Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32343a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a32343a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          JZD7kNuVrayJkVYdPkfxBwUcOn+8JSBgHrYFpGqj9tQ=
Subject key identifier:   FB:E8:86:99:17:C6:4A:12:E5:E8:08:E0:1D:ED:19:12:4C:C0:BE:51
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       0148EAFA786A965463D406B129C303617FBED2C1
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32343a3a2f34382d3438203d3e203530323234.roa
Signing time:             Fri 15 Mar 2024 15:17:42 +0000
ROA not before:           Fri 15 Mar 2024 15:12:42 +0000
ROA not after:            Fri 14 Mar 2025 15:17:42 +0000
asID:                     50224
IP address blocks:        2a0a:6040:24::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:ea:fa:78:6a:96:54:63:d4:06:b1:29:c3:03:61:7f:be:d2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 15 15:12:42 2024 GMT
            Not After : Mar 14 15:17:42 2025 GMT
        Subject: CN=FBE8869917C64A12E5E808E01DED19124CC0BE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:ac:e5:25:77:bd:e6:62:4c:a1:41:35:f1:
                    86:92:d5:8b:8c:ea:e3:15:1f:b8:92:67:3e:6f:0f:
                    df:7a:77:75:f2:f3:21:a1:45:ec:d7:b6:97:05:ab:
                    80:7d:9a:30:50:75:b8:1a:28:66:09:33:49:09:be:
                    58:31:c3:85:08:8a:ab:65:e7:7e:ea:00:15:22:96:
                    57:58:09:f0:a1:64:42:50:d4:11:f9:be:8e:c3:46:
                    35:2a:d1:24:a1:3b:09:3d:b7:04:b2:6d:96:43:0e:
                    e3:c8:f8:6e:53:bd:4d:5d:10:97:55:71:ef:f3:79:
                    9a:ca:76:3d:9d:1f:35:51:08:7f:52:32:63:74:8e:
                    f5:31:63:82:76:26:ae:a3:73:31:ec:a5:c1:5a:4c:
                    e2:77:78:42:bf:4a:3a:e0:e6:fd:a0:fd:04:13:4d:
                    80:47:54:e3:85:58:d9:b0:1e:96:e0:65:ea:0f:61:
                    c7:b8:a9:75:7c:ac:e7:97:4f:4b:6b:b8:7a:04:6b:
                    2e:20:82:6a:73:20:5f:da:ac:95:37:ea:e4:77:b7:
                    fa:60:e8:8b:e0:9e:62:15:73:a1:67:de:7e:42:6a:
                    66:52:a5:dd:c4:b2:66:98:a1:6c:36:04:87:a1:60:
                    ee:94:ff:d9:96:9c:56:38:3a:59:d4:5a:08:cc:f8:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E8:86:99:17:C6:4A:12:E5:E8:08:E0:1D:ED:19:12:4C:C0:BE:51
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32343a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:06:8f:f1:7f:15:9c:69:6e:86:80:ff:d9:c4:5f:e7:20:50:
         0d:6c:8f:31:db:09:b4:94:b3:64:e6:11:90:d2:1b:45:86:e1:
         22:3b:d3:3f:36:53:3f:30:9b:2f:85:bb:ee:f1:df:10:e9:5a:
         8f:49:af:47:f3:c4:29:80:17:a2:e2:58:f3:c7:91:fa:87:dd:
         e4:cb:71:13:70:ab:44:cc:56:69:e1:48:be:79:c8:04:15:ac:
         79:9a:a7:f4:26:a9:4d:14:e7:6f:8f:17:e5:17:52:2c:1a:f4:
         f4:de:a7:55:6d:55:dc:2f:86:d8:15:96:3e:2a:d9:24:0b:24:
         a0:d3:6d:20:6f:d1:c3:21:e7:0d:15:42:1f:08:c4:e1:e7:f7:
         d9:06:fa:a7:a1:22:c5:80:6d:c8:dd:68:2f:6c:d5:ae:bd:a7:
         93:88:e8:b4:10:d8:cf:d0:89:b1:a4:60:f9:63:83:a1:40:67:
         35:8f:ab:51:15:74:d4:1d:06:d4:9c:c5:07:72:22:40:7f:00:
         31:6c:92:68:dd:37:02:fc:70:54:34:17:a8:4a:8f:c5:3b:a7:
         91:0a:39:dc:d0:7f:f4:4a:71:0e:cf:8c:e0:f8:d7:be:2c:7b:
         9a:16:56:e0:9b:e5:52:7a:d3:f0:16:a1:bd:c5:f9:4e:ef:fa:
         1e:09:5c:c8
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUAUjq+nhqllRj1AaxKcMDYX++0sEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDAzMTUxNTEyNDJaFw0yNTAzMTQxNTE3NDJaMDMxMTAvBgNV
BAMTKEZCRTg4Njk5MTdDNjRBMTJFNUU4MDhFMDFERUQxOTEyNENDMEJFNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvazlJXe95mJMoUE18YaS1YuM
6uMVH7iSZz5vD996d3Xy8yGhRezXtpcFq4B9mjBQdbgaKGYJM0kJvlgxw4UIiqtl
537qABUilldYCfChZEJQ1BH5vo7DRjUq0SShOwk9twSybZZDDuPI+G5TvU1dEJdV
ce/zeZrKdj2dHzVRCH9SMmN0jvUxY4J2Jq6jczHspcFaTOJ3eEK/Sjrg5v2g/QQT
TYBHVOOFWNmwHpbgZeoPYce4qXV8rOeXT0truHoEay4ggmpzIF/arJU36uR3t/pg
6IvgnmIVc6Fn3n5CamZSpd3EsmaYoWw2BIehYO6U/9mWnFY4OlnUWgjM+Es7AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQU++iGmRfGShLl6AjgHe0ZEkzAvlEwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYI
KwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzMjM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMDMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoKYEAAJDANBgkqhkiG9w0BAQsFAAOCAQEA
lQaP8X8VnGluhoD/2cRf5yBQDWyPMdsJtJSzZOYRkNIbRYbhIjvTPzZTPzCbL4W7
7vHfEOlaj0mvR/PEKYAXouJY88eR+ofd5MtxE3CrRMxWaeFIvnnIBBWseZqn9Cap
TRTnb48X5RdSLBr09N6nVW1V3C+G2BWWPirZJAskoNNtIG/RwyHnDRVCHwjE4ef3
2Qb6p6EixYBtyN1oL2zVrr2nk4jotBDYz9CJsaRg+WODoUBnNY+rURV01B0G1JzF
B3IiQH8AMWySaN03AvxwVDQXqEqPxTunkQo53NB/9EpxDs+M4PjXvix7mhZW4Jvl
UnrT8BahvcX5Tu/6HglcyA==
-----END CERTIFICATE-----
Generated at Tue May 7 22:37:38 2024 by rpki-client on console-ams.rpki-client.org