Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32353a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a32353a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          OcM5WzUHstaLL2VmF3kPwjma19KHlJZrcdN/Mtrui+8=
Subject key identifier:   1E:C3:09:F7:D9:57:42:89:95:AE:3F:C7:00:63:47:BE:86:34:D3:59
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       05F8D4A5FD8110DAE0102F117AE387ED7C739D5C
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32353a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 18 Mar 2024 11:00:10 +0000
ROA not before:           Mon 18 Mar 2024 10:55:10 +0000
ROA not after:            Mon 17 Mar 2025 11:00:10 +0000
asID:                     50224
IP address blocks:        2a0a:6040:25::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f8:d4:a5:fd:81:10:da:e0:10:2f:11:7a:e3:87:ed:7c:73:9d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 18 10:55:10 2024 GMT
            Not After : Mar 17 11:00:10 2025 GMT
        Subject: CN=1EC309F7D957428995AE3FC7006347BE8634D359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e7:91:29:83:0f:a6:09:8b:6e:dc:64:72:fc:
                    a5:3a:1d:9d:84:77:ae:dc:da:8d:e3:7d:49:6c:22:
                    0e:f7:e9:a5:7b:42:90:15:ba:7a:7a:5a:bd:b9:21:
                    21:93:0a:5f:6a:c9:08:89:3b:7f:ce:67:b3:76:2c:
                    f9:1f:21:4f:1d:38:65:94:e3:1e:e2:d8:45:bd:d3:
                    b5:b8:3d:ad:9c:dd:4c:59:f9:7f:70:21:ab:3c:92:
                    e5:5a:e8:e8:dd:ae:62:46:b2:0d:34:34:93:86:0c:
                    da:bc:fd:84:5f:58:e6:e6:e7:38:4b:fa:2c:a5:ba:
                    42:a9:54:2b:ed:0d:12:4f:9a:c7:5f:02:54:64:02:
                    39:d2:8c:b7:ba:22:76:86:d2:12:de:e3:a7:dc:05:
                    a1:12:4f:fa:5c:7f:a2:56:3d:e8:b1:9e:30:79:1d:
                    f5:8c:5e:ae:5f:e5:89:64:21:54:86:25:b5:1f:bd:
                    72:4f:e0:fe:75:48:1c:9f:f3:dc:e1:18:48:69:1f:
                    1b:37:fc:29:66:53:a6:c5:cd:d9:96:e8:4e:ed:63:
                    c8:b8:77:c7:15:76:1e:a8:21:8e:5b:c3:8a:4b:1d:
                    49:0e:5d:f6:9b:64:ee:ec:ef:b0:52:f3:0f:27:6a:
                    31:f7:b7:09:e9:ef:4e:2e:ca:a2:84:cc:0f:58:20:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C3:09:F7:D9:57:42:89:95:AE:3F:C7:00:63:47:BE:86:34:D3:59
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32353a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:fd:67:7a:db:93:48:f6:ed:8e:79:0d:ba:02:86:49:cd:69:
         77:f9:79:a4:d6:39:d5:8d:67:15:27:6b:91:fa:6b:d0:52:3e:
         07:66:a1:24:0c:08:3a:59:2e:28:f7:f0:76:8e:4b:eb:7e:5c:
         cf:c0:20:bd:50:96:8e:b2:1d:9a:3d:21:c1:8a:6b:8c:df:0a:
         d3:a5:fc:f3:6d:41:52:c3:b0:42:73:7c:90:90:25:7c:ef:64:
         70:16:4c:d8:0a:77:76:59:ef:28:27:5e:f2:51:f9:9c:8a:69:
         77:9e:07:34:df:61:7e:d7:83:74:9a:00:8e:fa:ac:16:8e:a3:
         0a:44:8c:e9:b6:7b:6c:99:5e:e6:2f:87:fe:23:d0:79:54:19:
         df:b1:6b:4a:f7:4a:ef:09:91:c2:55:5d:a7:0d:24:b8:23:4c:
         21:99:08:04:75:94:e5:e2:9c:8d:0f:a6:0d:68:78:52:ad:da:
         a4:c9:7f:33:ad:ce:5d:02:82:7b:2b:2e:91:1e:03:9f:ee:85:
         fd:59:69:5f:69:9c:c8:db:6f:34:24:2c:49:9b:9f:89:74:e4:
         08:81:7c:45:62:0c:bb:f5:7e:df:ca:ce:c7:bb:46:b4:c9:48:
         87:d4:72:df:80:43:0a:67:ad:24:c5:38:73:21:fb:8a:72:6e:
         b3:8f:62:06
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUBfjUpf2BENrgEC8ReuOH7XxznVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDAzMTgxMDU1MTBaFw0yNTAzMTcxMTAwMTBaMDMxMTAvBgNV
BAMTKDFFQzMwOUY3RDk1NzQyODk5NUFFM0ZDNzAwNjM0N0JFODYzNEQzNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs55Epgw+mCYtu3GRy/KU6HZ2E
d67c2o3jfUlsIg736aV7QpAVunp6Wr25ISGTCl9qyQiJO3/OZ7N2LPkfIU8dOGWU
4x7i2EW907W4Pa2c3UxZ+X9wIas8kuVa6OjdrmJGsg00NJOGDNq8/YRfWObm5zhL
+iylukKpVCvtDRJPmsdfAlRkAjnSjLe6InaG0hLe46fcBaEST/pcf6JWPeixnjB5
HfWMXq5f5YlkIVSGJbUfvXJP4P51SByf89zhGEhpHxs3/ClmU6bFzdmW6E7tY8i4
d8cVdh6oIY5bw4pLHUkOXfabZO7s77BS8w8najH3twnp704uyqKEzA9YILcvAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUHsMJ99lXQomVrj/HAGNHvoY001kwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYI
KwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzMjM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMDMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoKYEAAJTANBgkqhkiG9w0BAQsFAAOCAQEA
nf1netuTSPbtjnkNugKGSc1pd/l5pNY51Y1nFSdrkfpr0FI+B2ahJAwIOlkuKPfw
do5L635cz8AgvVCWjrIdmj0hwYprjN8K06X8821BUsOwQnN8kJAlfO9kcBZM2Ap3
dlnvKCde8lH5nIppd54HNN9hfteDdJoAjvqsFo6jCkSM6bZ7bJle5i+H/iPQeVQZ
37FrSvdK7wmRwlVdpw0kuCNMIZkIBHWU5eKcjQ+mDWh4Uq3apMl/M63OXQKCeysu
kR4Dn+6F/VlpX2mcyNtvNCQsSZufiXTkCIF8RWIMu/V+38rOx7tGtMlIh9Ry34BD
CmetJMU4cyH7inJus49iBg==
-----END CERTIFICATE-----
Generated at Tue May 7 22:37:38 2024 by rpki-client on console-ams.rpki-client.org