Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
File:                     326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa (raw, json)
Hash identifier:          UMLR/zI6qEvXXGwxmYntfdVhfhVMAC05+AjWob9uhNk=
Subject key identifier:   52:3E:D0:D5:15:D4:D8:7F:79:87:10:84:99:56:E2:8A:19:D4:35:01
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       324577AB934A56A4AEED8C2C093E19A2ABC02627
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     203867
IP address blocks:        2a07:54c1:8400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:45:77:ab:93:4a:56:a4:ae:ed:8c:2c:09:3e:19:a2:ab:c0:26:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=523ED0D515D4D87F798710849956E28A19D43501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:03:4b:8c:3b:04:ce:08:c2:d6:f5:cd:77:
                    02:f7:47:54:0c:93:50:aa:d7:79:b8:2e:c5:27:7d:
                    80:37:dc:14:ca:5d:ed:66:43:ec:20:e9:45:34:34:
                    0f:e6:b6:ae:29:b3:28:d3:cf:04:0a:93:b0:1e:c9:
                    46:5c:9f:37:3b:b4:1d:a8:17:3c:0a:db:cd:8f:04:
                    d0:46:7d:08:7c:9f:e8:40:aa:fe:f6:c5:8e:ed:62:
                    f5:a8:0e:03:6a:9c:b9:94:8c:1e:d2:ef:29:4a:7d:
                    54:73:b2:53:42:d8:bf:74:70:9f:d8:4b:8c:02:9f:
                    3a:65:5d:35:86:a5:5b:11:15:3b:81:d9:7b:e8:d1:
                    ab:1e:4d:ce:96:25:88:61:f4:d3:53:3d:14:e9:b4:
                    04:ba:fd:5a:1a:21:31:78:b2:aa:48:e7:b0:66:b3:
                    d8:74:83:fa:6f:9a:9f:ce:c7:da:3f:75:80:00:9b:
                    b8:1a:64:f1:7f:6c:4d:43:c2:ce:da:c9:ca:77:54:
                    2d:2b:c2:7d:ae:61:66:d8:b4:8c:fd:b4:d8:56:c1:
                    d1:c3:13:03:b0:a5:4e:04:37:c8:fe:bf:7e:21:f5:
                    dd:11:50:1d:bd:f8:ad:06:06:5c:14:34:41:d1:70:
                    b1:50:bd:bc:de:c5:57:86:f6:0b:7f:97:ff:86:a4:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3E:D0:D5:15:D4:D8:7F:79:87:10:84:99:56:E2:8A:19:D4:35:01
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         1a:30:41:3a:43:59:2f:ea:25:25:c4:8c:a0:67:34:27:7e:71:
         31:af:0f:51:63:77:cc:e3:07:30:c0:d2:74:be:8b:1e:f8:7e:
         02:60:64:f7:5a:dd:b1:6c:82:59:5a:af:7c:91:5b:6a:33:3b:
         7b:c7:b2:45:73:0e:32:f8:d2:72:b0:ed:df:a5:2f:5e:72:f4:
         9d:64:67:7c:ad:3b:6e:6f:c7:2c:a9:64:c1:b2:36:8f:f8:2a:
         59:60:d4:83:c6:f9:a5:12:04:bb:a5:a1:ff:e3:b1:29:4a:a3:
         df:db:a6:5d:9b:63:8c:1a:41:fe:ae:c5:99:73:d9:78:75:78:
         59:12:a0:ac:8d:1c:96:8a:d5:51:39:e9:85:73:9d:77:0c:74:
         e4:8e:68:95:38:d0:c0:b0:31:31:89:c6:23:2c:fc:77:d0:4c:
         21:b9:95:b5:d2:09:16:51:c1:b8:ad:08:1d:dd:26:76:c3:82:
         bd:60:32:c2:2f:31:d5:86:06:ba:11:60:e7:88:1f:3e:94:31:
         13:63:29:ca:29:16:d2:91:5a:f7:b8:dc:f5:78:d1:ce:7c:c4:
         74:21:26:93:0e:77:b9:9d:38:93:d1:a8:4c:8a:2d:96:f5:b1:
         1e:0b:1f:ff:03:a3:71:1f:6c:39:3c:cb:e8:14:14:f4:ee:94:
         02:58:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:42:16 2025 by rpki-client