Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa
File:                     326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa (raw, json)
Hash identifier:          gJfouyyCTbRShGNbYMPjKGaaFDIERXLyNnu4biSzz/4=
Subject key identifier:   9B:34:BE:08:72:CA:FA:F2:36:45:FD:21:C8:CA:E8:7C:CF:CA:44:6B
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       2479A4AC4C3F6B2FCA11BD1082EEFC6EE25EBCE7
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa
Signing time:             Mon 04 Dec 2023 12:53:54 +0000
ROA not before:           Mon 04 Dec 2023 12:48:54 +0000
ROA not after:            Mon 02 Dec 2024 12:53:54 +0000
asID:                     50224
IP address blocks:        2a07:54c1:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:79:a4:ac:4c:3f:6b:2f:ca:11:bd:10:82:ee:fc:6e:e2:5e:bc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Dec  4 12:48:54 2023 GMT
            Not After : Dec  2 12:53:54 2024 GMT
        Subject: CN=9B34BE0872CAFAF23645FD21C8CAE87CCFCA446B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:43:0e:f1:9a:9a:d1:02:45:8f:63:5e:27:06:
                    ea:17:32:27:bd:70:46:a4:e6:3b:9b:01:6a:bd:03:
                    05:ae:4b:d1:84:db:c9:f7:9d:14:90:84:1d:03:dc:
                    78:e3:31:9f:b5:34:71:59:3e:d0:a3:90:c5:46:83:
                    0d:6c:08:a5:5a:80:5c:e7:cb:37:51:be:eb:17:48:
                    c4:19:4e:8d:26:e5:72:d4:9a:51:97:14:b2:0e:bf:
                    18:e3:0b:40:93:4a:f3:a7:73:40:7d:5a:4f:81:b6:
                    7b:8a:06:c9:4d:0b:67:50:3e:cd:83:09:b5:36:80:
                    f1:fb:b5:5d:b5:94:42:1b:f3:68:a4:7f:a8:16:14:
                    bb:94:fc:b6:a3:32:1d:c8:71:9a:81:de:46:42:45:
                    35:2a:e5:0f:25:49:58:95:78:86:e4:94:f5:57:4b:
                    a5:24:54:6c:ac:ea:2a:2e:74:6e:33:01:69:4c:40:
                    33:b1:d3:64:dc:a4:b1:31:72:b9:df:20:24:fc:b8:
                    23:a2:c8:6d:d0:7b:f5:c2:36:fd:f4:e9:31:17:f6:
                    a8:e3:b9:77:da:f5:32:7b:8b:21:14:fa:3b:2c:2f:
                    5c:f5:67:cf:89:6b:e7:a6:7f:3d:26:fd:a7:74:d9:
                    94:04:b9:a6:48:e9:74:9a:77:04:99:8b:a7:7b:67:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:34:BE:08:72:CA:FA:F2:36:45:FD:21:C8:CA:E8:7C:CF:CA:44:6B
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:e7:29:a7:9e:8c:1a:7d:8b:fc:9e:b4:60:df:ac:04:35:
         69:20:6e:2c:f9:9a:cf:8c:5a:ae:be:02:45:45:07:31:9c:30:
         b2:ea:b6:50:fe:8c:6e:ca:0f:77:42:7f:79:f1:57:b2:5b:67:
         a1:2f:e9:91:2b:27:68:f0:7b:ab:42:32:1c:ef:fd:a1:c1:a4:
         3e:65:b6:3a:84:81:1a:43:b5:79:37:d9:c0:ac:72:bc:8a:0b:
         e0:2d:7b:5f:0d:d7:ff:be:e0:df:d2:be:cc:65:c3:ca:9c:bf:
         5a:bb:b8:3b:94:53:fe:b2:b5:9f:8d:b9:c6:d9:a5:51:6a:c4:
         18:4a:52:dd:b4:47:eb:b3:9d:ce:b7:60:44:81:a5:1b:b4:e0:
         be:3a:d7:f7:8d:98:c9:0d:cd:0f:e1:de:69:da:60:da:db:14:
         b4:e6:d9:f6:8b:34:47:ca:43:86:9a:07:bb:b1:30:c2:c2:54:
         8c:2a:81:5d:d9:b2:c3:e4:10:ac:3b:85:1d:08:ad:ee:ae:0a:
         07:09:20:0e:89:7e:51:7a:25:5f:e4:d6:14:8c:e0:51:d8:a8:
         c9:e2:69:75:e4:ae:6a:b8:23:60:c0:fb:8a:15:37:1f:7a:d1:
         67:29:ec:af:96:8a:d1:6c:69:6e:f2:32:87:cf:a0:27:50:0d:
         5a:da:bf:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUJHmkrEw/ay/KEb0Qgu78buJevOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0OEQwMEY5
RjQ3MjMwRTAeFw0yMzEyMDQxMjQ4NTRaFw0yNDEyMDIxMjUzNTRaMDMxMTAvBgNV
BAMTKDlCMzRCRTA4NzJDQUZBRjIzNjQ1RkQyMUM4Q0FFODdDQ0ZDQTQ0NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQw7xmprRAkWPY14nBuoXMie9
cEak5jubAWq9AwWuS9GE28n3nRSQhB0D3HjjMZ+1NHFZPtCjkMVGgw1sCKVagFzn
yzdRvusXSMQZTo0m5XLUmlGXFLIOvxjjC0CTSvOnc0B9Wk+BtnuKBslNC2dQPs2D
CbU2gPH7tV21lEIb82ikf6gWFLuU/LajMh3IcZqB3kZCRTUq5Q8lSViVeIbklPVX
S6UkVGys6ioudG4zAWlMQDOx02TcpLExcrnfICT8uCOiyG3Qe/XCNv306TEX9qjj
uXfa9TJ7iyEU+jssL1z1Z8+Ja+emfz0m/ad02ZQEuaZI6XSadwSZi6d7Z//DAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUmzS+CHLK+vI2Rf0hyMrofM/KRGswHwYDVR0j
BBgwFoAU+YEZiLqszYFGw8esT0jQD59HIw4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEyL0Y5ODExOTg4QkFBQ0NEODE0NkMzQzdBQzRGNDhEMDBGOUY0NzIzMEUuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzAvRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0
OEQwMEY5RjQ3MjMwRS5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4Zp
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTIvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzNjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM1MzAz
MjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgQqB1TBYDANBgkqhkiG9w0BAQsFAAOCAQEAT0XnKaee
jBp9i/yetGDfrAQ1aSBuLPmaz4xarr4CRUUHMZwwsuq2UP6MbsoPd0J/efFXsltn
oS/pkSsnaPB7q0IyHO/9ocGkPmW2OoSBGkO1eTfZwKxyvIoL4C17Xw3X/77g39K+
zGXDypy/Wru4O5RT/rK1n425xtmlUWrEGEpS3bRH67OdzrdgRIGlG7TgvjrX942Y
yQ3ND+Headpg2tsUtObZ9os0R8pDhpoHu7EwwsJUjCqBXdmyw+QQrDuFHQit7q4K
BwkgDol+UXolX+TWFIzgUdioyeJpdeSuargjYMD7ihU3H3rRZynsr5aK0WxpbvIy
h8+gJ1ANWtq/Rw==
-----END CERTIFICATE-----
Generated at Wed May 8 12:42:41 2024 by rpki-client on console-ams.rpki-client.org