Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203136353039.roa
File:                     326130373a353463313a386333333a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          Xq9/0gDrS3QAHwYe3iqiXI1o+5JC5NOEF9KphKJlNzA=
Subject key identifier:   46:EB:7F:BE:D2:DE:FD:9C:28:57:E0:36:A7:6C:C7:A0:A9:C8:62:06
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       59DC1494DBB48D36C6B798E715EB030969604454
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     16509
IP address blocks:        2a07:54c1:8c33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dc:14:94:db:b4:8d:36:c6:b7:98:e7:15:eb:03:09:69:60:44:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=46EB7FBED2DEFD9C2857E036A76CC7A0A9C86206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:9d:a7:eb:15:58:66:11:aa:e5:3a:2c:57:
                    f4:93:1c:2b:ec:7f:c6:35:f8:14:97:0c:84:75:ba:
                    6d:a0:51:98:fd:5d:f1:fb:cf:47:2d:12:ef:6b:57:
                    f9:73:a2:17:86:57:98:76:48:15:67:b4:05:56:10:
                    68:36:1e:25:c2:c4:7b:53:88:de:83:04:ee:c2:ba:
                    23:19:4c:93:27:32:e9:74:6b:0a:6c:3d:db:eb:74:
                    ff:a7:4e:ad:65:86:c7:fc:e4:7f:7c:f1:05:50:bb:
                    a9:ef:b7:3e:fb:c9:64:ba:29:39:04:95:91:f0:04:
                    37:90:41:98:6f:b8:88:5d:25:06:b4:85:79:07:ba:
                    92:ed:64:9a:1a:f7:24:63:16:03:8e:00:5e:6c:34:
                    34:68:af:02:9a:36:d1:58:ef:9a:9e:7f:c6:29:57:
                    55:d7:10:e4:94:aa:91:21:22:6b:72:d1:59:40:ed:
                    fa:85:f8:a9:e8:07:fb:4f:0e:7d:64:ae:51:3e:6c:
                    7c:82:fa:b0:d4:f3:b9:f7:e0:d2:a9:9a:c3:81:74:
                    c6:2d:fd:8b:8c:af:0b:55:c5:93:83:09:c2:ae:54:
                    ff:bf:f3:cc:85:53:1e:ad:5a:3d:b9:fe:16:8d:ae:
                    05:a8:26:2e:0e:56:3e:3c:b9:40:37:e1:02:e2:d8:
                    15:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EB:7F:BE:D2:DE:FD:9C:28:57:E0:36:A7:6C:C7:A0:A9:C8:62:06
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c33::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:96:74:c8:8e:bb:9a:76:51:1c:38:a6:be:d2:bc:20:1c:2f:
         31:04:20:f8:62:0a:d1:16:57:cd:cb:99:b9:cf:48:ac:30:3e:
         74:da:78:95:59:72:40:44:27:39:89:43:6b:d1:74:2d:f4:ac:
         1e:2d:69:62:24:c3:a3:e3:ab:d7:72:21:2c:f0:7a:cd:96:67:
         91:bd:6c:69:ef:f4:70:c5:4d:4a:35:1a:ed:18:45:22:87:d9:
         08:c4:21:f9:42:10:8f:2c:b6:f2:16:bb:eb:ce:2b:72:7f:79:
         24:d0:34:66:fa:f4:d7:70:c0:48:7c:02:a9:ad:04:6c:17:3b:
         da:1c:58:e0:56:39:e6:71:7f:3a:ef:58:df:fd:ff:52:5b:73:
         c4:03:47:15:fe:cb:8a:4a:44:a7:cd:71:ad:30:21:b8:88:3d:
         93:a6:b4:56:08:11:e6:f3:4a:97:bb:c0:98:f6:9a:aa:16:e7:
         c3:80:72:76:a9:86:f0:d7:c0:b9:aa:5d:9e:20:fb:3f:5c:a6:
         5d:85:51:0a:7f:31:3d:22:85:d1:0f:59:0a:51:b9:2a:57:3f:
         10:5a:18:a6:e4:f1:0a:52:fc:11:48:92:f6:42:8e:30:d4:d1:
         ea:89:83:8a:cd:40:9b:26:5d:eb:91:99:64:78:81:79:b9:9a:
         1d:12:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:34:06 2025 by rpki-client