Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31373a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31373a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          e6wUjOuUfFOUNzmLmJS+3MJU/DmeNBCE8c39U0n+RWw=
Subject key identifier:   BF:59:10:49:19:D1:54:D8:93:47:43:9D:A7:04:DC:D9:25:05:D2:FC
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       531975539FA7D1E317DB862797AB9D774CC5B310
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31373a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 18 Mar 2024 10:59:59 +0000
ROA not before:           Mon 18 Mar 2024 10:54:59 +0000
ROA not after:            Mon 17 Mar 2025 10:59:59 +0000
asID:                     50224
IP address blocks:        2a0a:6040:17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:19:75:53:9f:a7:d1:e3:17:db:86:27:97:ab:9d:77:4c:c5:b3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 18 10:54:59 2024 GMT
            Not After : Mar 17 10:59:59 2025 GMT
        Subject: CN=BF59104919D154D89347439DA704DCD92505D2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:74:c7:ae:75:03:09:0f:fa:c4:4b:a7:94:
                    78:08:b3:a0:eb:b9:ff:ab:b8:f2:c2:39:61:f8:04:
                    4a:a8:7a:ef:c0:1b:49:a2:74:89:b0:dc:ad:c1:b9:
                    4c:ca:78:88:c9:60:73:be:d0:cb:a1:52:2e:94:02:
                    91:78:d0:27:d1:3a:26:ae:fd:ec:7c:4e:78:91:d9:
                    91:a1:97:88:1c:5f:fe:19:49:82:c1:c4:ca:1d:fd:
                    65:3b:e6:0a:6f:1b:74:1a:6e:5e:5b:99:9a:70:3a:
                    d3:75:a7:5a:37:dd:eb:98:4f:e2:b5:07:94:4c:83:
                    1b:4d:a4:5a:6c:3f:53:94:30:98:e0:d3:6a:51:7e:
                    fc:26:5a:64:e5:5c:46:11:d0:a9:2a:28:4d:3c:85:
                    b7:b2:fb:8a:34:61:22:8f:e4:f2:74:73:74:46:1a:
                    87:b0:4c:5d:f4:66:a3:62:dc:61:03:65:54:15:00:
                    be:8c:40:1f:36:3f:a6:c3:af:8e:70:e7:03:a4:85:
                    d1:6e:6b:72:1e:47:9b:64:e3:15:92:93:69:97:64:
                    3f:8a:56:c0:b5:fc:d8:bf:c7:bb:d4:0d:a9:88:53:
                    68:26:29:af:06:c0:ed:6b:86:82:9b:f5:98:e4:f8:
                    e8:95:37:4b:78:af:68:39:c8:c6:48:26:0b:f0:63:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:59:10:49:19:D1:54:D8:93:47:43:9D:A7:04:DC:D9:25:05:D2:FC
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31373a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:f5:fb:aa:31:f9:1e:9a:96:67:4d:3f:27:6a:7a:0e:e3:bb:
         1d:a0:f4:95:a0:4a:6d:72:10:6c:2a:11:2d:43:8e:cf:46:77:
         a9:fe:fa:12:59:02:60:e2:fa:0e:2b:42:b0:ee:72:db:66:81:
         e2:5d:72:dd:3f:44:0b:8b:38:3a:43:24:d2:ee:6d:54:27:3c:
         2e:74:73:64:2d:11:85:0e:c9:ed:84:66:40:3d:da:97:04:7d:
         59:88:dd:93:fd:e4:cd:85:f8:9f:bc:c2:cc:1b:ad:52:c6:7d:
         bf:0e:b2:30:1e:9e:74:24:b5:c4:db:ab:93:04:b3:0c:ec:99:
         c0:6e:6c:75:e8:39:79:62:ca:de:a0:69:e8:09:6b:ee:d5:04:
         37:fc:9f:cf:dc:1f:db:6d:12:6c:d8:fa:02:71:f9:e0:fd:5b:
         4b:e9:14:27:5e:f1:e7:10:3d:36:e9:e6:80:5e:a9:77:d1:42:
         90:8d:df:0a:31:22:24:1f:97:4c:c2:24:27:d5:5b:a4:0f:b5:
         42:d1:ad:2b:64:c4:8d:27:2c:c2:b1:80:ce:7d:31:41:f8:4b:
         76:27:37:35:7d:b9:38:1e:83:41:4b:3d:08:2b:73:fa:65:aa:
         8b:46:bd:59:ec:96:be:0d:ec:b7:8d:1f:4b:8c:69:6e:d0:ea:
         c6:73:9c:9d
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUUxl1U5+n0eMX24Ynl6udd0zFsxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDAzMTgxMDU0NTlaFw0yNTAzMTcxMDU5NTlaMDMxMTAvBgNV
BAMTKEJGNTkxMDQ5MTlEMTU0RDg5MzQ3NDM5REE3MDREQ0Q5MjUwNUQyRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRnTHrnUDCQ/6xEunlHgIs6Dr
uf+ruPLCOWH4BEqoeu/AG0midImw3K3BuUzKeIjJYHO+0MuhUi6UApF40CfROiau
/ex8TniR2ZGhl4gcX/4ZSYLBxMod/WU75gpvG3Qabl5bmZpwOtN1p1o33euYT+K1
B5RMgxtNpFpsP1OUMJjg02pRfvwmWmTlXEYR0KkqKE08hbey+4o0YSKP5PJ0c3RG
GoewTF30ZqNi3GEDZVQVAL6MQB82P6bDr45w5wOkhdFua3IeR5tk4xWSk2mXZD+K
VsC1/Ni/x7vUDamIU2gmKa8GwO1rhoKb9Zjk+OiVN0t4r2g5yMZIJgvwYwKHAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUv1kQSRnRVNiTR0OdpwTc2SUF0vwwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYI
KwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzMTM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMDMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoKYEAAFzANBgkqhkiG9w0BAQsFAAOCAQEA
ufX7qjH5HpqWZ00/J2p6DuO7HaD0laBKbXIQbCoRLUOOz0Z3qf76ElkCYOL6DitC
sO5y22aB4l1y3T9EC4s4OkMk0u5tVCc8LnRzZC0RhQ7J7YRmQD3alwR9WYjdk/3k
zYX4n7zCzButUsZ9vw6yMB6edCS1xNurkwSzDOyZwG5sdeg5eWLK3qBp6Alr7tUE
N/yfz9wf220SbNj6AnH54P1bS+kUJ17x5xA9NunmgF6pd9FCkI3fCjEiJB+XTMIk
J9VbpA+1QtGtK2TEjScswrGAzn0xQfhLdic3NX25OB6DQUs9CCtz+mWqi0a9WeyW
vg3st40fS4xpbtDqxnOcnQ==
-----END CERTIFICATE-----
Generated at Wed May 8 15:19:43 2024 by rpki-client on console-ams.rpki-client.org