Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a383930303a3a2f34302d3438203d3e20323131373433.roa
File:                     326130373a353463313a383930303a3a2f34302d3438203d3e20323131373433.roa (raw, json)
Hash identifier:          6rO7CoXQRAqiHZGiB6hSn/f5vx6Eb0UkQNAxxk1t5dU=
Subject key identifier:   1E:7F:13:E6:95:2D:F4:11:9F:5F:EA:CF:1C:A2:46:7B:61:55:06:51
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       0B5B58F6451D6BB61A180D48D7ADA6B6AB1B48C5
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383930303a3a2f34302d3438203d3e20323131373433.roa
Signing time:             Mon 29 Jun 2026 14:04:26 +0000
ROA not before:           Mon 29 Jun 2026 13:59:26 +0000
ROA not after:            Mon 28 Jun 2027 14:04:26 +0000
asID:                     211743
IP address blocks:        2a07:54c1:8900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5b:58:f6:45:1d:6b:b6:1a:18:0d:48:d7:ad:a6:b6:ab:1b:48:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jun 29 13:59:26 2026 GMT
            Not After : Jun 28 14:04:26 2027 GMT
        Subject: CN=1E7F13E6952DF4119F5FEACF1CA2467B61550651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:e6:5d:28:37:94:91:2a:30:74:77:2d:1e:
                    98:d3:9f:34:38:b5:b8:cc:86:89:c4:4d:4e:2c:ea:
                    36:32:a5:53:d2:01:5a:38:6b:c5:23:7b:b4:a7:c7:
                    d5:64:73:dd:40:6b:e3:87:ad:9d:c3:8c:bb:ba:19:
                    9d:9f:51:67:00:41:e6:65:8e:5c:8d:9b:3b:23:9d:
                    cf:99:d9:dd:b9:50:ff:4c:d0:81:ff:b3:5e:2d:d5:
                    7b:a1:e7:b1:3f:a0:b9:05:66:c3:79:81:b7:44:09:
                    5a:0f:05:f6:4e:53:16:0e:9e:0a:bf:77:2b:0c:3a:
                    4d:8c:60:10:43:76:54:ed:c5:ac:a9:7e:f2:44:8f:
                    51:40:04:ab:24:3f:ee:bd:86:fc:e6:f2:83:06:78:
                    fa:80:70:2c:05:d3:ba:5e:4e:c4:f7:56:cd:ce:c7:
                    97:33:9b:34:61:a5:52:7d:e2:74:77:27:33:d8:89:
                    ce:83:c1:48:65:2d:13:55:aa:6b:8c:a8:36:46:d9:
                    df:bd:5a:24:9f:8c:fc:51:9e:db:0f:35:e9:91:b3:
                    47:9f:6a:7c:a4:d1:69:73:01:4c:08:5d:68:73:f9:
                    19:f1:39:fb:ac:09:dc:64:03:77:7e:c1:60:ee:b9:
                    98:7e:70:02:3b:4d:d2:0e:1f:5c:6f:bf:f4:88:6b:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7F:13:E6:95:2D:F4:11:9F:5F:EA:CF:1C:A2:46:7B:61:55:06:51
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383930303a3a2f34302d3438203d3e20323131373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:13:ac:3c:a1:e7:a4:46:ca:97:c3:d9:97:63:ce:9d:a6:78:
         ed:6c:8d:6d:73:86:14:fa:b9:67:59:17:8d:78:e8:bc:8b:51:
         5c:05:f5:9d:c6:cc:32:99:3f:5f:7b:66:49:00:20:a8:bd:b2:
         3d:73:a9:05:69:20:f1:23:69:58:0b:bf:ba:9e:4c:64:b8:88:
         2b:a5:01:bc:bf:ee:df:c4:fe:4b:ed:6b:3c:db:8b:fc:f9:c1:
         77:48:10:02:b7:3a:90:17:91:6c:6e:6c:8b:f1:9a:10:72:66:
         7e:37:40:52:73:8f:30:4f:b4:a2:52:41:75:15:a9:a5:61:0c:
         ef:97:d6:5e:81:44:b2:4b:31:e3:c4:8c:81:ba:f4:90:ff:49:
         17:84:d8:59:54:a2:d4:ef:74:16:a0:3a:55:49:66:5e:33:d8:
         b0:1c:ac:e7:c4:61:ae:e1:65:06:f1:a1:78:3f:bf:68:c8:e1:
         ba:f2:8c:ec:64:43:93:58:65:f2:6b:c2:76:f9:cd:58:54:0d:
         e2:b0:c7:52:70:8f:a6:9a:90:bf:74:6f:bb:50:f1:75:0b:fc:
         9d:a4:fd:39:b1:10:0c:66:ab:85:ea:ab:7f:d2:46:b5:18:62:
         77:64:ea:cc:c9:57:15:73:82:79:3f:50:85:53:6f:09:3b:2d:
         ca:c6:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:42:30 2026 by rpki-client