Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a353030303a3a2f34302d3430203d3e2030.roa
File:                     326130613a363034303a353030303a3a2f34302d3430203d3e2030.roa (raw, json)
Hash identifier:          eawu8AYwq/Alt93j8HWphWqRW0e4i4iIgZnHYXjzL9o=
Subject key identifier:   12:77:72:4C:49:C7:B5:F7:D4:C5:33:81:A5:79:A4:8E:0A:D8:5D:12
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       14145D9EA08C8FCF1ACCE6C3EC90C47FF004991F
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a353030303a3a2f34302d3430203d3e2030.roa
Signing time:             Sun 24 Mar 2024 09:15:51 +0000
ROA not before:           Sun 24 Mar 2024 09:10:51 +0000
ROA not after:            Sun 23 Mar 2025 09:15:51 +0000
asID:                     0
IP address blocks:        2a0a:6040:5000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:14:5d:9e:a0:8c:8f:cf:1a:cc:e6:c3:ec:90:c4:7f:f0:04:99:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 09:10:51 2024 GMT
            Not After : Mar 23 09:15:51 2025 GMT
        Subject: CN=1277724C49C7B5F7D4C53381A579A48E0AD85D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:3a:16:b7:0b:da:32:b5:a1:64:42:9b:20:
                    10:8e:68:7d:7b:7a:15:aa:2d:0e:a2:d9:eb:e4:04:
                    2f:fa:7a:14:96:a3:74:d5:3f:b8:eb:44:a4:81:fb:
                    4a:6b:fa:59:02:9f:f0:9c:ff:30:3f:2e:2c:52:f3:
                    0a:8b:87:8e:41:13:7a:fd:7b:8b:d4:51:3e:7a:2d:
                    fd:de:8f:ca:ed:9c:d0:36:07:16:4f:ff:23:0f:d3:
                    41:44:19:98:ed:14:36:69:e0:9f:05:c9:55:8c:f8:
                    1a:c5:58:8c:e4:8e:a4:53:ff:27:3d:3f:f0:5a:44:
                    3d:dc:58:81:86:1e:b9:27:4f:e7:bb:36:dc:37:78:
                    46:84:f8:bc:2c:42:e1:cd:27:0d:63:93:7f:5d:18:
                    31:0f:44:d6:51:78:a0:64:5b:6b:cb:90:a8:95:4a:
                    31:85:cd:da:74:63:85:a9:78:20:25:f4:27:c2:30:
                    e1:26:84:d9:e7:2f:59:22:4e:50:7b:0e:f3:f3:fa:
                    9f:5b:a6:fa:59:7a:f7:1a:96:9d:32:0e:cf:c3:47:
                    d2:67:98:af:e8:2a:7e:47:15:c2:56:fa:fc:90:d5:
                    8d:d3:2e:68:1d:42:b9:f4:0a:b3:4f:d2:d1:de:8e:
                    78:97:8a:b9:31:0f:a1:2e:98:53:05:6a:29:22:e5:
                    2c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:77:72:4C:49:C7:B5:F7:D4:C5:33:81:A5:79:A4:8E:0A:D8:5D:12
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a353030303a3a2f34302d3430203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:dc:49:4d:6a:b6:bc:f8:c4:2f:88:4b:85:48:93:16:89:80:
         e9:51:83:bd:19:33:80:27:63:fb:23:55:df:5f:bf:6e:45:74:
         07:52:21:7e:6b:39:f3:75:fd:e7:31:e6:be:3d:9f:be:c3:b1:
         74:22:ab:ec:ed:de:82:8a:0d:87:10:06:b6:2b:8f:83:17:59:
         99:bd:cb:f9:c2:11:e4:4e:d1:11:1d:c2:4f:e7:62:fe:6a:98:
         ce:73:81:3e:35:59:81:be:f6:93:4e:bf:e7:fc:c2:4f:c3:e3:
         d5:74:fe:ca:59:0d:6f:e3:0f:c0:b0:1f:1f:1b:23:a4:3b:58:
         1e:02:e2:2a:12:dd:1c:12:1a:94:2a:8a:36:65:28:11:1a:57:
         80:a6:1c:5f:e6:06:1a:cb:e1:44:08:08:89:21:05:f1:23:0e:
         9d:b3:84:dc:98:8f:d8:5f:b8:da:b8:1c:a3:f2:71:a9:f3:3f:
         c8:ef:3b:7d:24:9f:c4:04:20:4c:9f:06:53:0f:d5:6e:a6:b5:
         18:0f:b1:41:70:63:91:a7:3e:30:1d:16:20:e2:53:c3:15:9b:
         03:6b:96:f7:cc:b7:17:44:9f:bb:6e:c9:4e:8f:45:6e:10:10:
         ed:62:1a:3a:23:12:e8:69:8a:69:6a:6c:a0:08:70:7a:44:d9:
         c7:96:64:e0
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUFBRdnqCMj88azObD7JDEf/AEmR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDAzMjQwOTEwNTFaFw0yNTAzMjMwOTE1NTFaMDMxMTAvBgNV
BAMTKDEyNzc3MjRDNDlDN0I1RjdENEM1MzM4MUE1NzlBNDhFMEFEODVEMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXXToWtwvaMrWhZEKbIBCOaH17
ehWqLQ6i2evkBC/6ehSWo3TVP7jrRKSB+0pr+lkCn/Cc/zA/LixS8wqLh45BE3r9
e4vUUT56Lf3ej8rtnNA2BxZP/yMP00FEGZjtFDZp4J8FyVWM+BrFWIzkjqRT/yc9
P/BaRD3cWIGGHrknT+e7Ntw3eEaE+LwsQuHNJw1jk39dGDEPRNZReKBkW2vLkKiV
SjGFzdp0Y4WpeCAl9CfCMOEmhNnnL1kiTlB7DvPz+p9bpvpZevcalp0yDs/DR9Jn
mK/oKn5HFcJW+vyQ1Y3TLmgdQrn0CrNP0tHejniXirkxD6EumFMFaiki5SzfAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUEndyTEnHtffUxTOBpXmkjgrYXRIwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMHwGCCsGAQUFBwELBHAwbjBsBggr
BgEFBQcwC4ZgcnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMS8z
MjYxMzA2MTNhMzYzMDM0MzAzYTM1MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2Qz
ZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAqCmBAUDANBgkqhkiG9w0BAQsFAAOCAQEAjtxJTWq2
vPjEL4hLhUiTFomA6VGDvRkzgCdj+yNV31+/bkV0B1Ihfms583X95zHmvj2fvsOx
dCKr7O3egooNhxAGtiuPgxdZmb3L+cIR5E7RER3CT+di/mqYznOBPjVZgb72k06/
5/zCT8Pj1XT+ylkNb+MPwLAfHxsjpDtYHgLiKhLdHBIalCqKNmUoERpXgKYcX+YG
GsvhRAgIiSEF8SMOnbOE3JiP2F+42rgco/JxqfM/yO87fSSfxAQgTJ8GUw/Vbqa1
GA+xQXBjkac+MB0WIOJTwxWbA2uW98y3F0Sfu27JTo9FbhAQ7WIaOiMS6GmKaWps
oAhwekTZx5Zk4A==
-----END CERTIFICATE-----
Generated at Sat Apr 20 16:25:10 2024 by rpki-client on console-ams.rpki-client.org