Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3430203d3e203539393230.roa
File:                     326130613a363034303a3a2f34302d3430203d3e203539393230.roa (raw, json)
Hash identifier:          wGqO8uwGdfeEzrkeP9S3/dIJ+1xQowIO/amclSuSFLE=
Subject key identifier:   5B:51:C6:E0:09:21:50:8D:51:0B:CD:B4:7D:DB:AA:FE:87:7D:3A:DB
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       3D86EFCEF6BD597FE90CE38561148D79462C8DE9
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3430203d3e203539393230.roa
Signing time:             Tue 19 Dec 2023 13:02:00 +0000
ROA not before:           Tue 19 Dec 2023 12:57:00 +0000
ROA not after:            Tue 17 Dec 2024 13:02:00 +0000
asID:                     59920
IP address blocks:        2a0a:6040::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:86:ef:ce:f6:bd:59:7f:e9:0c:e3:85:61:14:8d:79:46:2c:8d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Dec 19 12:57:00 2023 GMT
            Not After : Dec 17 13:02:00 2024 GMT
        Subject: CN=5B51C6E00921508D510BCDB47DDBAAFE877D3ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d9:d1:7a:db:a2:9c:c8:7e:0c:f6:90:b8:13:
                    db:ee:f2:6d:1b:68:6d:f1:1b:1a:83:4c:0e:6e:ac:
                    86:4d:29:cb:3b:99:cb:65:1a:ff:23:55:1a:52:b2:
                    f2:bf:5d:3d:d4:4e:39:15:69:9b:e4:81:59:71:a7:
                    2e:38:f5:d3:7c:e1:88:35:30:17:f2:7f:c0:f2:6d:
                    30:73:b1:01:0b:92:fa:bb:82:77:ac:81:43:2d:66:
                    0e:0c:40:24:ae:3e:dc:b1:1c:af:fa:12:6e:75:d6:
                    5c:ce:35:9c:b0:43:00:ac:2d:81:0f:57:10:82:59:
                    8d:9b:26:bd:3a:0d:9e:be:3e:ec:b7:bd:fd:71:75:
                    d0:cd:37:46:55:b4:d5:58:e8:10:d3:39:00:66:7f:
                    bb:bd:bb:ba:c2:60:21:7a:ba:a0:e3:e0:8c:b2:fc:
                    6c:d3:49:f0:8a:06:9b:20:76:fd:71:17:3c:0b:91:
                    e0:81:e6:12:a3:d6:c8:0e:f0:9f:09:4c:4d:ad:d7:
                    42:77:ce:0a:e6:c6:3c:99:b5:d2:3d:a7:39:15:96:
                    a3:ac:1e:62:cd:3f:21:3f:cf:09:71:85:0b:9c:81:
                    51:08:92:92:e4:f1:db:3c:6a:c8:51:f5:fa:39:54:
                    58:c4:10:ff:b6:15:28:0d:87:27:2b:6f:4f:13:8e:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:51:C6:E0:09:21:50:8D:51:0B:CD:B4:7D:DB:AA:FE:87:7D:3A:DB
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3430203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:92:d4:11:d7:80:6c:3a:dd:56:a4:c3:4d:b3:33:91:85:20:
         44:29:5a:d5:ac:ce:b1:d4:5d:2f:63:ea:1e:fa:a1:6b:8b:fa:
         bf:e5:b1:55:b9:50:0c:7c:6a:c6:13:67:c9:d3:39:e2:01:f1:
         7c:74:81:e6:80:df:ec:d1:26:21:b8:c9:bc:ed:8f:c4:d6:a3:
         86:41:49:77:73:2e:e9:3b:77:7b:f1:60:20:9f:c2:4f:a6:6d:
         28:78:3b:99:8b:4c:ea:98:c7:54:0d:2f:6c:fb:c6:cd:e7:6e:
         27:45:a0:b6:6f:49:bd:7f:d0:d9:63:9d:a4:30:a3:1f:c0:19:
         d9:c3:eb:58:52:c3:92:45:f2:1a:3b:fc:dd:06:48:df:0a:b1:
         32:15:8c:18:00:f0:84:bd:e3:9c:e7:73:66:6e:1a:db:19:1a:
         eb:25:08:61:01:2a:b9:1c:12:66:95:f5:95:d2:6c:98:6d:f7:
         52:20:cb:fb:0e:b8:ef:c3:a1:ae:36:01:56:f9:ce:92:52:14:
         e8:5d:b4:18:7d:8b:9f:5a:e4:20:e1:1e:40:1c:b1:e2:86:69:
         3b:53:ad:dc:db:ff:27:eb:d6:c8:d1:e5:34:48:3b:02:6b:da:
         e6:fe:cc:99:58:a2:4d:13:14:6d:c1:0e:78:9e:5b:c3:f5:02:
         22:a0:ff:22
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUPYbvzva9WX/pDOOFYRSNeUYsjekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yMzEyMTkxMjU3MDBaFw0yNDEyMTcxMzAyMDBaMDMxMTAvBgNV
BAMTKDVCNTFDNkUwMDkyMTUwOEQ1MTBCQ0RCNDdEREJBQUZFODc3RDNBREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb2dF626KcyH4M9pC4E9vu8m0b
aG3xGxqDTA5urIZNKcs7mctlGv8jVRpSsvK/XT3UTjkVaZvkgVlxpy449dN84Yg1
MBfyf8DybTBzsQELkvq7gnesgUMtZg4MQCSuPtyxHK/6Em511lzONZywQwCsLYEP
VxCCWY2bJr06DZ6+Puy3vf1xddDNN0ZVtNVY6BDTOQBmf7u9u7rCYCF6uqDj4Iyy
/GzTSfCKBpsgdv1xFzwLkeCB5hKj1sgO8J8JTE2t10J3zgrmxjyZtdI9pzkVlqOs
HmLNPyE/zwlxhQucgVEIkpLk8ds8ashR9fo5VFjEEP+2FSgNhycrb08TjiNVAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUW1HG4AkhUI1RC820fduq/od9OtswHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMS8z
MjYxMzA2MTNhMzYzMDM0MzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNTM5Mzkz
MjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYAKgpgQAAwDQYJKoZIhvcNAQELBQADggEBAFSS1BHXgGw6
3Vakw02zM5GFIEQpWtWszrHUXS9j6h76oWuL+r/lsVW5UAx8asYTZ8nTOeIB8Xx0
geaA3+zRJiG4ybztj8TWo4ZBSXdzLuk7d3vxYCCfwk+mbSh4O5mLTOqYx1QNL2z7
xs3nbidFoLZvSb1/0NljnaQwox/AGdnD61hSw5JF8ho7/N0GSN8KsTIVjBgA8IS9
45znc2ZuGtsZGuslCGEBKrkcEmaV9ZXSbJht91Igy/sOuO/Doa42AVb5zpJSFOhd
tBh9i59a5CDhHkAcseKGaTtTrdzb/yfr1sjR5TRIOwJr2ub+zJlYok0TFG3BDnie
W8P1AiKg/yI=
-----END CERTIFICATE-----
Generated at Mon May 20 15:01:33 2024 by rpki-client on console-ams.rpki-client.org