Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31363a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a31363a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          nmSiJvGZADITMR2EEdzq0JByqBgn9ej3cNKPlkp5iTA=
Subject key identifier:   64:B7:B6:09:02:B6:3A:55:DB:1D:C7:F8:39:70:C8:72:5C:F1:37:3B
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       3FAFE5CFCDE7B0F0A3EB21CD49425BE322AF5159
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31363a3a2f34382d3438203d3e203438353831.roa
Signing time:             Sun 24 Mar 2024 10:15:51 +0000
ROA not before:           Sun 24 Mar 2024 10:10:51 +0000
ROA not after:            Sun 23 Mar 2025 10:15:51 +0000
asID:                     48581
IP address blocks:        2a0a:6040:16::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:af:e5:cf:cd:e7:b0:f0:a3:eb:21:cd:49:42:5b:e3:22:af:51:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 10:10:51 2024 GMT
            Not After : Mar 23 10:15:51 2025 GMT
        Subject: CN=64B7B60902B63A55DB1DC7F83970C8725CF1373B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:90:e2:95:90:b1:df:2c:ff:4f:57:74:25:
                    e3:a9:f6:42:cd:2b:0e:a1:69:b3:0d:5a:af:10:bb:
                    70:c2:86:a9:47:80:02:6d:81:f6:39:8c:0e:48:57:
                    ad:2a:b8:93:a2:19:f7:da:b5:17:3c:c8:a3:08:4b:
                    41:7b:62:42:a0:0e:af:74:03:50:41:61:bd:e0:61:
                    55:69:d1:71:ac:cd:82:b0:3f:a8:20:36:85:9c:57:
                    67:e4:fe:fa:02:76:10:5d:14:26:a3:55:81:cc:f3:
                    43:00:c2:c6:0a:51:ad:6a:0d:cd:07:36:8e:18:43:
                    09:9f:dd:69:18:85:d7:2e:49:b0:e6:c4:3a:ec:1c:
                    56:a2:82:4a:9f:12:cd:d8:17:22:ca:8f:90:03:f7:
                    20:cb:57:ea:d4:47:6e:72:d9:66:31:84:80:0d:65:
                    e0:43:5b:46:a6:e0:9e:89:45:92:70:50:f3:c3:07:
                    2b:85:38:14:e8:4e:78:7d:b9:0a:11:0d:98:fd:80:
                    91:32:c9:f3:ca:17:1c:fb:51:ba:99:4f:cc:47:3a:
                    b5:12:66:da:6c:72:e4:62:d2:c2:8c:46:81:22:da:
                    9d:ef:d5:4e:92:c9:9e:64:d6:35:a9:9f:a9:bf:fb:
                    5e:51:8e:69:6f:9a:75:30:ce:2a:6c:61:35:01:2e:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B7:B6:09:02:B6:3A:55:DB:1D:C7:F8:39:70:C8:72:5C:F1:37:3B
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31363a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:ba:aa:f5:50:f1:9e:ac:19:fc:58:7a:24:bd:f4:41:bc:4d:
         62:2a:aa:29:27:77:4f:e1:39:f0:90:44:c1:9d:60:1c:0c:e7:
         68:f2:bf:52:8e:20:95:f3:8c:e3:2b:77:4d:12:19:99:86:ea:
         87:fd:e1:56:f9:d5:09:9f:ee:10:d3:1b:08:6d:6f:a5:c5:76:
         d8:04:78:32:28:48:dd:bf:b0:90:73:d3:c0:f8:16:63:f7:ec:
         a3:71:d2:03:f1:d2:74:97:8b:56:85:97:88:66:4f:91:95:a2:
         35:bc:dc:3c:3e:e0:c7:79:1f:54:6f:b9:f5:2e:81:ac:e3:87:
         a6:67:d1:2b:39:92:85:d2:f0:df:d3:a3:ed:ca:76:4f:17:df:
         6a:5b:95:57:f4:4f:5a:89:a1:88:3d:80:1f:b2:e2:1b:12:d7:
         26:ba:98:3d:52:cf:17:30:ab:ed:de:6b:ac:56:33:94:59:57:
         16:37:b2:11:1f:f8:83:a0:2c:be:62:a6:ad:34:69:ae:86:ec:
         2d:48:39:1a:d0:9a:36:df:d5:2b:86:1a:a5:70:84:e5:0e:8e:
         50:c7:ec:e6:fe:59:ff:cb:4e:54:2c:a8:c9:73:36:47:dd:0c:
         b6:82:e5:a7:9d:3a:3b:77:1c:73:d8:2b:4a:d0:8f:c8:29:a3:
         6a:ea:d7:47
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUP6/lz83nsPCj6yHNSUJb4yKvUVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDAzMjQxMDEwNTFaFw0yNTAzMjMxMDE1NTFaMDMxMTAvBgNV
BAMTKDY0QjdCNjA5MDJCNjNBNTVEQjFEQzdGODM5NzBDODcyNUNGMTM3M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgZDilZCx3yz/T1d0JeOp9kLN
Kw6habMNWq8Qu3DChqlHgAJtgfY5jA5IV60quJOiGffatRc8yKMIS0F7YkKgDq90
A1BBYb3gYVVp0XGszYKwP6ggNoWcV2fk/voCdhBdFCajVYHM80MAwsYKUa1qDc0H
No4YQwmf3WkYhdcuSbDmxDrsHFaigkqfEs3YFyLKj5AD9yDLV+rUR25y2WYxhIAN
ZeBDW0am4J6JRZJwUPPDByuFOBToTnh9uQoRDZj9gJEyyfPKFxz7UbqZT8xHOrUS
ZtpscuRi0sKMRoEi2p3v1U6SyZ5k1jWpn6m/+15RjmlvmnUwzipsYTUBLmtHAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUZLe2CQK2OlXbHcf4OXDIclzxNzswHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYI
KwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzMTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzQzODM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoKYEAAFjANBgkqhkiG9w0BAQsFAAOCAQEA
Srqq9VDxnqwZ/Fh6JL30QbxNYiqqKSd3T+E58JBEwZ1gHAznaPK/Uo4glfOM4yt3
TRIZmYbqh/3hVvnVCZ/uENMbCG1vpcV22AR4MihI3b+wkHPTwPgWY/fso3HSA/HS
dJeLVoWXiGZPkZWiNbzcPD7gx3kfVG+59S6BrOOHpmfRKzmShdLw39Oj7cp2Txff
aluVV/RPWomhiD2AH7LiGxLXJrqYPVLPFzCr7d5rrFYzlFlXFjeyER/4g6AsvmKm
rTRprobsLUg5GtCaNt/VK4YapXCE5Q6OUMfs5v5Z/8tOVCyoyXM2R90MtoLlp506
O3ccc9grStCPyCmjaurXRw==
-----END CERTIFICATE-----
Generated at Sat Apr 20 16:12:32 2024 by rpki-client on console-fra.rpki-client.org