Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a383830303a3a2f34302d3438203d3e20323134333730.roa
File:                     326130373a353463313a383830303a3a2f34302d3438203d3e20323134333730.roa (raw, json)
Hash identifier:          sj4DG8RPdJGCna3Xc0ArYSrIntfACMtym/FIGwGzQ3w=
Subject key identifier:   D7:01:51:92:41:85:BA:8D:EC:21:56:02:E1:B8:0F:22:FB:A4:2D:7C
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       5D1F3860A4130CE42E6BD30FE5B07BCB9312A656
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383830303a3a2f34302d3438203d3e20323134333730.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     214370
IP address blocks:        2a07:54c1:8800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1f:38:60:a4:13:0c:e4:2e:6b:d3:0f:e5:b0:7b:cb:93:12:a6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=D70151924185BA8DEC215602E1B80F22FBA42D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:32:f3:83:d4:09:60:82:ac:f6:ed:20:44:6e:
                    34:c1:66:fd:e2:6b:cc:0d:ec:ec:30:e4:6a:42:43:
                    3b:5d:46:69:c4:2c:80:e7:ae:d7:02:ff:5c:2c:e0:
                    7a:7c:60:33:3e:fb:66:59:ff:8f:66:2b:0c:f2:02:
                    95:98:59:33:c4:2d:8c:bf:e5:1f:b2:6d:c7:57:47:
                    5c:5b:de:f7:50:8b:70:2b:f8:e4:b2:39:f8:ed:0f:
                    a1:e7:7c:17:74:d6:55:2a:25:87:97:06:64:27:84:
                    51:9c:7f:fb:14:00:b0:3d:2c:d8:07:83:88:87:56:
                    1d:94:51:c3:e2:61:2f:9e:43:ad:a5:ac:30:9f:83:
                    18:29:03:35:38:b6:60:4e:d0:e9:30:5f:6b:7d:40:
                    4c:25:c1:3b:dd:fe:4e:d5:ea:a0:77:67:b3:9c:f0:
                    11:82:ca:7d:03:be:fe:8c:67:19:8c:ee:f8:0c:b8:
                    40:47:55:a1:04:48:fe:85:1a:db:7b:06:6f:8a:9d:
                    8e:01:f7:3e:7a:b9:e8:b5:da:3d:d4:ad:b4:28:03:
                    cc:04:4c:f6:1d:5a:0c:1f:64:b3:83:d0:e7:9a:21:
                    17:68:01:ab:b2:a4:72:d2:2a:5b:1a:e1:2e:dd:c8:
                    bc:e2:73:50:83:99:51:ad:2c:2f:f0:4f:4b:a2:4b:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:01:51:92:41:85:BA:8D:EC:21:56:02:E1:B8:0F:22:FB:A4:2D:7C
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383830303a3a2f34302d3438203d3e20323134333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:cd:b2:92:03:a8:8e:b6:24:fc:08:75:c7:1d:03:4f:3a:ae:
         fb:e0:40:69:f8:fb:13:91:6f:2b:3d:88:84:36:aa:84:43:eb:
         b1:25:19:f4:9a:02:94:60:69:2d:6d:45:52:04:7d:57:c9:0b:
         09:22:73:3b:90:39:c0:e6:df:e1:a2:aa:f4:6c:8a:26:ee:ac:
         a7:fa:d2:d5:d8:ea:ab:18:b0:7e:d6:2a:f5:44:54:df:c3:7c:
         64:9e:ed:86:cd:a7:60:01:d0:08:53:08:1c:af:cb:38:53:59:
         dc:a2:50:13:a8:44:16:7c:7c:db:e0:29:93:56:4d:0b:b2:ce:
         d6:a2:cf:5c:d8:a4:db:71:80:89:41:d4:49:11:6b:1c:c4:6f:
         b3:14:a6:58:8e:93:b8:8a:6b:a4:b9:2e:07:58:e5:12:18:82:
         22:71:de:ba:40:42:d3:1e:c2:56:e8:9c:73:15:fd:9c:20:f4:
         a5:04:d1:03:b0:51:d0:20:25:b3:d1:5c:35:60:45:47:6c:7a:
         76:00:68:ee:d6:c6:cd:4b:aa:46:c6:28:e0:99:26:04:d6:1e:
         61:84:c6:ea:91:c4:0e:c4:4a:74:5a:25:b6:ac:a5:4b:28:c9:
         46:ac:69:c2:6b:86:73:98:77:75:c9:15:ca:44:bf:b7:73:0f:
         9e:7c:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 16:08:17 2025 by rpki-client