Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203134363138.roa
File:                     326130373a353463313a386333333a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          6rFwSDMMAJYldOk7OaG4DZBcqZZcGENbET3cVQ2VnRE=
Subject key identifier:   BA:5E:27:1C:BF:63:1E:1E:65:B7:77:20:8A:71:DA:F0:61:87:A5:96
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       21EFA410D2F3C95B30E1C61FDCEAF264AC8B541C
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     14618
IP address blocks:        2a07:54c1:8c33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ef:a4:10:d2:f3:c9:5b:30:e1:c6:1f:dc:ea:f2:64:ac:8b:54:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=BA5E271CBF631E1E65B777208A71DAF06187A596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7a:32:d7:d2:d5:87:a3:4c:2f:3a:4f:bc:9a:
                    da:4c:7b:b3:9c:96:b6:d0:0b:87:0a:a8:43:df:a0:
                    60:c9:79:e8:29:e4:78:23:78:a0:f1:9a:05:62:26:
                    ae:7f:e9:90:e4:4a:6b:bf:0c:a0:4a:99:6e:3e:8b:
                    25:7b:ed:01:30:80:db:a3:7f:26:89:4e:13:96:c6:
                    c0:e7:32:ee:81:76:e7:9f:e0:6c:8c:c2:96:b5:4d:
                    b5:ac:ba:bc:57:29:f4:9c:88:05:ab:ce:b0:95:8b:
                    8a:f3:e7:b3:2f:23:5e:43:4a:3b:52:72:dd:16:cd:
                    38:22:e4:14:c5:fd:c7:23:9d:24:04:0e:25:eb:cd:
                    06:6c:4e:92:1a:fc:c4:96:a0:5f:bf:78:ca:eb:c6:
                    5a:25:7b:8a:27:56:30:e6:37:a0:7a:78:05:2e:75:
                    c7:99:08:6e:18:ca:9f:d4:3b:f3:6c:93:16:6c:3f:
                    53:89:3d:dc:90:1e:d6:91:5a:fb:8e:03:93:6e:85:
                    21:24:59:0c:ae:c1:78:d7:69:87:47:fb:a4:3d:01:
                    40:cc:b7:01:11:fe:30:f2:14:fa:84:48:e4:ef:b4:
                    6f:b5:4a:df:88:66:ce:65:a0:09:d8:cd:8b:82:45:
                    79:cc:96:ab:9a:21:91:04:95:29:c7:4a:63:da:f8:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:27:1C:BF:63:1E:1E:65:B7:77:20:8A:71:DA:F0:61:87:A5:96
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c33::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:b1:32:9b:97:42:e8:b6:b4:24:b6:bd:6c:54:93:ff:80:3f:
         39:8a:89:df:44:fb:37:ec:b8:a2:14:22:a4:9b:2a:39:78:28:
         4a:47:a2:77:d1:ee:88:c1:70:d6:4a:7a:ae:4b:24:87:bd:50:
         78:b2:fd:c4:0d:2a:16:f4:3b:30:ab:31:48:43:a4:55:ac:e9:
         b4:62:58:53:66:7d:00:2b:b2:b9:fb:63:95:6b:1a:ce:aa:25:
         89:e7:61:b6:34:3e:c1:44:51:92:74:b9:e1:9c:86:d2:d6:83:
         d0:85:c1:e2:70:2a:76:82:9e:c0:70:a5:83:75:5b:d7:64:a8:
         f3:24:67:c0:82:f1:49:57:61:24:0b:66:fc:81:38:e6:94:06:
         db:4c:a1:65:ed:0c:ea:02:27:52:9f:d8:c6:c4:7b:b6:55:4f:
         60:ce:51:bf:f9:35:2e:4c:3a:41:7a:74:29:6e:02:b2:ce:b3:
         6b:43:73:17:aa:11:47:56:6f:c3:59:fc:e2:b6:c9:d8:b5:f7:
         8e:72:6d:ff:fc:75:4a:b2:9f:0d:b7:0d:e2:68:00:1a:c3:73:
         3c:24:8d:33:7d:6d:22:81:c0:bd:dd:b9:c7:e3:5a:23:e4:42:
         e9:51:1c:aa:81:a1:21:c9:99:a3:67:e4:b2:ec:58:75:b2:97:
         8f:c0:ce:a0
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUIe+kENLzyVsw4cYf3OryZKyLVBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBFN0YzM0Q5
NzBGNzEyMDAeFw0yNTA3MDQxMTEyMzFaFw0yNjA3MDMxMTE3MzFaMDMxMTAvBgNV
BAMTKEJBNUUyNzFDQkY2MzFFMUU2NUI3NzcyMDhBNzFEQUYwNjE4N0E1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtejLX0tWHo0wvOk+8mtpMe7Oc
lrbQC4cKqEPfoGDJeegp5HgjeKDxmgViJq5/6ZDkSmu/DKBKmW4+iyV77QEwgNuj
fyaJThOWxsDnMu6Bduef4GyMwpa1TbWsurxXKfSciAWrzrCVi4rz57MvI15DSjtS
ct0WzTgi5BTF/ccjnSQEDiXrzQZsTpIa/MSWoF+/eMrrxlole4onVjDmN6B6eAUu
dceZCG4Yyp/UO/NskxZsP1OJPdyQHtaRWvuOA5NuhSEkWQyuwXjXaYdH+6Q9AUDM
twER/jDyFPqESOTvtG+1St+IZs5loAnYzYuCRXnMlquaIZEElSnHSmPa+B5HAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUul4nHL9jHh5lt3cginHa8GGHpZYwHwYDVR0j
BBgwFoAUVYq40eOEwZ4mXDwfQOfzPZcPcSAwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzE3LzU1OEFCOEQxRTM4NEMxOUUyNjVDM0MxRjQwRTdGMzNEOTcwRjcxMjAuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzQvNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBF
N0YzM0Q5NzBGNzEyMC5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4Zp
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTcvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzODYzMzMzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQz
NjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqB1TBjDMwDQYJKoZIhvcNAQELBQADggEBAJCxMpuX
Qui2tCS2vWxUk/+APzmKid9E+zfsuKIUIqSbKjl4KEpHonfR7ojBcNZKeq5LJIe9
UHiy/cQNKhb0OzCrMUhDpFWs6bRiWFNmfQArsrn7Y5VrGs6qJYnnYbY0PsFEUZJ0
ueGchtLWg9CFweJwKnaCnsBwpYN1W9dkqPMkZ8CC8UlXYSQLZvyBOOaUBttMoWXt
DOoCJ1Kf2MbEe7ZVT2DOUb/5NS5MOkF6dCluArLOs2tDcxeqEUdWb8NZ/OK2ydi1
945ybf/8dUqynw23DeJoABrDczwkjTN9bSKBwL3ducfjWiPkQulRHKqBoSHJmaNn
5LLsWHWyl4/AzqA=
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:57:53 2025 by rpki-client