Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa
File:                     326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa (raw, json)
Hash identifier:          eONUm4i2B2A5wx5YCmOWlUqel+gmSSiw4ucuNgSSCl8=
Subject key identifier:   65:76:5B:13:76:A5:3A:49:C7:77:1C:1C:C1:F0:35:F7:EB:8B:9D:42
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       6A8782D83A09BB16F13F1A938399DD2EC794C7CA
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     214862
IP address blocks:        2a07:54c1:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:87:82:d8:3a:09:bb:16:f1:3f:1a:93:83:99:dd:2e:c7:94:c7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=65765B1376A53A49C7771C1CC1F035F7EB8B9D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:0d:43:5c:19:1f:b5:33:f8:72:dc:91:59:
                    19:b8:d7:95:07:1f:57:99:20:de:36:82:e7:44:ae:
                    52:45:ae:0f:3e:ed:f2:fa:2a:8f:9f:f7:99:aa:52:
                    25:32:bb:c1:54:c1:b2:82:cf:94:93:df:f7:3a:82:
                    df:51:b3:9c:7b:19:2d:6c:28:6f:e0:3e:b2:ed:17:
                    0f:1b:8a:2a:d3:8d:14:9d:93:3b:76:87:a6:06:f7:
                    71:ad:8f:e8:c7:5a:e4:9f:13:a9:43:7e:b0:e9:8c:
                    c3:92:53:44:19:67:37:ea:89:08:a9:80:5d:38:a7:
                    50:c5:8b:37:44:aa:88:01:e7:c8:ed:63:be:87:57:
                    61:58:27:be:7a:0c:a1:3c:df:9a:98:88:d1:90:a4:
                    71:d8:85:7e:b6:79:11:7d:97:a8:3e:b3:f3:30:37:
                    ce:c4:61:b7:e9:25:e7:25:4f:c6:46:20:24:45:e9:
                    f0:21:1c:b3:b5:40:5a:9e:b8:5e:f7:2f:13:16:6b:
                    9d:8c:a6:8e:02:a9:aa:6c:2a:93:6b:43:e1:72:75:
                    86:c4:0e:15:90:fb:6d:5d:ba:20:f1:c3:d2:8c:b8:
                    3c:a9:81:d0:35:47:96:c9:e7:50:91:63:8d:2a:c6:
                    43:19:d0:52:d0:ed:93:12:9f:ca:67:5a:e5:cf:d0:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:76:5B:13:76:A5:3A:49:C7:77:1C:1C:C1:F0:35:F7:EB:8B:9D:42
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:64:9f:d6:7c:1c:ad:5d:a9:8f:c4:34:6c:2c:4d:c2:19:1b:
         d1:b3:88:b9:ba:8a:2a:b9:99:e1:02:70:f2:5c:cd:eb:22:51:
         87:6b:b6:f1:95:06:b6:58:88:2a:fd:6d:8e:03:59:15:4d:b3:
         8d:2a:77:1e:e4:4d:5a:25:36:71:34:74:8f:27:06:a3:7a:ad:
         22:62:0b:a4:19:35:58:b4:05:28:15:28:2b:80:e0:8d:81:41:
         ad:82:0d:59:ef:fa:62:f7:df:7c:91:d7:44:37:17:8d:fd:2f:
         e8:25:65:cc:3e:dc:b6:45:82:92:c7:12:5b:7b:57:db:98:30:
         19:2e:e6:da:02:6a:04:aa:09:01:39:6e:6f:5b:30:1a:6b:80:
         b4:ab:f3:9b:c0:20:cd:d4:08:de:a0:fb:4d:cb:9a:fc:e1:ea:
         92:49:f9:d1:44:bf:38:ff:41:d3:46:5b:fb:f2:b1:d9:de:7a:
         82:87:2a:4b:82:bd:73:56:4a:0b:e2:e7:86:33:09:4f:42:3b:
         9b:13:c0:f4:73:52:42:dc:29:30:dd:b9:a3:e8:30:31:46:58:
         18:38:89:2f:5b:2a:cc:f3:b1:77:42:ef:1a:c5:da:51:05:4d:
         20:82:32:10:71:a4:a0:25:fd:fc:9e:84:83:a1:42:f9:43:3f:
         0e:1a:41:e9
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUaoeC2DoJuxbxPxqTg5ndLseUx8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBFN0YzM0Q5
NzBGNzEyMDAeFw0yNTA3MDQxMTEyMzFaFw0yNjA3MDMxMTE3MzFaMDMxMTAvBgNV
BAMTKDY1NzY1QjEzNzZBNTNBNDlDNzc3MUMxQ0MxRjAzNUY3RUI4QjlENDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbA1DXBkftTP4ctyRWRm415UH
H1eZIN42gudErlJFrg8+7fL6Ko+f95mqUiUyu8FUwbKCz5ST3/c6gt9Rs5x7GS1s
KG/gPrLtFw8biirTjRSdkzt2h6YG93Gtj+jHWuSfE6lDfrDpjMOSU0QZZzfqiQip
gF04p1DFizdEqogB58jtY76HV2FYJ756DKE835qYiNGQpHHYhX62eRF9l6g+s/Mw
N87EYbfpJeclT8ZGICRF6fAhHLO1QFqeuF73LxMWa52Mpo4CqapsKpNrQ+FydYbE
DhWQ+21duiDxw9KMuDypgdA1R5bJ51CRY40qxkMZ0FLQ7ZMSn8pnWuXP0EFtAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUZXZbE3alOknHdxwcwfA19+uLnUIwHwYDVR0j
BBgwFoAUVYq40eOEwZ4mXDwfQOfzPZcPcSAwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzE3LzU1OEFCOEQxRTM4NEMxOUUyNjVDM0MxRjQwRTdGMzNEOTcwRjcxMjAuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzQvNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBF
N0YzM0Q5NzBGNzEyMC5jZXIwgYcGCCsGAQUFBwELBHsweTB3BggrBgEFBQcwC4Zr
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTcvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzODMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEz
NDM4MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGACoHVMGAMA0GCSqGSIb3DQEBCwUAA4IBAQB/ZJ/W
fBytXamPxDRsLE3CGRvRs4i5uooquZnhAnDyXM3rIlGHa7bxlQa2WIgq/W2OA1kV
TbONKnce5E1aJTZxNHSPJwajeq0iYgukGTVYtAUoFSgrgOCNgUGtgg1Z7/pi9998
kddENxeN/S/oJWXMPty2RYKSxxJbe1fbmDAZLubaAmoEqgkBOW5vWzAaa4C0q/Ob
wCDN1AjeoPtNy5r84eqSSfnRRL84/0HTRlv78rHZ3nqChypLgr1zVkoL4ueGMwlP
QjubE8D0c1JC3Ckw3bmj6DAxRlgYOIkvWyrM87F3Qu8axdpRBU0ggjIQcaSgJf38
noSDoUL5Qz8OGkHp
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:23:48 2025 by rpki-client