Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338323a3a2f34382d3438203d3e203136353039.roa
File:                     326130373a353463313a386338323a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          vUqXcYwfalRvW1se3Xeg2rUtA2cYs7tJLpOFuqUI59U=
Subject key identifier:   61:CB:61:19:3F:35:EA:F2:B1:AA:77:39:7F:F9:23:56:F4:A5:98:5C
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       26B188448B25B9EA0EA6F066DA6EC837B039DA63
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338323a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 27 Jun 2025 00:58:56 +0000
ROA not before:           Fri 27 Jun 2025 00:53:56 +0000
ROA not after:            Fri 26 Jun 2026 00:58:56 +0000
asID:                     16509
IP address blocks:        2a07:54c1:8c82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 07:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b1:88:44:8b:25:b9:ea:0e:a6:f0:66:da:6e:c8:37:b0:39:da:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 00:53:56 2025 GMT
            Not After : Jun 26 00:58:56 2026 GMT
        Subject: CN=61CB61193F35EAF2B1AA77397FF92356F4A5985C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:c7:a5:4f:c4:4b:12:a2:29:59:c4:b6:bc:
                    31:8f:ba:35:2b:35:0f:25:b8:ac:63:80:89:86:13:
                    b2:53:25:a8:fa:73:c3:dc:c8:2f:62:a9:54:30:38:
                    57:8c:4f:fb:46:65:57:32:32:e1:06:0b:9e:d8:19:
                    83:9f:85:a9:b5:d8:af:d5:2b:a0:bf:65:7e:ec:a1:
                    3f:b3:4d:5d:cc:dc:49:c5:59:6d:70:33:bc:1f:ef:
                    c8:f1:f8:bf:2c:8a:85:04:9f:c5:88:57:18:0f:1b:
                    d0:3e:0c:29:b1:9c:47:fc:7d:dc:7c:1d:de:fc:08:
                    7b:b7:be:dd:db:10:0c:55:1e:ab:e1:1c:f7:5b:d6:
                    20:a8:63:0b:a2:f3:ae:25:16:aa:5e:82:03:2f:8c:
                    9b:3b:cd:03:4b:87:6f:d6:f2:b1:76:b1:78:07:80:
                    d3:40:4a:c8:79:13:71:ae:ad:42:d4:c9:5f:c5:da:
                    68:5b:95:59:e4:43:e0:8f:52:7e:a2:d5:db:86:e4:
                    d0:68:3a:7f:38:b7:53:4b:c9:35:09:d5:a6:73:41:
                    d7:0f:93:f2:33:55:c1:b6:f8:45:c7:66:a5:00:09:
                    f2:78:60:0b:6b:1a:4c:bb:b6:f3:63:d5:8a:9c:9c:
                    98:5a:c9:d8:a1:1c:47:b5:28:7c:74:aa:a1:94:b0:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CB:61:19:3F:35:EA:F2:B1:AA:77:39:7F:F9:23:56:F4:A5:98:5C
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338323a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c82::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:05:fb:a1:17:9c:39:45:84:67:a5:9f:6c:40:a5:8a:ce:18:
         c6:10:78:fa:67:4d:26:be:51:86:3a:e4:12:a5:5d:58:2a:14:
         5c:31:7b:0a:94:f2:9c:51:33:76:a9:1f:c0:1b:3b:a3:50:dd:
         54:35:ec:b9:b9:7f:ef:a0:40:50:c8:2f:08:cc:ce:a7:4b:5c:
         d3:92:4d:f3:22:d5:60:ad:b4:1b:24:c6:36:eb:1b:2c:7e:20:
         7e:a6:bf:c2:2d:b5:6b:7e:56:e2:22:39:94:b9:51:aa:25:79:
         d0:f6:01:ff:c8:2b:5d:f9:24:b4:95:7b:76:4b:7c:48:e0:38:
         13:7d:81:85:63:11:ca:04:01:00:5c:17:f7:13:36:13:57:d4:
         03:a6:25:c2:a7:c3:56:83:b0:e9:ee:1f:5e:49:9a:2d:f0:54:
         ac:40:24:a4:1a:40:e6:d8:89:28:09:7f:52:67:99:13:62:b6:
         90:a6:87:cb:7a:f1:dc:24:53:ec:d9:44:79:7c:6b:f4:6e:3d:
         7c:31:cd:d8:14:0d:78:5e:11:ff:29:95:a1:81:f0:82:bf:3b:
         b7:8d:96:98:a0:52:a3:00:db:df:c8:87:3e:8f:e0:ff:c1:59:
         e0:87:af:b8:42:15:4e:90:19:44:57:78:f1:64:79:b5:5e:04:
         cb:0f:95:b3
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUJrGIRIslueoOpvBm2m7IN7A52mMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0OEQwMEY5
RjQ3MjMwRTAeFw0yNTA2MjcwMDUzNTZaFw0yNjA2MjYwMDU4NTZaMDMxMTAvBgNV
BAMTKDYxQ0I2MTE5M0YzNUVBRjJCMUFBNzczOTdGRjkyMzU2RjRBNTk4NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkocelT8RLEqIpWcS2vDGPujUr
NQ8luKxjgImGE7JTJaj6c8PcyC9iqVQwOFeMT/tGZVcyMuEGC57YGYOfham12K/V
K6C/ZX7soT+zTV3M3EnFWW1wM7wf78jx+L8sioUEn8WIVxgPG9A+DCmxnEf8fdx8
Hd78CHu3vt3bEAxVHqvhHPdb1iCoYwui864lFqpeggMvjJs7zQNLh2/W8rF2sXgH
gNNASsh5E3GurULUyV/F2mhblVnkQ+CPUn6i1duG5NBoOn84t1NLyTUJ1aZzQdcP
k/IzVcG2+EXHZqUACfJ4YAtrGky7tvNj1YqcnJhaydihHEe1KHx0qqGUsP8dAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUYcthGT816vKxqnc5f/kjVvSlmFwwHwYDVR0j
BBgwFoAU+YEZiLqszYFGw8esT0jQD59HIw4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEyL0Y5ODExOTg4QkFBQ0NEODE0NkMzQzdBQzRGNDhEMDBGOUY0NzIzMEUuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzAvRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0
OEQwMEY5RjQ3MjMwRS5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4Zp
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTIvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzODYzMzgzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzYz
NTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqB1TBjIIwDQYJKoZIhvcNAQELBQADggEBAHUF+6EX
nDlFhGeln2xApYrOGMYQePpnTSa+UYY65BKlXVgqFFwxewqU8pxRM3apH8AbO6NQ
3VQ17Lm5f++gQFDILwjMzqdLXNOSTfMi1WCttBskxjbrGyx+IH6mv8IttWt+VuIi
OZS5UaoledD2Af/IK135JLSVe3ZLfEjgOBN9gYVjEcoEAQBcF/cTNhNX1AOmJcKn
w1aDsOnuH15Jmi3wVKxAJKQaQObYiSgJf1JnmRNitpCmh8t68dwkU+zZRHl8a/Ru
PXwxzdgUDXheEf8plaGB8IK/O7eNlpigUqMA29/Ihz6P4P/BWeCHr7hCFU6QGURX
ePFkebVeBMsPlbM=
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:27:44 2025 by rpki-client