:28:2C:4B:29:75:2E:11:5B:51
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31323a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:4b:7e:e8:9a:1e:98:f1:28:2d:73:73:0b:7b:69:04:11:
         14:3f:97:72:f6:18:2a:86:94:7e:5f:b7:c8:ed:70:02:95:af:
         75:ea:a8:4c:71:9c:bf:22:2f:7f:6f:ac:1f:bf:1b:0b:7f:2a:
         4b:59:a3:88:f3:6b:47:76:1b:55:f6:7f:8a:83:8e:3a:bd:d4:
         62:56:5c:18:d3:b2:05:08:fa:47:8b:f9:be:0a:23:1c:c4:ae:
         95:da:a1:30:92:4d:e2:f0:3a:76:58:64:d9:1f:0c:56:a5:ce:
         01:57:d9:96:43:d5:e7:32:89:db:4d:53:0d:74:2b:58:06:bf:
         e4:af:55:7b:13:41:e4:2d:89:bf:b3:83:2e:51:06:36:93:f1:
         c4:3b:b8:2c:77:6d:66:95:0b:e1:c6:13:45:77:b6:d5:0f:a6:
         f4:42:f3:3a:3b:11:f1:7e:55:33:07:65:4f:40:32:95:d1:cf:
         5d:48:5b:8c:92:8a:d1:45:31:2d:b6:c8:b3:1d:94:e1:e4:04:
         92:15:0b:45:85:3d:d6:62:3f:e1:04:3b:31:0a:00:4e:36:e0:
         ae:4f:62:c9:af:60:15:37:6e:88:16:86:53:c4:ed:6a:fd:ab:
         90:0d:86:08:e5:ce:c2:43:9d:a2:b4:89:a6:83:5a:44:96:39:
         1c:c2:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:19:43 2024 by rpki-client on console-ams.rpki-client.org