Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333323a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386333323a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          Q1C8/uj/ZfNyR/pJnj7pPGPurd4WV+fM59ATzAkPi1w=
Subject key identifier:   BC:4A:73:BC:44:C2:E9:9D:EB:01:BA:63:E1:A5:62:9C:28:E0:03:F9
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       5A38CE972975BD36FC7DDE5BAC588C46F2513B15
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333323a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:38:ce:97:29:75:bd:36:fc:7d:de:5b:ac:58:8c:46:f2:51:3b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=BC4A73BC44C2E99DEB01BA63E1A5629C28E003F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:da:97:42:82:4b:f4:20:85:df:1c:d7:3e:
                    81:8b:f0:80:0b:9b:7f:c5:65:11:10:82:b3:f5:f3:
                    06:9c:c3:0d:c0:e3:82:86:e5:08:e8:5c:d4:73:ed:
                    35:2c:2a:77:a1:72:24:84:02:74:3a:28:b4:6a:40:
                    bd:5b:06:90:fe:d7:ac:9c:29:b1:2d:04:d8:9c:ac:
                    87:d0:cd:fc:7e:d5:91:70:6a:48:a5:31:fb:96:96:
                    67:65:bd:88:21:29:fc:41:be:dc:b4:f1:4e:89:fc:
                    53:d0:4f:65:d0:7b:d4:29:ee:12:88:d5:86:11:cc:
                    98:b8:f4:b0:48:78:47:7a:2d:39:83:98:24:8b:ea:
                    f6:28:37:8f:fa:11:79:b3:38:98:48:49:9e:b5:c1:
                    b2:86:46:73:5a:6c:21:c1:bc:a6:3a:3a:a9:6e:7e:
                    53:79:8d:12:7b:cf:43:67:ee:94:0e:72:bb:70:cd:
                    7c:f7:77:4b:5e:90:64:fb:b4:25:a7:88:00:f0:e4:
                    ea:9e:a6:8e:9f:9d:3c:c9:c4:62:0a:d4:06:f1:8f:
                    6d:19:8f:1f:a3:6e:b8:f1:02:da:51:53:d3:6e:73:
                    3e:7d:cc:22:50:8a:6c:cd:14:b2:3d:b5:d4:2b:c5:
                    85:47:5b:53:58:99:a7:09:b9:e3:7a:39:f0:f6:a1:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4A:73:BC:44:C2:E9:9D:EB:01:BA:63:E1:A5:62:9C:28:E0:03:F9
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333323a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c32::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:08:3e:68:51:be:ee:8f:23:a1:4e:8c:10:d6:b9:53:8c:
         90:45:9b:fe:67:e7:23:63:61:21:23:4f:27:07:e2:e1:18:47:
         20:58:73:8d:f9:6d:32:9e:fb:7e:c3:ff:6d:d7:e9:c1:13:57:
         d8:5d:23:ac:29:71:ba:bc:6e:3f:e8:ab:75:80:16:3e:4c:38:
         6b:3e:02:b8:8d:10:a3:0c:e7:13:cc:04:ca:8b:15:8a:a0:82:
         41:6c:58:50:06:ec:cf:50:01:b5:8a:6c:65:dc:c3:74:d8:23:
         31:07:83:02:29:86:db:4a:56:07:c4:86:a2:c4:b8:ea:15:26:
         c1:77:de:74:db:c5:0a:05:6e:68:db:37:ed:3b:d5:59:75:39:
         14:80:74:bd:2c:b1:9c:b2:6a:54:e6:89:ab:9c:ab:d9:1b:3d:
         4a:00:4d:b2:f0:77:ad:6c:4e:11:ad:75:83:1d:a2:fb:b6:b8:
         42:fc:0e:48:8b:80:23:e3:5a:74:e6:8f:90:45:e6:7e:2b:0a:
         6b:cc:da:ab:78:e0:b7:1f:98:1a:e5:d3:ed:b0:fc:e4:3d:5f:
         08:1e:42:49:dc:82:df:46:b5:e0:a9:cc:91:e8:e0:02:c9:89:
         4c:6b:1c:fb:40:da:11:bf:62:17:42:92:3e:b2:8d:37:30:71:
         31:ef:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:39:32 2025 by rpki-client