Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a383930303a3a2f34302d3438203d3e20323131373433.roa
File:                     326130373a353463313a383930303a3a2f34302d3438203d3e20323131373433.roa (raw, json)
Hash identifier:          KawNhveyJZOHeH9KWHw+ksy/OTfA8rOdNjNXa7N85ms=
Subject key identifier:   D3:A6:4A:6C:01:84:4A:DF:B1:F0:62:A4:93:2B:D8:99:A1:FE:6D:46
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       76857EF2B7B36AFE30068638FCCFB0983CF45E0B
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383930303a3a2f34302d3438203d3e20323131373433.roa
Signing time:             Mon 28 Jul 2025 13:45:03 +0000
ROA not before:           Mon 28 Jul 2025 13:40:03 +0000
ROA not after:            Mon 27 Jul 2026 13:45:03 +0000
asID:                     211743
IP address blocks:        2a07:54c1:8900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 10:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:85:7e:f2:b7:b3:6a:fe:30:06:86:38:fc:cf:b0:98:3c:f4:5e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul 28 13:40:03 2025 GMT
            Not After : Jul 27 13:45:03 2026 GMT
        Subject: CN=D3A64A6C01844ADFB1F062A4932BD899A1FE6D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:b6:fb:bc:19:c1:8f:ce:83:72:11:df:70:
                    cb:3f:c1:28:9f:ab:6c:a1:6c:61:20:48:fd:e9:84:
                    05:64:05:d7:75:75:50:ac:f2:a1:e5:b5:a9:de:74:
                    59:55:d5:0f:51:c4:01:e6:38:b5:c5:73:5d:74:af:
                    76:71:59:b4:3e:a0:a1:4d:15:ec:f3:4a:b7:b4:b4:
                    a6:11:10:23:54:4a:36:45:49:d3:7e:3b:4b:59:3e:
                    36:32:44:e8:a6:a7:5d:cd:4b:ae:83:d9:61:0a:1b:
                    de:35:bd:dc:0e:0f:05:1d:54:fb:ca:e4:94:dc:de:
                    10:a9:77:70:d1:71:ee:62:9d:51:30:33:d7:03:7a:
                    0c:cb:48:fa:a3:64:79:e8:43:b1:98:d9:b8:b6:a7:
                    2f:44:fc:bd:85:1c:d1:e4:d3:00:5c:84:3e:71:ac:
                    89:74:4e:19:98:44:b8:a6:0e:a0:4a:6a:95:d9:98:
                    e9:8c:84:0a:2a:ec:0e:6a:0d:56:9c:95:bc:76:2a:
                    1a:77:85:2a:6a:e8:63:90:b1:9b:35:33:05:16:1c:
                    9e:97:5b:3f:f3:24:d9:86:a0:aa:91:4a:82:f2:ed:
                    1f:df:e5:e1:0e:2d:9e:aa:5c:de:db:32:75:03:45:
                    f2:2c:df:dc:0c:e9:6a:55:b7:e4:36:b8:36:e0:38:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A6:4A:6C:01:84:4A:DF:B1:F0:62:A4:93:2B:D8:99:A1:FE:6D:46
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a383930303a3a2f34302d3438203d3e20323131373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:24:b2:9b:19:9d:4e:aa:df:c5:d9:3d:7e:49:8a:7c:4d:a8:
         ee:6e:e1:eb:e4:cd:f0:f9:f0:0a:1a:81:02:09:8b:d8:0f:25:
         65:5b:96:46:cb:a2:56:f2:ee:e0:14:c4:0a:9a:fc:4b:2d:10:
         6e:0d:da:f3:e3:d8:e1:6b:e2:a3:76:5a:84:03:9a:b8:7d:c8:
         f8:8c:c3:33:e6:e6:7d:81:c8:8a:19:62:34:53:19:75:2a:12:
         2c:0e:57:25:8b:91:fc:3e:32:f3:57:ff:aa:e9:27:59:0f:29:
         59:fe:53:d6:c0:17:b4:d2:42:0d:ea:ab:e5:ce:63:52:7a:66:
         27:c7:98:c3:aa:cf:c0:71:8b:c1:2e:4b:94:21:99:e8:1d:1f:
         d9:13:86:8c:2a:88:e7:f5:8c:ed:25:1f:66:57:94:1c:04:38:
         8b:79:d6:12:e1:95:84:2b:fc:2b:65:3c:9b:ca:fe:fd:ce:d9:
         70:8d:d3:dd:f1:0f:d8:ef:59:1e:d1:9c:ce:98:be:7f:52:70:
         52:a6:1a:52:49:44:e3:24:75:c6:48:ae:55:d4:aa:c3:66:4b:
         84:1c:e1:04:6e:d2:31:3e:04:d3:e6:28:f6:96:c2:44:13:fd:
         f9:c0:0f:79:e1:89:15:a7:3a:12:81:56:72:8a:c9:99:b9:ec:
         f3:6f:6f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:37:54 2025 by rpki-client