Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa
File:                     326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa (raw, json)
Hash identifier:          X36kTM272upEYVUJA+bUa/89Z/Nljrgm0lZ/PRjKjOk=
Subject key identifier:   87:66:14:13:00:5E:EB:A2:27:C0:31:B4:C0:82:F9:03:2D:98:C1:C1
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       583B510172C6FD3DA8FEA4CAF7F24AB7269EA9EC
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     50224
IP address blocks:        2a07:54c1:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3b:51:01:72:c6:fd:3d:a8:fe:a4:ca:f7:f2:4a:b7:26:9e:a9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=87661413005EEBA227C031B4C082F9032D98C1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:52:36:fc:54:c2:01:9d:d6:d0:2e:84:62:
                    36:0c:a0:a5:64:ef:02:e8:71:e4:98:72:a1:be:be:
                    0a:90:98:c9:5a:9e:10:ed:b7:99:7b:65:8e:2a:3c:
                    0b:d2:0f:3f:d5:4a:e1:18:57:a7:82:3c:da:5f:6f:
                    fc:06:e0:aa:2e:1a:fd:8e:6c:1e:44:9d:08:da:5c:
                    c8:b8:39:59:d0:13:5e:b3:92:70:2d:04:aa:8f:1c:
                    5a:0c:9b:d2:3b:d6:a3:5a:c3:42:dd:75:ef:6e:44:
                    ba:6b:33:c4:04:93:c0:02:95:73:23:dc:de:6e:9a:
                    a4:d6:42:ee:48:a8:60:c1:8f:ea:46:a1:67:de:2b:
                    97:a8:84:f9:01:b5:7c:58:b8:73:f3:40:20:f9:10:
                    24:33:e1:9c:b4:43:6f:df:67:2b:2d:94:d4:c4:87:
                    89:d7:b4:13:52:46:3f:f4:12:b1:2c:b9:12:83:49:
                    4d:24:bf:87:d5:48:10:60:d5:03:56:63:c1:d0:5c:
                    b8:e7:33:4f:06:8d:e4:25:09:98:1f:e2:aa:86:18:
                    8c:0c:1a:82:25:c6:dd:18:f7:f9:08:2e:2d:7a:ac:
                    f6:17:7f:8f:f3:0d:6a:c4:71:36:be:43:aa:a2:18:
                    4a:1f:a4:09:1a:ba:e1:e1:fa:c7:e7:14:17:e9:49:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:66:14:13:00:5E:EB:A2:27:C0:31:B4:C0:82:F9:03:2D:98:C1:C1
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:81:f0:7d:37:af:f2:e1:86:85:97:22:06:29:c0:4b:49:
         9a:dc:8f:a4:93:4f:8e:e6:4a:be:76:6c:b5:73:4c:6e:e7:1c:
         6d:93:93:99:04:e8:40:35:2d:a4:f7:67:c5:42:fe:4d:c9:6e:
         1b:06:ce:40:6e:07:de:03:c8:cf:cf:0b:8e:46:4d:f8:d9:09:
         19:eb:04:8a:cd:d5:07:c6:65:b1:d8:78:e7:0f:02:26:ab:1e:
         fa:bc:02:dd:0f:7a:65:e6:6a:40:12:e5:3d:18:0c:97:ed:ac:
         f3:a9:b7:ff:6c:33:34:7f:cf:47:0e:5f:88:d0:b5:01:ff:6d:
         69:5b:b0:b9:c9:6e:22:55:2b:2f:8d:0f:59:5b:57:3b:a9:29:
         00:f5:fa:ff:72:3b:d9:20:1d:ad:3c:90:bf:54:f3:51:cb:5b:
         5f:1d:99:8f:ae:6e:40:1e:3e:82:45:71:ff:0a:63:ac:11:1e:
         3f:a5:19:cd:c7:37:f5:26:24:b6:7e:62:69:82:a4:46:4f:23:
         0c:df:6b:44:4a:fa:07:96:bb:69:ed:22:70:75:56:86:b7:f6:
         4b:11:a9:17:1e:22:70:01:90:5f:bc:50:45:b4:31:3f:1c:5d:
         bb:fd:de:dc:81:3f:dd:c1:25:fa:64:8a:7d:6b:14:d7:c7:2e:
         0f:9f:7d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:47:31 2025 by rpki-client