Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31383a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31383a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          9VGpi9MQsSKzM9ivf2biUz6LtRWY3Ci96VnbArEw+5U=
Subject key identifier:   3F:26:DE:C6:6A:D9:CE:BC:97:C7:27:65:6A:39:73:0D:72:EB:C2:AF
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       33DFE23D73A7DB0E0D42D4C26BEC151F443A9F7C
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31383a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 18 Mar 2024 10:59:52 +0000
ROA not before:           Mon 18 Mar 2024 10:54:52 +0000
ROA not after:            Mon 17 Mar 2025 10:59:52 +0000
asID:                     50224
IP address blocks:        2a0a:6040:18::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 08:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:df:e2:3d:73:a7:db:0e:0d:42:d4:c2:6b:ec:15:1f:44:3a:9f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 18 10:54:52 2024 GMT
            Not After : Mar 17 10:59:52 2025 GMT
        Subject: CN=3F26DEC66AD9CEBC97C727656A39730D72EBC2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:b3:0b:a5:00:29:df:7f:75:26:4c:fd:ec:
                    81:85:a0:bd:c7:21:6b:77:9c:4d:46:11:5d:5c:20:
                    8b:99:c0:fd:fa:c2:c1:e1:6e:92:43:75:23:76:08:
                    69:7d:91:c0:b5:00:d9:53:c7:ac:52:c9:9a:10:13:
                    84:1b:5b:80:1b:05:17:a5:4b:4e:ef:a6:88:16:56:
                    91:ab:f1:a3:95:82:82:82:a9:97:cb:53:f0:6f:24:
                    f0:9e:ab:95:74:ea:42:78:1f:06:45:e0:8d:e4:4a:
                    da:fb:16:58:3b:d1:df:7b:94:e5:36:6e:5a:ad:6e:
                    be:94:e0:66:68:a2:66:9a:71:6c:13:74:b0:57:57:
                    d6:44:83:b8:7a:32:1c:1f:73:3b:a8:97:a8:46:65:
                    2a:0d:f6:33:aa:b8:20:5f:43:01:d5:c7:b8:a0:29:
                    2d:9c:55:8a:e0:a2:4b:85:d6:9d:c2:a6:59:70:75:
                    b6:73:07:37:98:38:d2:19:0d:35:ab:41:a9:a2:4a:
                    65:a3:18:59:62:dc:e6:cb:cd:a6:28:17:13:9c:a7:
                    fb:72:5e:34:dc:a6:86:bf:0f:e8:e0:57:61:86:c2:
                    65:98:fc:da:5b:bc:b3:5d:8a:95:79:fd:aa:da:77:
                    93:8d:ad:fb:1e:5e:7d:7f:54:2d:3d:c4:fc:23:02:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:26:DE:C6:6A:D9:CE:BC:97:C7:27:65:6A:39:73:0D:72:EB:C2:AF
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31383a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:38:ed:d5:f3:0f:0d:27:f3:17:28:0d:0c:30:02:7c:bb:e2:
         9d:8b:bc:2d:af:2b:f6:74:3c:72:be:38:0b:32:08:2a:6a:36:
         3f:46:b8:9d:cf:93:f9:36:4f:bc:d6:d5:01:3b:a5:be:31:8c:
         e4:fa:85:00:9e:08:40:09:8e:31:46:16:94:2c:fe:ce:44:f0:
         6f:19:86:50:96:3f:d8:43:98:31:b7:00:50:07:52:53:72:41:
         91:1e:8e:d6:b8:56:39:25:29:ca:54:66:93:e7:c3:f3:f1:50:
         d9:9c:7a:2f:f1:23:6d:2e:be:6b:07:20:62:88:7e:f9:08:ab:
         64:4c:ac:be:41:6e:34:3f:6a:f9:33:b6:f1:86:28:93:63:ec:
         b4:1a:fa:01:16:17:ae:b6:70:1c:e0:ba:b6:f1:8f:a8:4e:d3:
         66:3b:b5:56:aa:b2:62:b2:b4:b4:bc:4f:9c:0b:77:76:cf:a3:
         d5:91:67:2f:3e:5b:a7:21:65:61:f0:ad:d4:39:d2:d6:4d:a7:
         07:41:fc:2e:1c:5a:33:c3:02:9a:16:de:b9:3a:c7:53:36:e4:
         b9:46:1b:a2:7c:b6:df:a1:78:6a:c9:28:58:0f:59:cd:9d:6d:
         8d:f5:4b:ae:48:85:e4:94:60:f8:1e:25:b6:e6:e4:6b:aa:e5:
         a5:ca:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:23:47 2024 by rpki-client on console-ams.rpki-client.org