Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31333a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31333a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          +kbWOJ+Wa337UX8l5lJ/cyDPGJllVxB15A7A89RyF4s=
Subject key identifier:   B2:BD:F2:99:E7:11:19:6F:F9:19:89:62:C7:41:C1:4C:EF:0E:AE:B7
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       2BA0F3A63F3DBFDC4DC48C1A8B97DFB6C05D6F23
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31333a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 24 Mar 2025 11:58:52 +0000
ROA not before:           Mon 24 Mar 2025 11:53:52 +0000
ROA not after:            Mon 23 Mar 2026 11:58:52 +0000
asID:                     50224
IP address blocks:        2a0a:6040:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 15:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a0:f3:a6:3f:3d:bf:dc:4d:c4:8c:1a:8b:97:df:b6:c0:5d:6f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 11:53:52 2025 GMT
            Not After : Mar 23 11:58:52 2026 GMT
        Subject: CN=B2BDF299E711196FF9198962C741C14CEF0EAEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:52:1e:25:90:ad:3c:cb:a5:e5:d3:eb:ae:
                    69:0d:a3:85:f3:17:7a:52:0b:ce:41:9e:b4:b7:38:
                    52:41:98:cd:5b:af:a3:46:86:4c:6c:a4:52:83:e2:
                    c2:b0:4d:db:e1:8a:64:bd:db:17:44:42:b8:87:ac:
                    66:e0:b3:99:1e:cb:13:92:6f:e6:78:1b:b8:10:f7:
                    0e:63:6c:c8:88:de:ec:ad:c5:8d:03:8f:52:2f:37:
                    fd:ad:d8:b7:bf:7e:55:63:20:5b:cf:83:94:85:9a:
                    b7:8e:bb:53:f4:e2:43:a4:6f:5e:c5:85:6c:7d:a2:
                    d3:68:60:c1:cc:7b:4b:02:c6:66:6c:12:24:56:81:
                    7c:95:6e:ae:35:7d:8d:e6:34:88:50:50:41:a5:06:
                    36:de:93:0a:ec:9b:38:ba:8a:2c:08:e2:3a:ec:64:
                    58:e0:9b:aa:a7:40:d1:ff:83:7d:54:03:cc:1d:f3:
                    73:15:76:18:d0:f7:11:09:31:1a:c4:13:28:f8:5b:
                    dd:a1:dd:83:fb:c7:58:37:22:ee:e6:a1:7d:3c:64:
                    dd:48:c6:73:86:72:c5:93:b7:3c:4e:8a:07:1e:c2:
                    b4:d6:9a:e6:4b:f2:a4:64:fc:bf:48:4f:e9:a4:63:
                    52:79:26:15:a1:e1:68:14:37:8a:b1:a7:28:dd:0e:
                    d9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BD:F2:99:E7:11:19:6F:F9:19:89:62:C7:41:C1:4C:EF:0E:AE:B7
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31333a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:08:4b:47:ec:dd:44:83:f4:ca:1c:56:7a:e2:4c:3c:cd:93:
         f1:61:ab:eb:ce:16:c1:da:76:bb:e7:ca:ce:9e:8b:ae:de:70:
         8f:3f:7b:49:6c:03:8d:66:3b:e9:84:9b:d1:e5:53:0f:dd:1a:
         0d:61:5b:15:5f:f1:bd:08:d7:95:83:d0:97:cf:e0:4e:64:81:
         ef:da:43:b3:5d:84:af:6e:d5:26:93:38:ae:bf:97:61:b2:ac:
         1a:f2:39:27:23:5b:0c:1f:8e:89:c0:e3:b8:b2:4e:dd:29:4e:
         2d:66:75:37:dc:a8:eb:89:82:25:cf:83:f8:24:0c:a8:26:ca:
         34:36:37:07:32:26:a3:6a:2c:e7:a1:01:41:97:41:a7:ba:7b:
         ec:ef:8c:b7:e6:cf:48:56:44:71:3e:0e:af:ac:66:7a:5e:68:
         1b:b1:b1:9b:00:1c:44:19:20:8a:d1:bd:95:04:6e:65:f2:f6:
         41:dd:5a:07:cf:d9:10:03:03:ac:4e:0e:b2:6f:02:55:ed:8f:
         9e:dc:0b:b7:79:04:4a:34:16:9e:ca:2d:e3:79:2b:43:35:24:
         bc:52:4b:33:bd:1e:87:54:12:24:e9:47:52:c1:a0:ac:7f:3b:
         bf:0e:e0:2f:78:7a:1e:21:21:bf:de:35:a2:85:c5:fc:5f:c4:
         f9:4c:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:35:38 2025 by rpki-client