Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
File:                     326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa (raw, json)
Hash identifier:          9upLI7If0gqLxh/f2Tpf9DR9GY5UF3S1t8/R2udoIWM=
Subject key identifier:   9F:F2:2C:CA:7E:72:E2:98:5E:22:47:95:F0:42:9C:EA:5E:0A:E7:F9
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       293EA548F50143B061E02F6F1595EFFFDFA42512
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
Signing time:             Fri 05 Jun 2026 12:04:25 +0000
ROA not before:           Fri 05 Jun 2026 11:59:25 +0000
ROA not after:            Fri 04 Jun 2027 12:04:25 +0000
asID:                     203867
IP address blocks:        2a07:54c1:8400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3e:a5:48:f5:01:43:b0:61:e0:2f:6f:15:95:ef:ff:df:a4:25:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jun  5 11:59:25 2026 GMT
            Not After : Jun  4 12:04:25 2027 GMT
        Subject: CN=9FF22CCA7E72E2985E224795F0429CEA5E0AE7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:3e:d0:3f:b4:97:13:82:6d:5c:2d:4c:b0:
                    81:d7:84:01:23:fd:ce:9b:a9:f8:cf:17:b8:d0:56:
                    4b:26:15:9f:90:8a:f6:ea:3f:78:17:ec:34:4b:14:
                    c2:cf:e7:9f:53:c5:7a:12:a7:96:54:5a:95:d6:b5:
                    b3:e2:dc:a6:6d:96:be:c4:3b:e1:95:3b:ed:49:be:
                    a4:ad:aa:b5:e0:84:e5:0e:b7:35:1a:a6:34:2b:e8:
                    91:4e:b9:7a:73:5f:f7:6c:3b:2a:d7:cb:55:d5:81:
                    28:2f:9b:d7:00:d2:6f:cc:55:d3:a2:8b:61:64:ca:
                    37:29:d3:3d:eb:40:54:c1:e6:5b:c3:7d:eb:e3:e1:
                    f1:69:2a:45:a4:4b:f6:28:0d:d1:bc:56:6c:49:16:
                    51:a7:9f:67:e0:09:d9:a3:b2:24:c7:66:37:2f:40:
                    06:21:f4:e7:1e:3c:73:b7:a7:7f:3a:ff:63:9c:b9:
                    e3:05:1a:63:e0:f0:79:3d:6b:5f:37:56:fd:6e:45:
                    bf:b0:93:c6:26:4d:06:12:bf:81:85:1a:49:86:7f:
                    04:aa:85:ea:fd:0b:3d:0c:fc:2e:56:26:14:4f:63:
                    b0:71:b6:78:61:1f:dc:78:be:4f:42:8b:bd:0d:0b:
                    a8:f1:4e:9b:8c:16:a9:5f:f8:1a:36:7f:ee:dd:f5:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:2C:CA:7E:72:E2:98:5E:22:47:95:F0:42:9C:EA:5E:0A:E7:F9
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         56:4b:4a:cc:dc:1f:9b:02:73:c1:ba:2e:69:c2:91:32:eb:28:
         44:ca:50:fd:16:3e:7c:49:b5:b6:e5:a9:d9:2e:1a:22:f8:b1:
         e2:a4:94:c7:91:e4:81:b8:93:53:62:00:77:48:86:ec:4a:37:
         bf:6b:5c:a0:a9:d0:76:0c:ad:27:e4:db:eb:ac:0d:d0:70:2c:
         ee:ee:0e:93:3a:18:33:91:84:f6:a1:8a:b4:c7:ca:12:8b:3c:
         7e:88:83:ef:e7:e2:bb:9b:e9:21:ff:03:3f:4a:b1:f5:2f:4f:
         db:37:b7:0e:97:ea:d0:c3:a3:21:4e:3e:9d:11:67:7f:c4:06:
         4d:c9:c0:0d:e6:6d:fa:2c:61:65:d4:b6:11:d7:60:2b:8a:32:
         ab:42:59:82:88:2e:d8:83:b6:f6:33:c0:6a:9a:14:db:4f:95:
         35:63:4f:a3:cc:b5:39:ab:fb:75:ca:bd:e4:c8:76:45:5c:09:
         8d:1e:44:18:bc:21:a5:04:79:30:8f:8a:49:c8:ba:2d:6b:78:
         7e:95:7d:6c:27:39:e5:da:5f:6c:30:46:03:9b:76:f4:3e:10:
         74:97:d9:13:8d:ad:d4:c5:90:d5:72:db:ff:87:ff:0d:07:25:
         88:d8:e8:d1:8e:e5:5e:7c:f8:b8:c6:60:02:46:36:ce:a6:62:
         ee:d1:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:59:20 2026 by rpki-client