Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31363a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31363a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          MvdgFAPhNim/wWaJCGVzuWtM1zymkewKrf6y53z4ANo=
Subject key identifier:   46:C3:59:DD:79:BD:08:64:B2:9D:89:E0:C9:9A:E3:CC:90:7D:51:5C
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       25FE5E80551EEFE4C50AF7780A3018285BEA72E3
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31363a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 24 Mar 2025 11:58:52 +0000
ROA not before:           Mon 24 Mar 2025 11:53:52 +0000
ROA not after:            Mon 23 Mar 2026 11:58:52 +0000
asID:                     50224
IP address blocks:        2a0a:6040:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 15:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:5e:80:55:1e:ef:e4:c5:0a:f7:78:0a:30:18:28:5b:ea:72:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 11:53:52 2025 GMT
            Not After : Mar 23 11:58:52 2026 GMT
        Subject: CN=46C359DD79BD0864B29D89E0C99AE3CC907D515C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:36:bb:7e:41:05:41:d6:10:49:50:59:13:
                    38:90:8d:a3:08:5f:c3:df:47:85:62:03:5a:47:5c:
                    ae:69:3d:cc:e2:d2:c4:73:9f:fe:94:31:8c:13:1c:
                    d1:36:15:0b:48:c8:e5:7b:be:f8:d7:7b:82:7b:36:
                    db:e9:c2:36:e4:35:22:b8:3f:bb:b6:29:a8:83:0f:
                    0a:b6:ff:f9:a8:c8:9d:73:5f:71:00:32:4b:2a:b7:
                    ed:18:ca:f5:fc:22:09:1a:8e:9a:d2:aa:49:fc:9b:
                    cd:3e:e9:99:29:e2:85:a1:06:e3:d0:61:82:45:e3:
                    51:9b:16:78:af:fd:10:5c:ea:91:be:c3:4f:b0:52:
                    b4:87:8d:fc:e1:5c:c9:56:12:fd:ce:39:a0:c0:ed:
                    04:9d:d8:11:15:fd:f4:d2:90:c0:33:17:3d:70:f7:
                    75:1d:49:11:60:2a:91:b1:f1:70:31:9c:9b:4c:2a:
                    64:99:4a:b8:6a:8f:b2:35:a6:63:21:4c:41:10:a9:
                    fd:09:dc:6a:6f:06:34:23:50:3c:bf:54:57:2a:e3:
                    a8:1b:d1:f1:a7:56:01:e8:7d:8b:f8:74:b7:0f:5f:
                    5c:26:66:19:20:c9:07:10:cf:7c:be:8b:71:e0:37:
                    eb:a9:f7:5f:37:ea:c8:00:b0:de:db:1f:3f:66:57:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C3:59:DD:79:BD:08:64:B2:9D:89:E0:C9:9A:E3:CC:90:7D:51:5C
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31363a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:19:0e:c6:02:3e:fc:72:64:ad:38:1a:3f:69:e3:d3:b7:
         9d:c6:36:fa:1d:46:ee:06:a0:04:ea:b8:28:8a:ae:70:3c:42:
         50:23:01:0a:2f:39:f5:59:07:8f:e8:99:f1:aa:48:76:40:e6:
         62:55:c8:9f:2a:d5:7d:d5:66:84:d9:65:94:ae:96:c0:37:bd:
         3e:a7:b1:c8:ca:8b:5a:f6:20:8d:10:58:58:05:a0:13:c5:da:
         3e:22:67:ac:d2:af:5c:52:aa:04:7e:94:e6:c5:80:c5:f3:8d:
         23:fd:0a:6d:0c:f1:9d:3c:9b:20:06:2c:f0:97:3c:e7:fd:7d:
         56:99:11:45:d5:c9:e9:c0:f0:cc:8f:cd:c0:a1:af:b2:34:3f:
         ec:c0:65:3c:cf:36:88:1b:6c:94:cf:09:2e:3e:f7:d4:0a:59:
         44:73:b5:7b:1b:de:45:09:9f:33:58:19:ae:ce:ed:87:40:fc:
         70:3f:ac:c4:86:fa:1f:2b:19:15:05:b2:fd:76:4e:92:b7:02:
         97:4b:bf:c6:96:9a:48:35:eb:ca:b1:7a:72:84:8a:5a:8d:bd:
         57:67:9d:cb:f5:48:d5:2c:08:3d:50:bf:c6:10:96:08:06:e9:
         26:bc:9c:58:7e:b5:11:66:81:e4:b2:7f:a8:60:6e:f5:bf:12:
         a3:e8:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:34:17 2025 by rpki-client