Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32323a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a32323a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          M/C4TgwGjt3UsIPAOgSMOyzrqMs7JXS3lBW3eiHlFIU=
Subject key identifier:   FE:4A:E0:91:90:AB:0E:22:8B:48:BB:D7:A5:60:9C:3E:CC:8B:24:E6
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       1A8B6B9ABC3775844796B2082D210514E7825B22
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32323a3a2f34382d3438203d3e203530323234.roa
Signing time:             Sun 10 Mar 2024 05:55:55 +0000
ROA not before:           Sun 10 Mar 2024 05:50:55 +0000
ROA not after:            Sun 09 Mar 2025 05:55:55 +0000
asID:                     50224
IP address blocks:        2a0a:6040:22::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8b:6b:9a:bc:37:75:84:47:96:b2:08:2d:21:05:14:e7:82:5b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 10 05:50:55 2024 GMT
            Not After : Mar  9 05:55:55 2025 GMT
        Subject: CN=FE4AE09190AB0E228B48BBD7A5609C3ECC8B24E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:da:fa:a6:5d:c8:61:71:e1:8d:36:28:75:
                    da:59:e1:6b:e0:82:fb:78:34:ab:2e:d3:15:23:40:
                    f4:49:9a:1a:3f:c7:35:52:55:b0:79:ab:4b:75:4c:
                    48:d7:10:e0:40:e7:52:67:cf:cd:b8:8b:49:d1:b1:
                    86:ac:c2:40:a3:ff:24:3e:87:11:23:72:fa:f9:63:
                    dc:1a:f7:ad:de:26:14:89:31:ee:8f:86:6d:c2:ab:
                    da:f0:aa:6d:86:64:fa:23:81:87:76:9f:51:62:b4:
                    47:d5:78:2d:c1:46:c1:0a:e3:d4:0d:75:89:5d:8d:
                    6e:45:b5:a7:5b:ae:ee:2d:25:a5:d8:3a:9d:fa:52:
                    d5:55:8c:6c:53:0a:1c:6a:90:17:60:f3:48:49:51:
                    45:c7:a5:72:3d:4d:d8:1b:43:42:d8:65:cf:1a:df:
                    1f:49:6f:c8:6c:54:e6:a7:83:c3:b5:ec:2f:cd:cd:
                    3b:e6:51:32:0d:fd:95:e0:46:f8:d1:e6:dd:00:fd:
                    b6:a2:3d:d9:30:ae:8f:da:f6:cf:f7:6d:64:f8:16:
                    08:a3:0a:6d:a8:da:37:95:78:1d:43:95:09:fe:df:
                    59:52:38:db:bc:86:30:c1:94:18:41:50:66:f4:0e:
                    24:57:bd:e8:d6:be:ba:77:9e:7f:2e:1c:18:bf:63:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4A:E0:91:90:AB:0E:22:8B:48:BB:D7:A5:60:9C:3E:CC:8B:24:E6
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32323a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:02:27:47:31:4d:d3:f4:01:29:2a:fc:1d:fe:a7:f8:c6:b6:
         6a:e0:93:72:8b:d5:10:03:d3:6b:e4:44:a0:07:45:48:90:95:
         b7:dc:98:5d:84:2a:09:f0:00:ee:d8:c4:17:3f:09:dd:dd:ff:
         98:d5:ab:2b:40:bc:01:eb:f6:d1:c0:45:9b:50:38:7b:ed:04:
         e2:36:3b:f6:b2:11:6e:1f:92:fe:be:fb:ab:bb:fa:2e:65:45:
         3c:00:05:27:e9:77:b6:e6:d3:41:35:30:58:e1:41:ad:43:8e:
         70:98:50:d7:b4:8e:ee:d4:b6:9e:b9:43:2e:a8:4f:30:1b:22:
         55:a9:f6:2d:04:96:78:89:2c:bc:4c:04:27:de:b2:99:39:de:
         08:ca:01:c5:6b:50:c1:f6:73:e0:e9:9c:99:af:24:8e:ba:39:
         ef:80:9f:90:58:17:97:89:e0:7a:0b:b3:24:80:25:84:9e:d0:
         f2:8e:e3:b8:19:b7:f8:ff:21:a7:11:d2:77:a9:54:a0:2d:5b:
         a0:a4:53:6d:f9:e8:5b:a8:be:4f:31:f5:92:62:4a:79:26:07:
         e9:d5:f6:80:92:b6:69:73:8f:2a:47:d5:13:83:3b:c3:8b:23:
         30:d7:92:42:9e:74:7a:b1:70:00:0f:cd:57:e1:ea:e0:4c:df:
         df:96:ac:26
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUGotrmrw3dYRHlrIILSEFFOeCWyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDAzMTAwNTUwNTVaFw0yNTAzMDkwNTU1NTVaMDMxMTAvBgNV
BAMTKEZFNEFFMDkxOTBBQjBFMjI4QjQ4QkJEN0E1NjA5QzNFQ0M4QjI0RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJNr6pl3IYXHhjTYoddpZ4Wvg
gvt4NKsu0xUjQPRJmho/xzVSVbB5q0t1TEjXEOBA51Jnz824i0nRsYaswkCj/yQ+
hxEjcvr5Y9wa963eJhSJMe6Phm3Cq9rwqm2GZPojgYd2n1FitEfVeC3BRsEK49QN
dYldjW5Ftadbru4tJaXYOp36UtVVjGxTChxqkBdg80hJUUXHpXI9TdgbQ0LYZc8a
3x9Jb8hsVOang8O17C/NzTvmUTIN/ZXgRvjR5t0A/baiPdkwro/a9s/3bWT4Fgij
Cm2o2jeVeB1DlQn+31lSONu8hjDBlBhBUGb0DiRXvejWvrp3nn8uHBi/Y5Y3AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQU/krgkZCrDiKLSLvXpWCcPsyLJOYwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYI
KwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzMjMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMDMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoKYEAAIjANBgkqhkiG9w0BAQsFAAOCAQEA
JwInRzFN0/QBKSr8Hf6n+Ma2auCTcovVEAPTa+REoAdFSJCVt9yYXYQqCfAA7tjE
Fz8J3d3/mNWrK0C8Aev20cBFm1A4e+0E4jY79rIRbh+S/r77q7v6LmVFPAAFJ+l3
tubTQTUwWOFBrUOOcJhQ17SO7tS2nrlDLqhPMBsiVan2LQSWeIksvEwEJ96ymTne
CMoBxWtQwfZz4Omcma8kjro574CfkFgXl4ngeguzJIAlhJ7Q8o7juBm3+P8hpxHS
d6lUoC1boKRTbfnoW6i+TzH1kmJKeSYH6dX2gJK2aXOPKkfVE4M7w4sjMNeSQp50
erFwAA/NV+Hq4Ezf35asJg==
-----END CERTIFICATE-----
Generated at Wed May 8 15:35:38 2024 by rpki-client on console-fra.rpki-client.org