Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa
File:                     326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier:          TPvAMX2Soc0WTX2J7ZslbOdgiMqK82gp5Vd/WdKEi58=
Subject key identifier:   48:E1:5A:F6:2B:0D:DD:6A:DC:E2:F0:1B:DD:1C:98:2D:CF:5A:26:E5
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       1339A225D14B2DBC7F3EB8515C953A4A013D1E40
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     204857
IP address blocks:        2a07:54c1:8300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:39:a2:25:d1:4b:2d:bc:7f:3e:b8:51:5c:95:3a:4a:01:3d:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=48E15AF62B0DDD6ADCE2F01BDD1C982DCF5A26E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:db:aa:f9:5b:1a:ad:bf:e3:23:c2:13:9f:
                    94:ec:d3:3a:75:4f:d4:ba:b2:24:0a:fe:26:d4:8a:
                    79:a3:26:1b:01:7c:08:24:6f:10:01:2b:12:cd:8d:
                    ed:fc:f0:32:5f:93:f3:7b:ee:ad:3a:bd:9a:3d:31:
                    97:59:21:d9:92:2d:43:a6:57:45:66:34:4a:e1:19:
                    30:b4:0d:d0:eb:f8:f8:71:75:a3:20:0b:16:d0:c0:
                    d6:c2:96:bf:dd:c0:48:3a:18:33:e5:3a:10:4b:a4:
                    e4:2c:9c:b2:03:8f:dd:2c:e4:20:35:f2:ca:ce:dd:
                    57:e4:ef:28:a2:54:f0:d2:f0:e8:b0:e7:a0:80:2b:
                    94:86:cf:fd:f8:70:70:2e:ff:fa:b2:dd:9c:5c:b6:
                    bc:50:36:13:56:60:7a:eb:43:5c:6e:fe:83:42:56:
                    30:16:fb:d9:22:19:20:27:ec:27:d5:a5:98:47:4e:
                    97:1d:a4:de:27:f8:9b:44:6c:47:13:e8:e0:74:ef:
                    ce:75:3b:b8:1b:33:ce:a4:a0:8c:0f:3d:d1:8c:71:
                    b2:72:66:65:b8:85:a3:27:c6:27:e4:fe:30:15:b4:
                    2f:ab:da:02:f9:55:8a:e6:e6:3d:86:c1:f6:ab:22:
                    46:29:e5:7f:98:5a:62:33:ad:d3:77:01:e5:f3:57:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E1:5A:F6:2B:0D:DD:6A:DC:E2:F0:1B:DD:1C:98:2D:CF:5A:26:E5
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:a1:94:6e:ec:05:bb:8e:3d:5f:40:cc:49:1f:39:a9:96:8e:
         22:f7:99:71:24:57:f0:b4:30:d5:35:01:ab:f7:df:0e:f6:bd:
         81:0d:eb:85:7a:b1:a4:be:b6:5a:ed:e6:c1:ef:ad:6c:dd:8c:
         e0:b4:92:d8:3e:7a:1a:c3:8a:a9:d0:4a:df:49:c0:95:20:b2:
         17:41:34:fc:b0:9f:08:f3:49:34:0e:43:c6:1b:c0:0a:9a:7b:
         06:70:18:04:a3:bb:e4:c0:22:b9:76:4c:49:f0:d6:34:c9:08:
         e5:27:a5:02:55:47:93:76:30:95:a2:58:1f:9d:a9:25:70:e4:
         40:b1:f2:bf:c3:91:97:66:77:99:6e:09:90:34:58:c9:10:62:
         94:ad:db:17:1f:46:0f:b2:b2:13:ad:98:3c:bf:c9:ee:e6:fb:
         b5:8b:40:04:cd:83:2d:e1:69:ed:ab:3f:fa:2c:8b:8b:94:60:
         05:63:d5:ba:a7:3a:c9:00:48:44:62:76:d7:aa:f4:9c:de:e2:
         9b:86:c9:81:a0:ac:50:e1:0a:26:af:7f:fa:09:06:38:c9:fd:
         06:50:90:42:d5:e9:c0:e5:0b:c3:a4:5e:e6:12:99:2f:07:80:
         1a:36:62:af:92:48:55:61:48:27:3e:30:64:8f:70:05:70:db:
         eb:8f:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:50:15 2025 by rpki-client