Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
File:                     326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa (raw, json)
Hash identifier:          0Wsg+vtnXUfvM0+H1/6EdyqJnQnsT8Kh7cVZsfRwZUI=
Subject key identifier:   B1:D6:FC:50:7F:4C:CC:69:9D:ED:F1:FC:F7:1D:95:CD:60:01:84:8C
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       40242B4FE48A6AD54F745774463E611A9B7E83CE
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
Signing time:             Wed 28 May 2025 12:00:46 +0000
ROA not before:           Wed 28 May 2025 11:55:46 +0000
ROA not after:            Wed 27 May 2026 12:00:46 +0000
asID:                     203867
IP address blocks:        2a07:54c1:8400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 06:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:24:2b:4f:e4:8a:6a:d5:4f:74:57:74:46:3e:61:1a:9b:7e:83:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: May 28 11:55:46 2025 GMT
            Not After : May 27 12:00:46 2026 GMT
        Subject: CN=B1D6FC507F4CCC699DEDF1FCF71D95CD6001848C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:07:6f:2a:c9:39:f8:29:c9:80:bc:15:bd:
                    e6:93:95:11:81:3b:58:49:65:3a:f3:c3:c0:07:fa:
                    e8:51:e9:e5:63:23:32:02:1d:d1:76:22:88:62:12:
                    c5:e0:19:85:fc:7c:33:3d:6b:c2:28:12:b0:3a:93:
                    b0:25:a1:fb:3c:be:68:6b:c5:1e:d5:76:1c:24:48:
                    7f:3c:bf:10:5f:5c:7e:f2:48:6b:f3:a5:fc:2a:1b:
                    49:6d:3d:e9:ce:1b:0f:26:79:0a:42:f5:0a:03:a1:
                    66:fc:00:02:69:51:da:9e:d8:82:53:ee:7d:8d:9b:
                    af:57:0e:a5:f3:a6:d1:b7:c4:b1:a9:ac:13:91:57:
                    8e:84:06:8f:d0:30:f8:79:68:b2:39:3b:46:9f:71:
                    7f:4b:fb:fb:89:cb:78:94:76:54:41:25:73:a3:ad:
                    21:62:e9:f5:27:d0:4c:15:ea:80:91:10:ff:a0:b3:
                    e2:77:d5:0e:0a:01:83:13:15:43:3f:f6:8c:80:2b:
                    fd:1c:6e:27:3b:04:13:d3:e3:e1:19:09:72:aa:62:
                    33:74:31:54:6e:3c:c7:f6:07:d1:18:78:80:80:9f:
                    e5:ac:29:b2:43:34:13:33:55:8d:08:17:a5:71:21:
                    b1:c8:63:68:12:16:b3:84:42:b5:81:eb:9a:2e:ee:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D6:FC:50:7F:4C:CC:69:9D:ED:F1:FC:F7:1D:95:CD:60:01:84:8C
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         77:83:e3:a3:56:83:c0:1e:3c:1e:78:75:35:39:d5:3e:ec:f7:
         34:e4:54:18:24:29:b7:96:2a:c8:53:f3:ec:ca:89:f8:40:77:
         c4:56:ec:8b:12:2e:52:21:9c:94:c3:d2:67:84:15:72:a6:f5:
         83:ca:a0:b3:1e:ef:7f:6f:63:f7:d3:20:6f:89:c1:50:f4:6c:
         73:b1:de:b7:7b:9a:88:51:9b:84:f8:72:36:e4:fd:22:6b:41:
         2f:6e:67:1f:aa:8c:ad:ed:4e:c2:72:37:ea:93:aa:22:03:b9:
         0e:70:b0:5d:46:e7:69:8b:e3:f5:7d:af:6e:80:ff:1e:a7:f7:
         03:0b:a0:cf:4a:0f:2e:4a:2b:c1:b7:3e:15:36:eb:ef:c2:3c:
         d3:42:6f:37:15:2d:cf:c9:0c:3e:44:21:c4:95:26:16:73:30:
         9c:11:97:36:b5:c6:8b:42:8b:07:91:0a:4c:6a:40:17:5e:44:
         95:f2:d2:dc:49:b0:9a:a9:25:31:32:c7:4c:65:b4:0b:43:67:
         39:e4:3d:a8:60:72:d5:e5:86:32:0a:71:1e:a7:8a:01:66:ce:
         91:f6:b1:30:9c:88:ea:54:43:3d:09:a1:a1:10:a4:14:bf:3a:
         94:28:e2:ad:2f:3e:af:07:ea:e9:87:06:88:a3:53:e0:31:c0:
         35:33:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:14:07 2025 by rpki-client