Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a383230303a3a2f34302d3438203d3e20323034353138.roa
File:                     326130373a353463313a383230303a3a2f34302d3438203d3e20323034353138.roa (raw, json)
Hash identifier:          Q/UcPQQVolK/l/qBzMCEB3WecHiZ/xmsFUu8Lr2WJLk=
Subject key identifier:   15:09:A2:10:F0:41:6A:2E:13:CD:57:B7:93:E8:DC:5F:D6:3E:F2:94
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       2F8730345597075090CE6724208C8D082CD6A181
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383230303a3a2f34302d3438203d3e20323034353138.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     204518
IP address blocks:        2a07:54c1:8200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:87:30:34:55:97:07:50:90:ce:67:24:20:8c:8d:08:2c:d6:a1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=1509A210F0416A2E13CD57B793E8DC5FD63EF294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:4b:03:d7:1d:e1:53:ac:32:e8:6d:d5:a3:
                    4f:fd:78:1f:32:2f:3f:11:73:76:ff:aa:34:ac:c8:
                    66:5a:01:b1:d1:0d:39:bb:8d:43:b3:3c:69:31:9e:
                    a6:53:c2:86:d2:d5:c9:bd:86:e2:58:17:96:a5:04:
                    82:7c:fd:67:ee:fa:56:ef:9a:fb:31:06:0b:dd:46:
                    38:9d:49:82:5d:b1:4f:08:fd:b3:c5:4d:13:89:8f:
                    6e:c0:0a:02:25:65:a9:11:00:0a:42:be:1d:07:29:
                    77:d9:12:f6:00:f2:0f:a3:9b:76:fe:28:76:84:73:
                    75:c8:76:23:c2:98:cc:fe:ae:fd:4b:2d:6f:f9:51:
                    26:77:f7:18:45:0f:e6:20:15:cc:4e:26:cd:7b:b3:
                    bc:e7:08:bd:77:ee:df:8b:20:21:8a:e0:c6:1b:25:
                    76:f5:42:4b:e8:37:d7:26:59:80:a6:9f:d6:80:c0:
                    a4:19:73:a3:56:f7:f4:2d:10:0a:9f:71:e9:3c:41:
                    74:39:c2:e3:f5:a3:05:ed:65:cd:41:20:51:ac:9a:
                    3f:bb:e7:f4:f4:bf:1a:eb:0d:fb:f5:f8:53:b0:96:
                    e6:28:fb:84:bf:fc:95:54:e9:61:ef:89:71:1a:7c:
                    c2:74:6b:03:2b:42:0e:cb:b1:61:12:b3:33:57:27:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:09:A2:10:F0:41:6A:2E:13:CD:57:B7:93:E8:DC:5F:D6:3E:F2:94
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383230303a3a2f34302d3438203d3e20323034353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:ed:66:29:1a:d3:82:8d:12:69:16:77:db:02:e0:80:00:
         9b:82:e6:09:4c:07:5a:cd:8b:52:d9:f6:56:b6:63:a7:48:14:
         45:a5:db:fb:33:4f:69:7b:a3:5e:08:0f:2e:ee:7d:86:f8:10:
         ae:6d:c6:f0:cb:b6:f5:87:29:77:c4:ff:ca:63:32:1a:31:d6:
         dc:c7:4d:8a:f4:00:df:cb:3d:98:cd:7c:e4:cc:e5:10:96:86:
         6c:c3:cd:0d:5f:2d:82:a2:dc:3c:66:53:a9:7a:4a:ab:f4:1f:
         77:81:bd:6d:df:c6:80:90:17:e7:11:9e:5d:6c:01:bb:13:ed:
         aa:c7:ef:90:15:bb:4f:31:b7:38:13:d0:28:d9:67:5e:74:27:
         65:04:30:b7:a5:d2:e7:a2:9f:d9:fa:89:79:70:17:56:de:f1:
         71:79:26:79:55:a2:06:f7:e9:fa:94:9d:d2:d7:9c:04:70:50:
         2a:6f:94:4e:fd:38:d1:00:cd:30:29:e3:35:84:5c:ed:6f:c7:
         e2:f3:7c:22:95:21:f1:ed:1d:28:28:8b:ea:28:21:dd:dd:71:
         c7:4f:c9:7c:cc:12:72:4f:6f:8d:ea:f0:7c:0a:e8:9a:96:25:
         b0:8a:ab:46:d4:bf:62:e1:9e:71:cb:bb:8d:aa:3a:da:79:92:
         36:70:e2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 16:00:05 2025 by rpki-client