Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e203530323234.roa
File:                     326130613a363034303a363030303a3a2f34302d3430203d3e203530323234.roa (raw, json)
Hash identifier:          R/LKU2VI9Ktoh30THQBdE9ryMGJTEhZUgHHPRbN3ZGI=
Subject key identifier:   09:03:8B:59:43:86:61:EB:07:7F:46:FE:1C:4F:F4:09:FA:6E:6D:D4
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       755DCB105B2BFD9EB9E1079180538AEF411BEA6F
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e203530323234.roa
Signing time:             Fri 15 Mar 2024 15:16:55 +0000
ROA not before:           Fri 15 Mar 2024 15:11:55 +0000
ROA not after:            Fri 14 Mar 2025 15:16:55 +0000
asID:                     50224
IP address blocks:        2a0a:6040:6000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5d:cb:10:5b:2b:fd:9e:b9:e1:07:91:80:53:8a:ef:41:1b:ea:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 15 15:11:55 2024 GMT
            Not After : Mar 14 15:16:55 2025 GMT
        Subject: CN=09038B59438661EB077F46FE1C4FF409FA6E6DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:d4:75:eb:b6:19:d6:62:da:3f:82:c2:34:
                    27:bc:2e:9a:6e:2b:99:9e:8f:65:f1:ad:8a:0c:c4:
                    a5:75:91:7c:00:51:a6:e6:9d:5d:52:a8:34:56:6b:
                    c1:3b:bf:97:8b:61:44:36:82:a8:04:06:29:50:ee:
                    24:d3:dd:97:24:d3:ec:96:ab:5e:67:d3:15:87:e1:
                    70:5a:b6:a7:e3:e2:6c:bb:75:45:8f:e0:3b:e8:ea:
                    88:d3:a9:7c:2e:90:1d:07:b9:58:35:8e:83:35:e8:
                    77:8a:60:98:43:2e:5a:d9:e2:9c:56:17:c8:51:b1:
                    ed:71:7e:55:f2:a1:81:b7:5d:05:39:04:cd:6f:41:
                    db:f6:a5:ef:24:bf:97:d8:58:e1:24:e7:d9:79:7f:
                    a7:17:99:3a:04:28:62:56:48:40:42:c9:89:10:af:
                    30:37:5d:c5:65:b1:a3:42:38:12:6a:d1:c8:8d:c6:
                    90:65:51:30:ba:1e:77:19:a5:9a:6c:a3:89:af:70:
                    06:58:e2:de:bc:d5:b1:02:4d:08:1d:e8:7c:e3:36:
                    c8:a3:98:f8:be:e1:4a:7e:90:c4:01:31:48:ec:a7:
                    44:3c:27:77:43:05:11:f5:22:b9:27:30:d5:bd:dc:
                    ca:ae:c5:f3:80:1e:14:c3:3e:d5:1f:fa:e3:57:c0:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:03:8B:59:43:86:61:EB:07:7F:46:FE:1C:4F:F4:09:FA:6E:6D:D4
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:44:3d:da:2c:df:f7:93:ec:33:2e:8f:dc:9d:6f:b9:6e:f1:
         cf:33:f7:03:6d:5d:d9:a6:7f:fe:48:38:33:be:8a:63:67:0e:
         34:67:0b:55:4a:84:19:a9:02:d6:2b:1d:06:8f:e2:6d:0c:3a:
         35:2a:be:e1:4a:96:07:ec:43:87:0c:03:07:e2:98:04:3c:dc:
         76:ae:e9:d1:7a:b8:1e:52:fc:3e:f1:40:3f:69:06:39:60:a0:
         78:18:42:a6:15:83:01:41:13:26:3f:55:7e:39:a0:15:bc:8c:
         83:5f:44:7a:4a:d5:b7:ee:a3:c0:6d:d9:1a:d7:23:69:7e:82:
         66:d3:19:73:02:85:10:af:d7:21:ef:d4:7b:03:e3:ac:4c:f9:
         22:cf:e1:07:e7:56:31:be:5f:6e:b0:02:da:1f:cc:17:d0:b7:
         58:06:d1:df:ea:de:d0:85:7b:fa:75:72:1d:d6:a2:c4:a1:c8:
         a7:9c:76:6d:ce:06:ba:ae:b9:5e:2a:32:a9:f4:cb:23:44:9b:
         5c:ac:6c:54:5b:9d:a0:d9:5d:5e:2f:8d:d3:28:c8:d9:71:fd:
         82:e0:93:1a:3f:05:0f:31:d7:85:88:77:c8:14:99:65:d5:37:
         03:3e:4b:ed:d0:3e:9a:7c:5d:b5:2a:80:d8:e3:0a:44:e1:6b:
         a2:ec:f4:bd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIUdV3LEFsr/Z654QeRgFOK70Eb6m8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDAzMTUxNTExNTVaFw0yNTAzMTQxNTE2NTVaMDMxMTAvBgNV
BAMTKDA5MDM4QjU5NDM4NjYxRUIwNzdGNDZGRTFDNEZGNDA5RkE2RTZERDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAdR167YZ1mLaP4LCNCe8Lppu
K5mej2XxrYoMxKV1kXwAUabmnV1SqDRWa8E7v5eLYUQ2gqgEBilQ7iTT3Zck0+yW
q15n0xWH4XBatqfj4my7dUWP4Dvo6ojTqXwukB0HuVg1joM16HeKYJhDLlrZ4pxW
F8hRse1xflXyoYG3XQU5BM1vQdv2pe8kv5fYWOEk59l5f6cXmToEKGJWSEBCyYkQ
rzA3XcVlsaNCOBJq0ciNxpBlUTC6HncZpZpso4mvcAZY4t681bECTQgd6HzjNsij
mPi+4Up+kMQBMUjsp0Q8J3dDBRH1IrknMNW93MquxfOAHhTDPtUf+uNXwA1/AgMB
AAGjggH5MIIB9TAdBgNVHQ4EFgQUCQOLWUOGYesHf0b+HE/0CfpubdQwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYI
KwYBBQUHMAuGaHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzNjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDM1MzAzMjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAYDANBgkqhkiG9w0BAQsFAAOC
AQEASEQ92izf95PsMy6P3J1vuW7xzzP3A21d2aZ//kg4M76KY2cONGcLVUqEGakC
1isdBo/ibQw6NSq+4UqWB+xDhwwDB+KYBDzcdq7p0Xq4HlL8PvFAP2kGOWCgeBhC
phWDAUETJj9VfjmgFbyMg19EekrVt+6jwG3ZGtcjaX6CZtMZcwKFEK/XIe/UewPj
rEz5Is/hB+dWMb5fbrAC2h/MF9C3WAbR3+re0IV7+nVyHdaixKHIp5x2bc4Guq65
XioyqfTLI0SbXKxsVFudoNldXi+N0yjI2XH9guCTGj8FDzHXhYh3yBSZZdU3Az5L
7dA+mnxdtSqA2OMKROFrouz0vQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:37 2024 by rpki-client on console-ams.rpki-client.org