Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32333a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a32333a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          Ryy8776KnpsBtL3XbLLWoBLWEScE/PaBV3ZDwXALbH4=
Subject key identifier:   34:8B:D1:92:74:11:C1:69:BB:02:48:E9:FC:81:71:47:84:D2:8D:04
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       0848A82485ED5D58324552CECE9D95D65F426B6B
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32333a3a2f34382d3438203d3e203438353831.roa
Signing time:             Fri 21 Jul 2023 18:30:26 +0000
ROA not before:           Fri 21 Jul 2023 18:25:26 +0000
ROA not after:            Fri 19 Jul 2024 18:30:26 +0000
asID:                     48581
IP address blocks:        2a0a:6040:23::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:48:a8:24:85:ed:5d:58:32:45:52:ce:ce:9d:95:d6:5f:42:6b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Jul 21 18:25:26 2023 GMT
            Not After : Jul 19 18:30:26 2024 GMT
        Subject: CN=348BD1927411C169BB0248E9FC81714784D28D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:8b:2e:89:00:cf:7d:a0:9d:21:3f:46:f7:
                    fc:21:da:19:2e:b6:9b:13:fe:19:32:8b:2f:d6:bd:
                    20:74:b3:34:ce:e1:9e:94:85:93:39:57:35:be:f0:
                    4b:d3:ab:ff:40:83:0b:0f:3c:78:69:31:73:fd:c0:
                    ff:e1:5b:9e:a0:07:ca:6f:1b:db:fe:fd:81:40:d6:
                    56:a7:1d:c3:ec:b3:98:ab:d6:b7:00:2d:83:d0:d3:
                    e2:c9:05:96:cf:90:9a:12:a6:c9:b5:c2:94:d6:11:
                    c6:dd:56:48:d7:e0:0c:fb:45:f7:5a:a3:4c:f1:75:
                    4c:20:5a:c6:15:38:44:61:d7:7c:78:c1:61:3e:f4:
                    8b:36:41:2d:e5:41:de:5b:a5:a1:92:26:9f:94:47:
                    ca:4b:85:81:0a:b7:4c:39:fa:24:c6:6e:9e:6b:1d:
                    6d:7c:2d:8e:34:d2:1b:01:e5:d3:72:01:10:03:97:
                    77:e6:58:0d:45:b4:42:01:87:5a:93:c4:4b:0c:70:
                    8f:03:f2:4e:3f:bb:d2:da:b5:13:ab:82:61:21:06:
                    d2:3d:5f:f7:c4:93:52:b6:20:08:eb:47:13:ce:d5:
                    86:43:ed:71:b1:fa:27:67:d0:93:56:94:d4:89:e5:
                    fc:b4:4a:7e:20:eb:8d:72:fa:09:d6:5d:b0:f6:69:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8B:D1:92:74:11:C1:69:BB:02:48:E9:FC:81:71:47:84:D2:8D:04
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32333a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:23::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:84:c0:2d:5a:66:8d:83:59:fa:12:9d:d4:26:26:8b:6e:98:
         93:b8:2d:50:5e:31:38:db:ca:32:a1:e1:b0:f7:8a:a5:c8:20:
         72:71:e2:34:41:b6:46:44:ac:60:cc:c1:ce:3b:98:37:64:fc:
         7e:1f:59:fc:7c:c3:31:67:8d:31:9a:cf:2b:15:23:8a:cc:3b:
         09:bd:ac:f0:06:dc:9e:c8:b1:22:d2:0a:c4:1e:c0:be:61:2c:
         e2:49:35:54:6a:05:fb:73:e3:f4:18:ac:8b:a7:43:c1:b1:4c:
         3a:bf:c3:c5:d7:e1:4c:d5:b3:ce:24:b5:69:6c:e9:5e:76:6f:
         85:3c:c6:97:0b:6b:fd:3c:35:90:d8:d6:47:d6:8e:bb:b4:79:
         70:5d:31:71:24:ce:10:5a:85:3d:46:de:99:ac:9f:2c:fc:5f:
         41:7e:f3:5d:90:7b:57:20:ea:57:dc:ca:88:ae:85:e7:87:a7:
         fc:19:7b:ac:35:25:c2:a5:a1:77:b4:3b:e0:9a:8a:8a:e5:05:
         13:2d:df:ec:fa:b2:7e:26:c1:1f:b1:c7:01:71:11:ee:eb:1a:
         5e:c1:c9:24:ff:eb:02:b0:a5:4c:20:08:70:41:0a:34:fa:f4:
         64:b3:9f:7f:ab:32:7f:95:9a:e2:fc:75:bb:9c:e3:5c:15:17:
         ba:13:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:25:10 2024 by rpki-client on console-ams.rpki-client.org