Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386130303a3a2f34302d3438203d3e20313937343432.roa
File:                     326130373a353463313a386130303a3a2f34302d3438203d3e20313937343432.roa (raw, json)
Hash identifier:          vulqgsjvrUM1vpw9W/hkGnwleCUe3FiJJg4pJliZWRw=
Subject key identifier:   77:4A:74:DD:2D:6C:3B:8E:88:15:CD:28:CD:C4:5D:E4:8D:C0:06:60
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       1C3B2B6AFDB7F0221D9C59626FB67993E3364A72
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386130303a3a2f34302d3438203d3e20313937343432.roa
Signing time:             Sun 24 May 2026 17:21:40 +0000
ROA not before:           Sun 24 May 2026 17:16:40 +0000
ROA not after:            Sun 23 May 2027 17:21:40 +0000
asID:                     197442
IP address blocks:        2a07:54c1:8a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3b:2b:6a:fd:b7:f0:22:1d:9c:59:62:6f:b6:79:93:e3:36:4a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: May 24 17:16:40 2026 GMT
            Not After : May 23 17:21:40 2027 GMT
        Subject: CN=774A74DD2D6C3B8E8815CD28CDC45DE48DC00660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:09:79:9c:0c:53:a5:67:cf:18:48:f1:c9:
                    d2:a4:49:ff:1e:5e:1f:a7:fb:66:e0:e7:c9:25:6f:
                    68:14:ec:4f:3e:7e:ee:fa:7a:fe:89:b1:00:c9:cf:
                    26:5c:67:b7:a7:fd:a3:b1:6c:af:67:14:fa:11:82:
                    35:bb:47:4e:5f:3c:aa:42:f2:d4:bc:99:e3:6a:89:
                    5b:af:0c:c6:73:71:38:53:1a:38:1c:b9:91:f6:53:
                    86:be:7a:41:25:71:9b:2c:5a:cf:bc:ec:63:12:32:
                    0c:2b:e9:ca:4e:5d:8f:bd:c8:9f:5b:3f:41:a6:ec:
                    33:23:f4:d7:52:14:36:5c:20:43:60:a6:4b:cc:c9:
                    a4:8e:eb:f1:c8:73:67:10:51:45:8d:ac:6f:87:3f:
                    bb:b2:c4:89:b2:c8:a5:8c:5c:43:5a:d8:ef:f8:d8:
                    62:41:6c:42:58:20:7d:74:c0:24:a7:18:c3:53:48:
                    28:95:1f:14:55:7d:29:bb:8b:1f:2a:51:62:ee:10:
                    52:b3:22:6e:00:98:03:ca:b6:27:bb:52:d0:7d:eb:
                    b0:be:c5:b6:b9:84:5d:fe:26:f7:fc:a0:ff:b1:81:
                    1b:a4:8a:79:a5:f0:9e:91:b9:90:38:68:8d:d3:50:
                    50:31:05:3d:4f:3f:c1:ea:da:d6:3f:c0:b7:99:6e:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4A:74:DD:2D:6C:3B:8E:88:15:CD:28:CD:C4:5D:E4:8D:C0:06:60
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386130303a3a2f34302d3438203d3e20313937343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:cd:95:85:9e:1e:2a:2c:83:ef:6d:af:4b:b0:a4:0d:81:22:
         45:b3:b8:af:90:89:97:e4:41:4a:3e:da:fe:84:47:90:ef:d5:
         db:98:29:1b:c2:44:7e:6d:29:cf:a2:0e:84:cc:a6:8f:7b:c9:
         39:79:81:5d:e0:67:bb:26:43:ba:11:32:84:47:a6:15:74:61:
         f0:64:ea:6c:a1:c1:84:98:36:78:2e:f2:7e:9e:07:c9:15:2a:
         f3:5d:b2:72:ae:40:b0:9e:d1:67:0e:ac:ab:23:a0:a0:24:7c:
         fb:39:7a:cd:40:5c:d5:4c:f3:a1:57:9e:bc:81:87:eb:eb:71:
         a2:7b:8d:e1:12:bb:d8:10:02:32:a5:96:a9:5b:a6:3f:d1:cc:
         22:6a:25:6e:26:ca:40:e3:f2:9e:78:83:c2:07:4b:1c:da:a4:
         46:7d:ca:37:02:3b:9d:ce:0c:1b:9c:26:1e:3a:0f:24:1f:5f:
         af:ee:e7:9f:53:4a:33:e8:5c:10:2a:f5:af:c0:09:43:37:17:
         81:36:4e:d8:d1:2c:b6:fb:45:d2:3d:6d:a7:4e:f1:de:be:20:
         64:95:33:fd:ba:03:b4:2d:f8:54:d4:fe:4e:e5:97:72:e4:21:
         a6:b9:69:1d:8d:4f:ca:62:9b:3c:6f:c3:c3:97:2a:01:f7:97:
         3d:f4:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:53:54 2026 by rpki-client