Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a333230303a3a2f34302d3430203d3e203530323234.roa
File:                     326130373a353463313a333230303a3a2f34302d3430203d3e203530323234.roa (raw, json)
Hash identifier:          RyXo0ojD2RxIC4YIbKDP6ML9pgPuSGmLc0KubkDbb1g=
Subject key identifier:   2F:F3:16:F7:16:9B:B4:26:D9:1D:13:74:7C:88:35:D5:9E:86:FD:62
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       309DD30F31FC381501B136FF42B9DF2867BC2C3B
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a333230303a3a2f34302d3430203d3e203530323234.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     50224
IP address blocks:        2a07:54c1:3200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9d:d3:0f:31:fc:38:15:01:b1:36:ff:42:b9:df:28:67:bc:2c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=2FF316F7169BB426D91D13747C8835D59E86FD62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:f5:ed:b6:fa:03:33:d1:d7:03:39:56:0d:
                    a6:25:1f:00:be:30:c1:11:27:c3:9c:47:10:9e:7e:
                    a5:18:d3:43:25:30:87:6c:11:a3:f8:59:2e:1c:ab:
                    20:5b:77:fe:80:2d:85:d7:00:e9:ba:99:6e:c0:92:
                    09:35:13:16:19:be:e1:3b:04:b3:99:e4:11:2f:d9:
                    8c:d9:b0:55:b0:ac:e6:14:ee:66:51:b3:53:50:a2:
                    0e:6b:77:ea:e4:59:9a:8d:82:47:89:6c:93:05:50:
                    98:74:81:90:d4:cb:44:d2:1d:2c:44:15:5c:2a:7c:
                    41:f8:f9:61:5d:b7:49:7e:2e:30:90:d1:ba:a1:b6:
                    5d:18:e9:c3:36:db:c9:5a:42:bb:8c:6e:25:d6:21:
                    a0:ee:9e:4e:d9:8e:a2:b3:b5:a6:b5:f4:eb:21:31:
                    99:e4:75:d3:63:b9:e1:1c:ba:67:8c:a9:c8:c3:e1:
                    3a:00:06:ac:97:ce:05:52:c9:06:83:78:91:ab:04:
                    ca:96:5c:0d:3c:6a:d6:78:15:b4:06:10:6d:11:80:
                    43:0c:ea:c4:ce:9c:7a:c0:1e:dc:a6:36:24:ac:44:
                    78:4d:d1:ae:e1:01:c6:3c:d0:ba:a4:a6:46:f4:17:
                    23:84:7e:d5:33:a7:0c:22:f4:31:e1:bc:e7:c0:18:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:16:F7:16:9B:B4:26:D9:1D:13:74:7C:88:35:D5:9E:86:FD:62
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a333230303a3a2f34302d3430203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:84:dc:ce:a0:cb:96:75:23:2b:3f:f0:49:ca:09:f0:31:ed:
         16:a6:b4:91:62:6e:d1:13:44:e1:a8:69:05:35:c0:d9:a0:a4:
         e9:91:66:85:fe:0f:fc:b5:78:27:41:14:97:f7:f5:70:c9:83:
         48:eb:00:89:f7:b0:94:55:83:ee:14:0a:ea:f3:18:e3:cd:c7:
         15:f3:a6:75:81:e9:26:af:ca:78:70:db:de:c1:4b:33:e5:e0:
         6e:3d:a5:10:9d:2f:bd:a2:4d:90:70:04:ee:5e:84:05:ad:a2:
         b1:88:c6:60:7d:50:1b:fd:ce:c8:d7:82:16:0d:21:7b:8d:3b:
         0b:90:3c:8f:ac:e9:0a:49:00:e9:4d:c7:f9:b7:32:aa:94:a6:
         48:9f:fd:08:f7:ac:37:f1:46:b5:38:c4:3f:d0:fe:da:bd:9a:
         23:ac:5b:b1:90:af:74:4e:9e:ac:52:d1:9d:00:76:3e:9e:dc:
         65:57:0f:dd:85:1f:da:9d:56:b2:67:57:ac:ef:9f:93:e1:db:
         42:50:3c:b0:fe:c9:ad:c9:12:41:f4:84:8e:a2:cf:a1:cd:9a:
         88:26:08:98:67:f7:c5:b9:e6:3a:b3:bd:5a:a8:65:75:92:4d:
         c4:b1:84:d9:20:13:35:f3:13:cd:ff:0f:4c:fd:4b:f1:1f:61:
         c9:88:2b:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUMJ3TDzH8OBUBsTb/QrnfKGe8LDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBFN0YzM0Q5
NzBGNzEyMDAeFw0yNTA3MDQxMTEyMzBaFw0yNjA3MDMxMTE3MzBaMDMxMTAvBgNV
BAMTKDJGRjMxNkY3MTY5QkI0MjZEOTFEMTM3NDdDODgzNUQ1OUU4NkZENjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0vXttvoDM9HXAzlWDaYlHwC+
MMERJ8OcRxCefqUY00MlMIdsEaP4WS4cqyBbd/6ALYXXAOm6mW7Akgk1ExYZvuE7
BLOZ5BEv2YzZsFWwrOYU7mZRs1NQog5rd+rkWZqNgkeJbJMFUJh0gZDUy0TSHSxE
FVwqfEH4+WFdt0l+LjCQ0bqhtl0Y6cM228laQruMbiXWIaDunk7ZjqKztaa19Osh
MZnkddNjueEcumeMqcjD4ToABqyXzgVSyQaDeJGrBMqWXA08atZ4FbQGEG0RgEMM
6sTOnHrAHtymNiSsRHhN0a7hAcY80Lqkpkb0FyOEftUzpwwi9DHhvOfAGMyPAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUL/MW9xabtCbZHRN0fIg11Z6G/WIwHwYDVR0j
BBgwFoAUVYq40eOEwZ4mXDwfQOfzPZcPcSAwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzE3LzU1OEFCOEQxRTM4NEMxOUUyNjVDM0MxRjQwRTdGMzNEOTcwRjcxMjAuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzQvNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBF
N0YzM0Q5NzBGNzEyMC5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4Zp
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTcvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzMzMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzAz
MjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAqB1TBMjANBgkqhkiG9w0BAQsFAAOCAQEAeYTczqDL
lnUjKz/wScoJ8DHtFqa0kWJu0RNE4ahpBTXA2aCk6ZFmhf4P/LV4J0EUl/f1cMmD
SOsAifewlFWD7hQK6vMY483HFfOmdYHpJq/KeHDb3sFLM+Xgbj2lEJ0vvaJNkHAE
7l6EBa2isYjGYH1QG/3OyNeCFg0he407C5A8j6zpCkkA6U3H+bcyqpSmSJ/9CPes
N/FGtTjEP9D+2r2aI6xbsZCvdE6erFLRnQB2Pp7cZVcP3YUf2p1WsmdXrO+fk+Hb
QlA8sP7JrckSQfSEjqLPoc2aiCYImGf3xbnmOrO9WqhldZJNxLGE2SATNfMTzf8P
TP1L8R9hyYgrBg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:00:05 2025 by rpki-client