Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa
File:                     326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier:          nf/QHq8ZaDFXPzA8yBO9vnJdeE/7IBd6eIIEipspXQ4=
Subject key identifier:   DF:5A:7B:4D:A6:30:FB:BC:68:2E:7C:C4:5B:CB:C4:26:0D:8A:3B:44
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       2DBC4A4C4A08EA5B66D56B4328E973F89AD1CD52
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bc:4a:4c:4a:08:ea:5b:66:d5:6b:43:28:e9:73:f8:9a:d1:cd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=DF5A7B4DA630FBBC682E7CC45BCBC4260D8A3B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:3d:78:4a:fd:33:53:be:6b:84:b2:23:70:
                    93:65:72:5a:c1:01:cf:e5:21:dd:eb:cc:34:23:a5:
                    ab:28:9e:5c:17:ac:ff:a7:1d:f9:2c:6d:0b:f4:49:
                    18:a1:c2:c0:7c:b8:1f:47:80:d6:f0:a0:f7:ac:23:
                    f4:59:a7:be:a1:25:8c:86:27:70:a5:1e:81:fb:bb:
                    b0:4f:cd:4f:bd:b0:66:cf:96:8d:db:1c:29:93:f9:
                    c9:05:76:34:2d:3e:a2:de:c9:3d:2b:82:c2:0a:e6:
                    5f:06:06:76:86:09:50:3d:cb:72:d2:f7:1f:ef:13:
                    a0:99:3c:31:25:ae:dc:50:73:50:7d:48:c1:73:57:
                    fd:c9:16:0c:fd:70:26:3b:5a:f4:7f:16:82:25:39:
                    8e:d1:0e:fc:e9:8e:0a:b0:ea:ee:d0:e7:8a:6d:c9:
                    02:86:a7:95:c4:78:d9:6d:5c:73:b9:cf:30:92:bc:
                    e3:d8:92:04:d2:b1:f7:f0:bc:ef:02:47:aa:5e:a8:
                    49:58:84:82:ba:00:93:14:96:db:b2:2d:fb:a5:04:
                    3c:79:29:48:a6:97:e6:25:10:17:73:60:db:68:d2:
                    e5:4d:a7:4f:12:a8:c7:4e:85:58:7c:4a:ed:00:37:
                    9a:dd:23:a9:45:a8:72:4a:68:03:0b:2f:80:78:fd:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5A:7B:4D:A6:30:FB:BC:68:2E:7C:C4:5B:CB:C4:26:0D:8A:3B:44
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:01:f9:13:ed:a3:5d:bd:f7:61:d7:4b:45:0e:bb:32:34:
         3b:4f:0a:02:23:63:b6:ee:b6:bc:fa:e5:50:9a:30:5d:1c:50:
         26:91:ed:ee:02:1b:f8:87:ee:04:f1:39:37:35:6d:d2:1e:bf:
         3d:84:c7:aa:7a:b9:da:cb:1c:e9:4d:60:f8:bf:d6:34:fd:12:
         fb:b3:1e:d2:13:07:56:22:9b:71:5e:bb:05:a3:04:a4:aa:91:
         4c:1d:ac:a5:2a:a2:35:01:84:ef:a5:95:a7:0c:de:cb:28:b8:
         66:d8:8c:57:f7:f5:5e:87:13:21:3c:ef:31:33:f3:d8:6d:49:
         80:9f:e3:ae:1e:25:ef:07:88:25:b0:ef:b0:17:8a:b4:e3:ee:
         0a:4d:c7:97:76:70:5e:66:75:97:a5:cc:e6:f3:ac:51:fd:f1:
         ec:20:db:b7:1e:78:cc:a5:9b:ea:ad:6e:f5:27:fd:d6:60:a5:
         4e:dd:77:01:ca:05:67:73:b5:4d:0f:f7:4d:d8:aa:87:a9:b1:
         5e:9e:e8:ee:65:08:ba:56:98:ca:6c:44:8a:b8:eb:7f:17:b2:
         4a:c3:68:29:62:75:46:6f:50:6e:9a:24:b6:84:de:b8:d0:6e:
         ab:86:50:42:67:d1:14:78:a9:7b:f5:bc:f9:7a:48:64:2c:0e:
         86:ab:62:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:26:09 2025 by rpki-client