Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          /jTVn7NHSpToMhA+57BBQ08lrAktjdi3qq7b78B3BFo=
Subject key identifier:   17:AE:22:D4:C1:FC:B4:34:00:11:2B:6D:1A:B8:4E:72:04:B8:0A:86
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       258BDCC15F5F6E163CFFF6E64B3E3EA47DB2CBFC
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 05 Jun 2026 12:04:25 +0000
ROA not before:           Fri 05 Jun 2026 11:59:25 +0000
ROA not after:            Fri 04 Jun 2027 12:04:25 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8b:dc:c1:5f:5f:6e:16:3c:ff:f6:e6:4b:3e:3e:a4:7d:b2:cb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jun  5 11:59:25 2026 GMT
            Not After : Jun  4 12:04:25 2027 GMT
        Subject: CN=17AE22D4C1FCB43400112B6D1AB84E7204B80A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:d6:fe:8e:1d:d9:7c:ee:cc:bd:89:34:38:
                    18:44:34:7e:bb:27:7e:24:7f:45:9b:31:d8:52:b3:
                    ca:bf:49:55:4d:89:04:0d:41:fa:d8:a5:cc:31:2e:
                    08:1e:7a:76:b2:1d:99:25:65:35:3c:6d:4f:2f:a1:
                    c8:1b:ee:43:cd:58:b6:27:87:ac:c5:50:3a:85:c7:
                    3b:82:b8:78:37:e0:7f:fa:63:95:d2:02:13:ac:e1:
                    21:81:80:00:62:f6:0b:26:27:cd:b9:b5:41:a7:50:
                    35:83:be:1c:20:8a:bb:a2:e2:ec:91:d5:2b:25:d0:
                    17:06:28:01:fc:9f:f0:c1:df:29:56:5c:9d:1a:00:
                    00:d7:7e:38:46:5e:ec:c5:0c:e4:98:d9:ce:a7:4a:
                    e7:43:48:0c:76:ea:65:23:85:66:d8:bd:de:79:d4:
                    63:c1:18:43:56:0c:86:47:07:e9:c9:89:8c:90:d8:
                    d5:16:61:10:de:1a:6e:44:60:6e:17:d1:ce:eb:11:
                    00:08:cf:fd:34:80:d1:13:12:00:01:4d:31:d1:1d:
                    a4:d4:a2:2f:a4:51:00:67:72:16:12:8a:6d:97:43:
                    bc:98:c2:18:b8:43:5c:91:d0:28:a5:b2:55:83:ed:
                    b7:fe:03:c5:a3:ef:57:90:53:22:44:db:4e:b8:87:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AE:22:D4:C1:FC:B4:34:00:11:2B:6D:1A:B8:4E:72:04:B8:0A:86
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c33::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:73:a9:e2:9b:af:dd:7a:45:13:29:4c:60:6c:7c:f6:20:69:
         2b:66:f4:29:40:f2:c5:c0:e0:74:4c:fc:de:2c:70:30:1a:cf:
         28:04:f9:7f:ec:82:77:6b:80:f0:c4:3c:1d:c8:aa:fe:16:c0:
         06:7a:c1:98:c2:69:2f:83:48:15:40:6a:81:7e:89:1b:6f:01:
         0c:18:d3:3e:33:84:ee:ce:f7:55:dc:73:60:a2:94:2e:55:6c:
         bb:75:9a:56:0a:20:cb:db:28:f0:7a:7b:e9:ac:11:bd:e0:58:
         8d:6d:cf:d1:93:4e:72:71:83:fc:f6:1a:7e:e3:4a:14:c6:28:
         47:47:8e:e9:fc:7c:21:70:4d:d9:0b:2f:48:fb:24:83:5f:61:
         ac:03:f9:ff:df:a7:0e:ff:be:94:e3:66:aa:f7:35:89:29:13:
         fa:a2:46:89:7b:be:e4:74:e7:f7:4d:d5:4a:b6:1f:b5:cf:2b:
         4b:c8:59:11:82:4e:ec:88:ed:40:c6:69:45:94:6c:23:f6:5b:
         dd:71:60:c5:f9:7a:91:58:d4:42:52:d6:b9:36:90:b8:f8:07:
         19:1c:84:8e:c1:21:44:be:13:54:60:a4:58:c4:bd:af:f6:1e:
         96:ff:5c:b5:4f:a9:46:92:f6:aa:37:c3:f0:8a:9f:58:cc:c8:
         9d:d7:0a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:59:20 2026 by rpki-client