Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa
File:                     326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          zJHxGKq4bm5EKQSykW6q3iwZdsQOsUQ5m2Fxe3IEB9c=
Subject key identifier:   14:EA:35:E4:6A:B7:B0:E0:C9:6C:AD:B1:1E:32:6A:38:1A:E2:D4:4E
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       031430F29E3E2D544A8638F7A926F9EB03951C2F
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa
Signing time:             Mon 18 Mar 2024 12:25:44 +0000
ROA not before:           Mon 18 Mar 2024 12:20:44 +0000
ROA not after:            Mon 17 Mar 2025 12:25:44 +0000
asID:                     50224
IP address blocks:        2a0a:6040:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 17:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:14:30:f2:9e:3e:2d:54:4a:86:38:f7:a9:26:f9:eb:03:95:1c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 18 12:20:44 2024 GMT
            Not After : Mar 17 12:25:44 2025 GMT
        Subject: CN=14EA35E46AB7B0E0C96CADB11E326A381AE2D44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:08:de:cb:5c:00:65:ff:90:2c:b2:88:27:
                    a8:e1:1a:d9:ff:0b:cd:c7:6d:13:16:5d:1d:b4:b6:
                    82:79:bc:0b:da:f2:98:14:83:b7:04:ad:3b:fa:2d:
                    3c:96:96:e0:e4:3e:f8:83:83:fa:37:f0:66:18:33:
                    ca:5c:77:d9:47:f0:6f:d1:95:dd:2c:8a:83:08:ea:
                    fa:6b:59:8f:38:c2:a1:4e:b8:c9:d8:ee:f1:07:24:
                    52:e5:63:0f:b7:25:c7:73:89:01:0e:e9:a6:e4:1f:
                    0f:97:58:80:9d:2f:a3:95:c4:6f:65:80:07:d0:69:
                    68:17:35:a5:1c:3c:ec:99:7f:3b:f0:dc:b6:0a:52:
                    68:16:b1:46:35:a0:00:8c:7a:0a:db:49:27:b4:76:
                    41:ba:36:90:02:07:a1:2e:79:e5:eb:9e:f1:40:17:
                    c7:3c:e8:16:f7:33:4c:16:08:54:28:f3:cc:51:73:
                    2e:7b:ba:97:ff:a9:b9:c2:1e:d6:69:a3:86:21:28:
                    b1:c8:58:b6:ba:1b:fe:00:c9:1e:6c:6a:fc:81:73:
                    69:22:e6:95:2a:30:20:3d:04:92:48:0d:80:b5:ac:
                    20:f4:4b:cd:b5:5b:2d:c0:eb:87:d8:52:d6:38:6e:
                    8b:db:bf:1c:fc:35:ff:84:67:a1:92:50:d3:83:0f:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:35:E4:6A:B7:B0:E0:C9:6C:AD:B1:1E:32:6A:38:1A:E2:D4:4E
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:36:57:fa:2a:5d:e3:12:10:f3:bf:12:e1:3c:40:2c:ac:41:
         f8:9b:57:42:81:62:dc:ae:43:83:86:65:a6:4d:55:a4:c4:05:
         c8:d9:75:b2:47:4f:37:f5:e0:ec:b5:45:d8:92:5f:ff:41:42:
         47:2f:be:f8:e4:c7:78:29:bf:60:03:65:50:95:ee:63:c9:12:
         96:f0:c1:89:52:44:61:c1:fe:5e:84:2e:2f:55:86:d8:5b:90:
         03:c6:ae:8b:18:8d:b9:02:98:05:6d:49:66:cb:ce:3b:cf:8b:
         8a:28:a8:72:fa:3c:10:45:86:32:82:30:73:83:c3:57:24:d4:
         36:f4:c4:69:10:08:0f:da:60:b8:07:37:5e:1e:61:82:2a:a4:
         c3:75:fd:95:c0:6d:d6:64:75:40:db:12:0e:a4:16:35:10:1b:
         5f:dd:c1:38:c1:31:76:a8:98:ed:bd:9a:ed:9e:5d:c1:7c:ba:
         2a:8f:e0:fa:71:0a:7e:74:ea:28:32:96:80:40:6e:87:59:6e:
         1c:13:cc:13:23:5b:59:0c:46:99:13:01:65:e4:9e:88:be:ea:
         55:35:80:bb:55:5a:5f:a3:ce:d7:10:c3:b6:d9:d2:ce:d6:9e:
         24:fc:18:64:e1:70:d9:a6:7c:cc:69:58:42:21:bd:3d:09:2c:
         32:6f:bb:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIUAxQw8p4+LVRKhjj3qSb56wOVHC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDAzMTgxMjIwNDRaFw0yNTAzMTcxMjI1NDRaMDMxMTAvBgNV
BAMTKDE0RUEzNUU0NkFCN0IwRTBDOTZDQURCMTFFMzI2QTM4MUFFMkQ0NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPwjey1wAZf+QLLKIJ6jhGtn/
C83HbRMWXR20toJ5vAva8pgUg7cErTv6LTyWluDkPviDg/o38GYYM8pcd9lH8G/R
ld0sioMI6vprWY84wqFOuMnY7vEHJFLlYw+3JcdziQEO6abkHw+XWICdL6OVxG9l
gAfQaWgXNaUcPOyZfzvw3LYKUmgWsUY1oACMegrbSSe0dkG6NpACB6EueeXrnvFA
F8c86Bb3M0wWCFQo88xRcy57upf/qbnCHtZpo4YhKLHIWLa6G/4AyR5savyBc2ki
5pUqMCA9BJJIDYC1rCD0S821Wy3A64fYUtY4bovbvxz8Nf+EZ6GSUNODD6sPAgMB
AAGjggH5MIIB9TAdBgNVHQ4EFgQUFOo15Gq3sODJbK2xHjJqOBri1E4wHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYI
KwYBBQUHMAuGaHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzNjMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNk
M2UyMDM1MzAzMjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAYDANBgkqhkiG9w0BAQsFAAOC
AQEAKzZX+ipd4xIQ878S4TxALKxB+JtXQoFi3K5Dg4Zlpk1VpMQFyNl1skdPN/Xg
7LVF2JJf/0FCRy+++OTHeCm/YANlUJXuY8kSlvDBiVJEYcH+XoQuL1WG2FuQA8au
ixiNuQKYBW1JZsvOO8+Liiiocvo8EEWGMoIwc4PDVyTUNvTEaRAID9pguAc3Xh5h
giqkw3X9lcBt1mR1QNsSDqQWNRAbX93BOMExdqiY7b2a7Z5dwXy6Ko/g+nEKfnTq
KDKWgEBuh1luHBPMEyNbWQxGmRMBZeSeiL7qVTWAu1VaX6PO1xDDttnSztaeJPwY
ZOFw2aZ8zGlYQiG9PQksMm+75A==
-----END CERTIFICATE-----
Generated at Thu Apr 25 09:18:47 2024 by rpki-client on console-ams.rpki-client.org