Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32373a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a32373a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          sM2MGlNdntvObG1MGRiDxU12mBP+jINvlXV0W+Bs5LU=
Subject key identifier:   27:10:78:89:3F:D1:64:DB:67:D8:F5:1A:7F:8D:64:D9:67:10:D9:71
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       09186564D15662681D54F4CC21A2ED37839682E5
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32373a3a2f34382d3438203d3e203530323234.roa
Signing time:             Sun 10 Mar 2024 05:56:02 +0000
ROA not before:           Sun 10 Mar 2024 05:51:02 +0000
ROA not after:            Sun 09 Mar 2025 05:56:02 +0000
asID:                     50224
IP address blocks:        2a0a:6040:27::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:18:65:64:d1:56:62:68:1d:54:f4:cc:21:a2:ed:37:83:96:82:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 10 05:51:02 2024 GMT
            Not After : Mar  9 05:56:02 2025 GMT
        Subject: CN=271078893FD164DB67D8F51A7F8D64D96710D971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ea:e7:4f:42:75:8f:1f:66:01:de:1c:19:ba:
                    6a:67:bb:33:ea:55:18:f2:c8:9a:66:ca:a7:14:c9:
                    bf:80:95:9a:79:dc:00:b1:43:b1:6e:44:33:95:d6:
                    1e:75:36:2c:37:2b:b4:f7:67:99:90:05:11:97:60:
                    81:a9:bf:0c:7b:d0:3e:29:a8:44:c5:5b:ae:8f:7d:
                    fb:5f:60:22:fc:a3:06:ea:d4:3b:31:fd:42:38:22:
                    ff:4c:69:79:04:25:09:59:03:21:13:13:5b:0b:99:
                    a6:65:98:81:f1:e7:fb:42:f7:c5:ad:ff:48:62:97:
                    54:de:6b:49:3c:a7:a4:57:b3:8a:ea:75:4e:cb:b3:
                    38:04:bd:9f:f0:2e:4d:d9:f8:72:2a:5f:8d:ef:d1:
                    3f:08:5e:4c:42:cb:9c:a9:c1:5e:d8:39:60:af:ac:
                    03:cb:83:2b:93:9b:3b:aa:6d:01:4f:1e:d9:24:17:
                    06:57:c6:e4:02:d8:d0:57:cc:b8:22:48:4a:8f:c0:
                    1a:0b:5c:40:32:6c:f0:77:03:77:d5:ed:7f:f0:d2:
                    8c:48:96:c0:d2:47:64:37:05:1e:7c:8e:50:fe:34:
                    44:f0:d6:85:91:52:c9:e8:dd:4c:fd:78:76:1d:a4:
                    ca:68:25:67:65:14:b4:5c:9f:15:dd:8a:0c:e7:13:
                    94:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:78:89:3F:D1:64:DB:67:D8:F5:1A:7F:8D:64:D9:67:10:D9:71
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32373a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:27::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:a9:dd:11:22:fe:03:74:10:4d:93:16:68:67:82:19:bf:e0:
         fe:1c:e4:7c:55:db:d0:85:4a:78:43:61:d2:f8:f9:15:23:5e:
         dc:92:e2:9b:cd:eb:e5:b9:a8:8a:d7:e2:48:6b:14:c1:da:e1:
         1b:3d:e6:46:04:3b:4f:ff:e1:3b:cf:4f:d3:87:89:c9:bd:5d:
         ae:83:19:c2:ff:ee:27:5f:0f:cc:f2:29:c0:7d:a1:7a:f0:81:
         64:2c:68:a9:95:d0:d8:bd:d0:18:e0:34:87:da:39:1c:3d:1a:
         59:da:4c:ff:a6:c3:db:7c:45:68:7b:c4:1f:30:97:7d:00:5e:
         f8:45:f1:c0:c7:7a:84:02:f3:8b:99:d5:e6:00:8a:9a:6a:f1:
         a0:68:74:25:38:46:40:41:d3:d6:d6:47:80:67:8c:31:25:35:
         e2:e2:77:38:c8:17:52:a8:4c:41:b7:4b:40:a2:c8:db:2f:19:
         17:a5:7d:84:77:f0:2c:e5:ca:8e:1a:6c:39:07:9f:ae:ba:32:
         13:ac:02:f5:ce:45:05:e3:d6:42:3e:b0:9d:47:69:15:3d:fa:
         aa:0e:22:a8:6f:a5:55:61:e8:74:2b:86:a2:ea:35:2c:0e:97:
         43:bc:37:ef:56:58:9c:ec:02:9c:ed:43:e2:83:f9:1a:53:d6:
         9a:4e:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:09:59 2024 by rpki-client on console-fra.rpki-client.org