Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386337323a3a2f34382d3438203d3e203134363138.roa
File:                     326130373a353463313a386337323a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          UCe9nXhtrc9BKX2RZjanQjtv89P0CpRmlMmjK7VoOnY=
Subject key identifier:   9E:43:4A:FF:58:78:0E:74:C9:6C:40:B4:F1:8F:C4:B4:C7:E8:2A:5B
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       5F5A7892C6ECCC8911F9657AD9035759BDFBFFD9
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386337323a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     14618
IP address blocks:        2a07:54c1:8c72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5a:78:92:c6:ec:cc:89:11:f9:65:7a:d9:03:57:59:bd:fb:ff:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=9E434AFF58780E74C96C40B4F18FC4B4C7E82A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:24:f1:0b:89:24:85:1a:96:94:ec:30:fe:
                    0f:78:33:43:54:dd:9f:7c:39:b5:ed:dd:6d:a3:09:
                    66:6c:d0:18:63:5d:68:e0:d2:95:80:01:f4:a3:48:
                    4d:4a:b0:f5:2f:c2:22:45:39:04:8d:fd:cb:bd:e4:
                    e5:8b:f7:09:f4:5e:48:a9:9a:17:64:82:1c:ce:ad:
                    71:16:24:ee:bb:5e:f9:d2:af:e3:4d:b1:4b:63:44:
                    de:10:fa:e3:9b:b0:8d:ee:c1:7b:04:46:fd:2a:c1:
                    5a:75:a8:14:52:ad:73:dd:24:f8:de:be:06:81:4f:
                    2b:b5:74:0a:be:b9:99:fc:1c:d4:6b:69:21:5d:9d:
                    25:3d:f5:60:d6:b3:eb:48:d3:9d:c4:96:c3:15:c4:
                    43:f6:d4:8f:de:ad:f5:ae:dc:69:53:e0:01:25:e6:
                    90:06:d2:8b:0c:a2:1f:0a:14:f5:90:78:ee:63:ce:
                    16:c3:dd:bb:c9:d1:16:fd:9a:17:b3:99:94:74:1b:
                    23:bf:50:a5:e9:33:91:bd:27:81:a8:7b:ef:f5:cd:
                    cc:c6:28:2b:e4:c9:47:8b:f8:10:a2:d6:77:4e:d6:
                    4b:f9:6f:98:e5:f6:d4:d6:5f:e0:e0:8a:b5:54:ca:
                    91:44:fc:cd:89:d1:5e:f9:9e:d4:24:31:0a:37:4d:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:43:4A:FF:58:78:0E:74:C9:6C:40:B4:F1:8F:C4:B4:C7:E8:2A:5B
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386337323a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c72::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:39:de:0f:d8:1c:62:cb:54:03:8f:4f:c5:76:30:2c:9c:a5:
         4a:51:2a:d1:d1:61:10:54:61:98:4d:c8:06:98:e0:76:ef:5e:
         13:ba:73:58:a9:68:22:09:b9:5b:5c:09:ad:55:d8:be:17:22:
         8c:a7:04:25:36:83:b9:24:89:1a:00:ea:95:3f:93:2b:d6:04:
         e7:bd:68:a0:07:20:67:70:c9:03:62:13:2b:1a:54:9c:90:64:
         d6:1d:6e:b7:cf:01:75:cc:af:b0:37:71:dd:82:f9:47:7b:ba:
         42:87:8e:08:33:be:ee:6e:f9:16:fa:37:96:50:15:dc:3f:d8:
         c3:30:db:1a:e9:87:64:31:b1:8a:26:5a:5a:b6:a8:88:9f:3c:
         f6:5b:57:34:3d:04:2c:32:19:19:2b:52:a0:8b:d3:3c:8e:5d:
         1a:7d:50:1b:a6:64:7f:ae:55:c4:e1:7c:4c:b9:ac:4a:6a:3e:
         fe:99:b4:a5:7c:51:20:bb:16:01:8a:ca:b4:e8:4f:24:70:75:
         c8:92:9c:ea:2e:a8:4b:af:60:97:8a:ca:2d:d6:27:b8:35:a3:
         c9:ef:c6:82:4c:35:9d:88:df:f6:82:01:ba:b6:1f:07:78:bd:
         a9:65:26:b2:fd:c5:03:ca:fb:07:b2:79:b4:fd:65:55:e0:70:
         8f:72:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:59:04 2025 by rpki-client