Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386337323a3a2f34382d3438203d3e203136353039.roa
File:                     326130373a353463313a386337323a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          40eC3s4qpkx/WVfVqHHCyze1oecR3SSormgmYEDojHU=
Subject key identifier:   1B:98:98:A5:E3:09:A3:ED:9E:33:A3:AA:50:C9:ED:D7:5B:17:C2:FA
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       2CA0126F870D78BCA6EE402C6EBFF3E0C63ECE38
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386337323a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     16509
IP address blocks:        2a07:54c1:8c72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a0:12:6f:87:0d:78:bc:a6:ee:40:2c:6e:bf:f3:e0:c6:3e:ce:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=1B9898A5E309A3ED9E33A3AA50C9EDD75B17C2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:5f:f0:15:26:78:54:c1:25:45:ef:da:f4:
                    33:96:cf:53:45:68:9e:f8:00:cb:6d:f1:23:6e:e3:
                    78:96:47:85:52:cd:7c:42:0f:a7:bb:5b:c9:98:0d:
                    80:0d:ba:ef:9b:af:bd:6b:da:e0:c7:04:28:d8:a0:
                    65:c5:43:6d:93:59:c9:b6:9c:af:b1:18:52:4b:dd:
                    e1:05:da:78:66:24:76:71:d8:38:a9:f3:d1:ee:00:
                    83:48:50:2f:18:d5:5d:5e:09:f5:07:87:45:82:53:
                    6e:44:26:fa:a6:b3:64:65:ca:c5:a7:1f:d4:6c:25:
                    4e:af:21:87:74:d3:bf:ea:eb:93:06:da:c9:d2:f6:
                    b8:0a:66:81:90:3c:38:5c:36:ca:5b:e9:bf:90:c5:
                    4d:f5:62:cd:21:da:f4:63:26:dd:75:cf:e9:cb:e2:
                    f4:8d:79:00:f7:c6:cd:2c:99:13:cf:3a:db:ec:e8:
                    0c:a8:b1:43:a7:f0:27:9d:d6:a6:28:27:5a:dc:5c:
                    a6:b2:fb:11:c8:b5:40:e6:15:d9:c1:23:7f:e3:b6:
                    f3:fb:db:5c:96:ae:2b:6f:4f:76:8b:57:f1:6b:c6:
                    cb:cc:8a:ea:c7:34:1c:a5:46:82:6b:a2:95:a8:a3:
                    b3:98:66:ea:bd:81:21:37:43:1c:a8:fc:f9:04:33:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:98:98:A5:E3:09:A3:ED:9E:33:A3:AA:50:C9:ED:D7:5B:17:C2:FA
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386337323a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c72::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:70:dc:3d:ad:30:be:96:e3:42:fb:eb:dd:1a:7b:58:8a:b9:
         4a:c4:d9:e3:a0:b3:30:67:f0:d5:90:68:5b:24:bb:aa:7b:1a:
         76:64:7a:3b:62:09:37:c3:77:05:63:d7:86:30:c3:c5:9f:9e:
         04:e1:21:1b:07:46:b0:0e:30:19:25:93:e3:82:6c:e0:34:7b:
         87:6d:88:2a:37:cf:5a:ff:98:6d:94:10:3c:86:ef:16:86:c0:
         1b:cd:3a:98:26:51:00:ef:dc:8e:83:d4:25:01:32:33:13:5a:
         27:b4:46:cc:c2:a6:e0:bc:d4:92:04:8c:9f:ae:21:1b:44:b7:
         7f:48:c9:2c:ab:27:d7:82:38:01:53:eb:61:7f:30:ba:df:c4:
         cc:46:1e:5d:e3:eb:00:0a:b6:f9:12:6f:00:e2:fa:41:6c:85:
         21:03:35:97:8f:0d:81:12:5f:48:85:8f:e7:f6:ba:2d:5f:a0:
         a2:36:a0:9a:4d:e2:50:9c:ac:c4:3c:c0:53:94:bb:7d:c1:48:
         cf:90:cd:fd:82:4e:d5:6b:d0:d2:0f:30:33:0b:be:27:c8:25:
         fd:f9:93:ff:1e:f0:42:59:9e:b8:4f:39:1b:bf:d5:84:f7:58:
         69:e3:92:d6:33:ad:14:52:a2:f9:05:83:81:77:53:76:36:8e:
         65:41:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:34:54 2025 by rpki-client