Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203530323234.roa
File:                     326130613a363034303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          6W8GsYbZkLh5i3+rOpJPyP1EQoNGlXaMufI6/n+UVQQ=
Subject key identifier:   B6:FF:75:FF:47:D0:34:1B:B2:09:B3:C9:5C:69:20:7E:0F:05:E0:33
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       0EF87F84C01B96199B671A7D22C171B05DB62C57
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203530323234.roa
Signing time:             Tue 04 Feb 2025 18:58:16 +0000
ROA not before:           Tue 04 Feb 2025 18:53:16 +0000
ROA not after:            Tue 03 Feb 2026 18:58:16 +0000
asID:                     50224
IP address blocks:        2a0a:6040::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 15:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f8:7f:84:c0:1b:96:19:9b:67:1a:7d:22:c1:71:b0:5d:b6:2c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Feb  4 18:53:16 2025 GMT
            Not After : Feb  3 18:58:16 2026 GMT
        Subject: CN=B6FF75FF47D0341BB209B3C95C69207E0F05E033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:4a:d2:c0:b5:8e:5f:f8:b5:69:38:18:19:
                    c2:33:bb:be:10:7d:e6:1b:ef:41:3e:23:21:cc:ef:
                    87:cb:c6:9c:cb:00:2b:20:c4:36:7d:43:e9:e0:b2:
                    da:2a:06:05:49:da:69:35:7f:ba:71:a1:d5:0e:ee:
                    b9:9e:97:64:46:93:8f:92:89:b1:e0:4e:5d:2e:aa:
                    66:8c:3c:d2:db:03:85:d7:6e:cc:fe:28:f3:1e:bd:
                    5b:02:21:fd:86:49:c9:41:c0:92:a4:c5:7b:c3:d2:
                    a2:45:90:f2:88:97:70:f1:32:4d:f6:31:50:21:55:
                    a1:ab:30:0b:e2:00:39:48:26:27:25:17:33:fd:09:
                    b1:e2:b9:a0:c2:43:9a:7e:cf:6b:76:b9:e8:2d:56:
                    60:b1:0e:f7:d4:be:a1:36:82:c2:23:0e:27:31:87:
                    68:11:ac:a5:90:b7:99:4e:50:d2:25:66:2d:a1:d0:
                    86:ea:e3:a0:1a:99:39:3f:6b:aa:0b:ed:f7:17:a5:
                    17:f8:1e:45:ea:14:60:b0:47:30:95:12:cb:06:fd:
                    ad:99:4d:af:58:8a:c5:7c:5e:0d:94:12:2d:64:2b:
                    aa:c2:a4:b4:69:a6:a9:2f:8e:a5:72:52:47:f8:2f:
                    f6:72:54:e9:56:2a:b4:24:55:4e:60:1f:b8:2f:a8:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:75:FF:47:D0:34:1B:B2:09:B3:C9:5C:69:20:7E:0F:05:E0:33
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:4e:18:1a:cb:09:b2:af:a5:d6:80:cb:eb:b5:0b:1f:fd:
         f4:4b:c0:5a:d1:92:30:d4:6b:48:f4:3d:5e:a5:35:15:81:f1:
         b4:e5:81:73:7c:7a:4c:ac:28:03:92:b7:27:fe:eb:7d:b4:32:
         02:38:b4:78:34:8f:e3:b1:80:08:5e:d4:10:a3:7e:2b:7d:d9:
         14:6d:db:17:31:5e:c4:3b:20:15:17:04:da:9c:de:01:6c:2f:
         28:3f:03:9b:cf:61:fc:1f:93:77:3b:94:d9:76:c0:b2:dd:4f:
         5a:48:a6:c8:80:5c:f6:34:ab:2e:18:ec:3b:a8:9f:e3:5c:89:
         b5:eb:dc:8b:f9:9d:23:2f:d2:c3:09:12:3c:1b:94:29:54:b8:
         65:f3:8d:c4:0e:53:62:44:0e:0b:6e:b9:e7:d3:dc:48:f8:47:
         79:cd:79:8f:b5:59:8a:ba:e3:5a:6b:24:89:dd:90:eb:87:c1:
         9e:9c:78:51:cf:c0:91:16:95:1f:7e:a7:ed:1b:ff:4e:b6:52:
         58:75:ba:52:08:58:76:e0:7c:ec:d1:5a:d9:ab:1d:f7:6c:b8:
         49:a9:57:bb:24:e9:17:c2:4e:3f:0f:72:30:dd:06:2e:2a:e2:
         ae:e5:25:4a:79:ad:31:60:1d:28:18:81:1b:d8:fa:82:ae:2b:
         79:60:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:35:36 2025 by rpki-client