Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a323a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a323a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          3vya4fBcH5yv8hE5zgh81mpiWMDuL+D6Nn4w90MWdhE=
Subject key identifier:   1A:85:FC:C7:7D:2C:C9:EF:3F:BE:F9:BD:B5:F9:87:86:93:96:ED:2E
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       73B8766C0C64217EA811EFE1FEDAE7D4884B642B
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a323a3a2f34382d3438203d3e203438353831.roa
Signing time:             Thu 10 Aug 2023 12:38:29 +0000
ROA not before:           Thu 10 Aug 2023 12:33:29 +0000
ROA not after:            Thu 08 Aug 2024 12:38:29 +0000
asID:                     48581
IP address blocks:        2a0a:6040:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b8:76:6c:0c:64:21:7e:a8:11:ef:e1:fe:da:e7:d4:88:4b:64:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Aug 10 12:33:29 2023 GMT
            Not After : Aug  8 12:38:29 2024 GMT
        Subject: CN=1A85FCC77D2CC9EF3FBEF9BDB5F987869396ED2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:c1:4d:fa:ac:ef:02:6f:b7:06:f5:e5:de:
                    49:fe:cc:34:d2:bc:e6:4e:50:7a:c9:f9:90:63:c8:
                    a7:37:ba:c0:5f:61:2e:3e:6d:f3:84:69:58:eb:13:
                    41:3c:af:bb:85:49:c6:22:87:d1:bc:ab:5a:0d:9a:
                    5e:88:0e:bb:36:ea:98:67:31:ee:88:f7:cf:af:f2:
                    0d:c2:21:98:8d:bd:01:a3:6d:2c:e3:b7:6e:8b:36:
                    44:a0:89:dd:75:ea:16:a0:f1:10:a3:db:63:7b:78:
                    ac:e9:f5:ca:4b:18:59:2e:e9:89:dc:2c:81:70:38:
                    4a:bd:43:a7:90:d4:5e:ee:19:ac:b1:c0:71:86:b6:
                    d3:ce:54:80:3f:ca:a2:21:1d:38:06:a3:53:b2:4e:
                    2c:18:a2:5d:3f:30:0f:99:e7:8f:fb:aa:22:79:97:
                    14:81:65:fd:a8:28:b8:12:7b:b4:7d:70:cd:6f:31:
                    93:76:bc:22:30:07:66:d5:06:d2:af:41:2b:49:d6:
                    48:e0:92:ee:9e:2c:85:1c:69:3a:ee:f3:45:69:6f:
                    30:b0:ed:69:10:68:99:03:28:4e:33:bf:a3:52:b5:
                    04:d6:ba:b3:8b:8b:33:9a:a6:2a:ac:01:7b:0f:27:
                    61:d8:d4:c3:3f:a8:9a:cf:2e:3b:fe:85:37:b2:f1:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:85:FC:C7:7D:2C:C9:EF:3F:BE:F9:BD:B5:F9:87:86:93:96:ED:2E
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a323a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:10:a9:d3:dd:9d:68:5f:0a:b0:97:c5:20:6a:10:f8:40:
         9c:7d:89:7e:33:01:18:aa:f8:82:58:26:98:e1:6f:6c:77:41:
         83:fc:2c:a2:12:33:85:7a:d8:4b:9d:0d:18:d3:f7:e2:58:2a:
         d3:60:5e:83:9f:82:96:7d:ff:8b:41:ba:4c:cf:1e:fe:16:36:
         39:0a:5c:41:06:d6:b3:7e:3d:dc:f9:26:b3:68:7e:52:fe:0f:
         17:e0:a4:c1:cb:a5:98:41:90:56:05:9f:9e:e2:96:2e:2f:26:
         27:29:b1:d3:5b:6e:3a:db:19:17:56:b1:d1:ac:90:60:16:11:
         50:88:fa:30:4f:e8:3b:d7:13:14:ec:ad:63:0a:db:bf:b1:6b:
         66:4f:d8:3f:3d:21:4c:34:f3:68:71:ab:2e:3f:dc:0d:4a:94:
         b2:94:00:a0:43:ef:35:ff:66:b0:d8:ef:c9:78:1a:a0:08:df:
         27:2e:52:52:1c:62:75:05:7e:e0:04:6c:ec:1c:ae:9e:23:bc:
         99:86:5a:8c:7f:1f:d9:15:6a:a1:b2:d7:20:63:45:08:1e:bf:
         88:b8:0a:cf:fa:e1:d3:bd:f0:76:a5:c6:cf:e4:d7:22:58:c6:
         73:a9:14:13:9f:66:40:e7:de:e8:55:c8:1b:0e:81:c3:1a:8c:
         9d:56:db:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:25:10 2024 by rpki-client on console-ams.rpki-client.org