Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a333230303a3a2f34302d3430203d3e203530323234.roa
File:                     326130373a353463313a333230303a3a2f34302d3430203d3e203530323234.roa (raw, json)
Hash identifier:          pNbKK6FM0iGK21KHclCAlGt1MbnGUq/Gx/DOOVKg5sM=
Subject key identifier:   4A:FA:95:D9:60:9B:8B:41:23:DF:52:A1:97:57:A9:02:9D:BB:CB:DC
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       7D634ECD97A7419648A42D718692DDFEE390C0D1
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a333230303a3a2f34302d3430203d3e203530323234.roa
Signing time:             Sat 10 Aug 2024 05:08:21 +0000
ROA not before:           Sat 10 Aug 2024 05:03:21 +0000
ROA not after:            Sat 09 Aug 2025 05:08:21 +0000
asID:                     50224
IP address blocks:        2a07:54c1:3200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 17:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:63:4e:cd:97:a7:41:96:48:a4:2d:71:86:92:dd:fe:e3:90:c0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Aug 10 05:03:21 2024 GMT
            Not After : Aug  9 05:08:21 2025 GMT
        Subject: CN=4AFA95D9609B8B4123DF52A19757A9029DBBCBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:2b:35:f2:9a:dc:12:ca:ce:a8:0f:f3:ee:
                    a3:a7:27:b1:43:4e:4e:5a:41:fc:49:4f:1f:3f:2a:
                    90:44:7f:35:27:18:0d:5c:3d:44:c2:0f:7f:7e:69:
                    24:d2:f9:bd:e5:9f:f0:75:5c:d3:55:f0:e6:0a:3c:
                    66:0d:77:6b:b9:00:58:eb:ff:cd:1b:03:7f:cf:ae:
                    cd:c0:d3:ae:dc:e3:aa:a9:f2:08:36:61:52:3c:6c:
                    b6:87:22:44:f9:a9:6c:be:7d:bf:51:f4:a2:1d:55:
                    7e:c0:76:28:63:c5:71:66:59:b9:cd:d2:95:6d:cf:
                    87:18:24:db:6e:99:a6:48:02:4e:ba:84:71:9f:94:
                    10:c6:d6:d7:4f:92:89:b6:01:2a:a1:8c:be:a1:25:
                    d9:23:d8:94:7b:da:0c:66:8c:a0:ad:cd:15:84:c5:
                    63:35:97:06:5a:b0:5c:ec:64:9e:ce:3b:01:e1:c7:
                    23:36:ba:be:42:74:1f:3c:28:f9:72:9e:70:80:a4:
                    5e:ac:cf:b2:cb:54:e7:30:97:61:b3:2b:9a:09:25:
                    cd:11:da:a4:60:4c:aa:73:f3:24:b0:06:32:d8:20:
                    fe:b8:59:19:12:f6:5f:92:34:20:1d:50:5f:27:54:
                    39:ea:d6:e8:80:ba:a2:59:c4:df:36:38:ce:d3:bc:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FA:95:D9:60:9B:8B:41:23:DF:52:A1:97:57:A9:02:9D:BB:CB:DC
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a333230303a3a2f34302d3430203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:71:cf:eb:94:31:89:f7:f9:41:a0:f3:5f:92:34:0d:e8:bc:
         80:54:fb:98:e6:9d:21:24:67:90:fc:1f:61:0e:41:31:6d:b4:
         81:a7:00:42:e3:3d:d3:f7:fd:cb:82:02:b4:67:5f:5d:8d:20:
         a2:11:37:05:2d:ca:eb:0f:14:a6:ad:e4:3a:6c:fe:b9:f5:9f:
         f2:80:a3:e5:ca:73:7b:b5:a6:0b:98:f2:e2:c0:a5:76:0b:9c:
         87:4d:5a:a3:64:e5:93:2b:8b:6e:b4:50:81:67:75:67:c1:91:
         e3:ac:c0:61:70:35:44:c5:1c:54:3a:9e:b8:99:19:d6:b1:16:
         e5:33:b0:95:06:11:9e:2f:d1:21:7a:f9:88:f4:53:59:ca:53:
         c8:c1:57:f7:4b:ca:be:2d:30:c5:d5:78:90:14:d0:3a:fc:48:
         c8:e4:42:f6:90:49:6d:15:80:9b:98:6f:45:c7:64:33:12:b2:
         74:c5:47:0e:f1:6d:3c:42:19:cd:81:c2:74:e2:9d:9a:da:5f:
         1c:d9:5f:75:b1:cb:a1:e5:c1:c7:9e:86:95:8e:69:d1:56:c0:
         43:5a:33:c2:8d:29:9b:ab:55:a1:8e:65:33:f2:03:31:72:1f:
         dd:9d:54:44:6d:6c:91:70:45:e7:85:29:93:99:58:29:87:18:
         1d:88:df:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUfWNOzZenQZZIpC1xhpLd/uOQwNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0OEQwMEY5
RjQ3MjMwRTAeFw0yNDA4MTAwNTAzMjFaFw0yNTA4MDkwNTA4MjFaMDMxMTAvBgNV
BAMTKDRBRkE5NUQ5NjA5QjhCNDEyM0RGNTJBMTk3NTdBOTAyOURCQkNCREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpSs18prcEsrOqA/z7qOnJ7FD
Tk5aQfxJTx8/KpBEfzUnGA1cPUTCD39+aSTS+b3ln/B1XNNV8OYKPGYNd2u5AFjr
/80bA3/Prs3A067c46qp8gg2YVI8bLaHIkT5qWy+fb9R9KIdVX7AdihjxXFmWbnN
0pVtz4cYJNtumaZIAk66hHGflBDG1tdPkom2ASqhjL6hJdkj2JR72gxmjKCtzRWE
xWM1lwZasFzsZJ7OOwHhxyM2ur5CdB88KPlynnCApF6sz7LLVOcwl2GzK5oJJc0R
2qRgTKpz8ySwBjLYIP64WRkS9l+SNCAdUF8nVDnq1uiAuqJZxN82OM7TvFipAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUSvqV2WCbi0Ej31Khl1epAp27y9wwHwYDVR0j
BBgwFoAU+YEZiLqszYFGw8esT0jQD59HIw4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEyL0Y5ODExOTg4QkFBQ0NEODE0NkMzQzdBQzRGNDhEMDBGOUY0NzIzMEUuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzAvRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0
OEQwMEY5RjQ3MjMwRS5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4Zp
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTIvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzMzMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzAz
MjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAqB1TBMjANBgkqhkiG9w0BAQsFAAOCAQEAcnHP65Qx
iff5QaDzX5I0Dei8gFT7mOadISRnkPwfYQ5BMW20gacAQuM90/f9y4ICtGdfXY0g
ohE3BS3K6w8Upq3kOmz+ufWf8oCj5cpze7WmC5jy4sCldguch01ao2TlkyuLbrRQ
gWd1Z8GR46zAYXA1RMUcVDqeuJkZ1rEW5TOwlQYRni/RIXr5iPRTWcpTyMFX90vK
vi0wxdV4kBTQOvxIyORC9pBJbRWAm5hvRcdkMxKydMVHDvFtPEIZzYHCdOKdmtpf
HNlfdbHLoeXBx56GlY5p0VbAQ1ozwo0pm6tVoY5lM/IDMXIf3Z1URG1skXBF54Up
k5lYKYcYHYjf6Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:57:45 2024 by rpki-client on console-fra.rpki-client.org