Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203530323234.roa
File:                     326130613a363034303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          b+6NaYnfGdOmEn/IS1Z+GLz/8c+NkoF210t5eOwl2rE=
Subject key identifier:   76:88:72:F8:6F:DD:78:56:A0:FF:B3:84:1E:39:25:FE:E5:6F:35:7A
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       0F2E64F29FD5AE89A77F0C861A6321D85156803F
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203530323234.roa
Signing time:             Tue 05 Mar 2024 18:22:18 +0000
ROA not before:           Tue 05 Mar 2024 18:17:18 +0000
ROA not after:            Tue 04 Mar 2025 18:22:18 +0000
asID:                     50224
IP address blocks:        2a0a:6040::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 08:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2e:64:f2:9f:d5:ae:89:a7:7f:0c:86:1a:63:21:d8:51:56:80:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar  5 18:17:18 2024 GMT
            Not After : Mar  4 18:22:18 2025 GMT
        Subject: CN=768872F86FDD7856A0FFB3841E3925FEE56F357A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:80:64:cd:fa:72:af:54:07:bd:c7:22:90:
                    9e:1d:7d:0f:7d:f6:08:51:2d:31:b8:9c:c0:2f:cb:
                    82:4e:e5:65:9d:ae:9d:f3:b8:7e:9b:56:ef:1d:a7:
                    58:30:25:5c:d9:70:0b:18:51:86:6a:5c:67:9b:e8:
                    0d:56:ba:f6:84:e6:9b:f1:1b:dd:13:3a:35:07:88:
                    9f:72:2d:ee:c7:81:7c:b0:ff:05:d8:7b:d6:b1:2d:
                    5d:9a:1a:36:99:d4:45:f2:44:de:55:d6:7d:f0:05:
                    de:70:4f:26:3a:1e:a5:17:5a:c4:46:1f:15:60:39:
                    3d:cf:14:8e:96:20:84:e8:06:2a:e6:f1:97:c5:b0:
                    8d:33:ba:bd:00:8a:ed:73:36:30:d2:3d:44:da:a9:
                    b5:b6:13:54:02:24:88:e5:ef:e7:f4:e8:a2:f6:24:
                    c5:c5:62:5f:7d:2a:53:cd:33:94:6b:05:3e:f8:2d:
                    3c:37:db:f1:69:76:66:77:a0:8b:8f:66:e7:e6:a2:
                    a8:cc:d9:b0:ca:26:fc:22:ef:a9:70:7e:ef:50:a8:
                    04:b6:bf:45:40:f5:3f:b9:ff:cc:2e:86:37:d7:98:
                    63:4a:c7:27:f4:d3:14:7b:5d:14:50:ea:64:f0:bc:
                    76:a9:85:d3:14:ca:26:aa:6b:30:8c:c9:38:a7:f3:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:88:72:F8:6F:DD:78:56:A0:FF:B3:84:1E:39:25:FE:E5:6F:35:7A
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:cd:df:5d:77:cc:d0:f3:a6:4b:6b:94:68:dd:1a:50:0e:bb:
         39:a1:3e:c3:d9:a5:3b:d3:2b:5c:2b:2a:de:76:7e:d9:f2:bf:
         67:fd:9b:0c:1c:74:a1:08:26:f5:f9:31:83:0d:e1:35:98:69:
         b7:f2:81:c9:14:8a:f3:1c:0d:80:17:62:08:fd:26:e5:70:1a:
         7f:7a:9f:b8:1f:5a:33:ef:31:86:b1:50:f0:75:13:e6:92:fb:
         04:46:81:3c:16:33:a5:99:57:d8:6e:1a:0a:b5:37:70:92:cf:
         d2:4e:22:49:4b:5c:f1:aa:05:14:68:3b:78:60:79:36:7f:af:
         83:90:92:56:2b:b3:f9:cb:02:c5:67:47:2a:9d:70:08:d5:ac:
         53:be:f4:e2:35:09:c4:55:c1:58:e1:53:82:a1:b8:5e:58:96:
         86:a9:e4:07:e3:9c:48:d3:14:fe:31:b3:4a:3f:ef:fb:85:c6:
         ae:a4:67:02:ac:1b:ef:33:c6:45:fc:59:34:63:50:80:22:9b:
         39:6c:9d:f7:c6:fd:2c:76:c0:0b:f4:e7:5b:35:d7:72:14:1f:
         51:8b:a0:2d:c9:65:72:b4:ab:bc:10:c2:8f:4d:e2:2c:4f:22:
         bf:da:fb:0f:82:09:31:aa:be:75:d3:64:9f:01:9a:7d:9a:1f:
         20:a4:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:10:36 2024 by rpki-client on console-ams.rpki-client.org