Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32303a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a32303a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          b3aN8pk5Oa48ZkftUQ8kqJ/kvdr9eI+Xdc6HzMD78xs=
Subject key identifier:   A3:CD:65:9F:79:73:95:CA:99:7A:FD:2F:DD:32:83:31:55:FF:CD:B8
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       62DA038E4F352B28649C361EDC4D9ED19DA09301
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32303a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 18 Mar 2024 10:59:45 +0000
ROA not before:           Mon 18 Mar 2024 10:54:45 +0000
ROA not after:            Mon 17 Mar 2025 10:59:45 +0000
asID:                     50224
IP address blocks:        2a0a:6040:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:da:03:8e:4f:35:2b:28:64:9c:36:1e:dc:4d:9e:d1:9d:a0:93:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 18 10:54:45 2024 GMT
            Not After : Mar 17 10:59:45 2025 GMT
        Subject: CN=A3CD659F797395CA997AFD2FDD32833155FFCDB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:3c:86:6c:90:7f:a1:db:04:1c:70:f6:c3:
                    ad:34:75:ea:c3:df:30:fc:16:ea:8e:50:e2:1d:ed:
                    ff:88:44:44:57:a9:41:2e:7b:44:99:b4:9f:55:6d:
                    c9:36:80:67:4a:d8:99:ed:c8:58:18:4c:76:2e:9f:
                    0f:be:a9:9d:12:6f:5b:13:e1:f9:42:99:8e:6e:bb:
                    e7:16:a3:e4:e2:34:a9:0d:3b:3d:28:dd:42:ff:33:
                    8c:07:ef:f8:98:04:5f:4c:4f:b3:62:04:51:9d:2b:
                    fc:d7:ff:48:38:32:28:0c:54:d2:40:0f:90:77:10:
                    16:62:76:c3:39:00:b4:f1:02:e0:73:c6:14:c7:16:
                    bd:8a:d0:df:ab:9e:64:d7:cd:1d:1a:96:8d:88:2a:
                    1e:5b:53:17:d3:4d:f6:f0:ec:1c:45:aa:34:02:98:
                    bd:db:ab:6b:f7:c1:d2:31:8b:4a:e0:f2:4b:6a:7c:
                    16:0f:fc:de:23:a2:5f:31:ae:0e:a0:15:ed:77:ca:
                    3f:2d:aa:12:ec:3f:78:bb:b5:9d:4b:c9:59:1f:9d:
                    e6:2e:1d:6a:e1:df:a0:7f:a4:7f:b7:ff:a8:40:b4:
                    a8:a0:8c:a9:2b:ef:3f:00:06:b0:a8:3d:48:ee:0d:
                    92:cb:ce:0e:7e:c7:1c:d6:74:6a:15:f4:52:f5:c2:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CD:65:9F:79:73:95:CA:99:7A:FD:2F:DD:32:83:31:55:FF:CD:B8
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32303a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:42:15:7b:af:13:82:8f:b6:7e:9e:9b:a6:d6:57:a7:cf:36:
         91:8c:90:44:17:14:8e:11:2b:a8:a8:8f:1c:38:12:d6:79:2a:
         c5:91:ed:a0:e8:41:e4:b0:74:a9:21:b3:87:55:57:19:12:5e:
         6f:56:d7:f3:52:3a:7d:78:73:58:7a:4e:b6:2f:92:c7:ce:e9:
         4c:cd:ee:b9:f9:1c:6f:33:2e:9f:43:8d:b4:f5:09:37:d0:c9:
         75:39:05:1a:39:39:3f:44:c8:36:69:ba:27:a5:52:6d:df:b0:
         59:70:0a:9b:fc:0f:d7:11:aa:dd:8c:40:f2:c7:6a:85:bf:3b:
         bc:79:e1:ef:91:cc:2c:23:6f:0f:e4:6e:2e:fe:93:c8:39:01:
         6d:3c:4d:5e:56:a5:47:26:93:36:0c:38:47:ed:82:59:9d:04:
         0e:0b:49:0c:6e:60:88:3e:f1:a8:3f:dc:0a:71:8a:e4:71:48:
         ba:dc:18:21:f3:49:2a:45:31:92:62:c1:bb:5f:ab:14:48:11:
         c5:fb:d9:85:2a:28:81:0d:e2:10:ed:cb:2e:a2:b8:66:63:22:
         02:f3:81:0a:ea:26:d1:4c:b7:10:52:12:51:3a:19:9d:58:f3:
         b1:fa:a7:0d:8f:e6:26:dc:d8:2b:80:7d:95:68:47:14:a7:8c:
         ff:fa:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:37:38 2024 by rpki-client on console-ams.rpki-client.org