Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa
File:                     326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          Ouo4XcKdExB3hXEePVcM0gx2V7lDgmOMZAnB+dgDzRQ=
Subject key identifier:   E6:14:B4:71:DE:4E:6B:7B:78:37:1C:05:F7:D5:2A:5F:BB:EC:2F:90
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       399F65500363493A9A5D34BBA4C9C1DFF3EB563A
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 05 Jun 2026 12:04:24 +0000
ROA not before:           Fri 05 Jun 2026 11:59:24 +0000
ROA not after:            Fri 04 Jun 2027 12:04:24 +0000
asID:                     14618
IP address blocks:        2a07:54c1:8c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9f:65:50:03:63:49:3a:9a:5d:34:bb:a4:c9:c1:df:f3:eb:56:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jun  5 11:59:24 2026 GMT
            Not After : Jun  4 12:04:24 2027 GMT
        Subject: CN=E614B471DE4E6B7B78371C05F7D52A5FBBEC2F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:f9:2d:33:7e:63:05:78:ea:64:79:6a:3f:
                    e9:49:04:44:e9:19:c8:b2:f6:e5:cc:49:ff:c6:26:
                    4e:53:23:a9:4e:94:06:0e:b7:10:00:a4:0f:e2:45:
                    30:55:74:f3:e7:61:7c:45:43:f8:68:95:c8:df:77:
                    68:3d:6a:de:09:29:a0:c4:63:05:ea:8a:3b:28:47:
                    09:5a:55:eb:ce:fa:f2:01:2f:bf:78:4e:e1:15:16:
                    29:10:b6:e2:32:c4:c8:00:52:13:fd:a5:cf:cf:3e:
                    d7:2b:a7:c1:a2:2d:72:5e:ca:23:74:ab:93:5e:89:
                    5e:3f:b8:c4:d7:d0:80:ca:be:a2:81:b9:9e:87:70:
                    e0:ac:8d:04:2e:15:b6:f7:63:6b:dd:28:da:36:55:
                    60:75:64:45:e6:7b:50:58:56:35:e1:d2:c1:8a:a7:
                    5c:3e:1e:36:71:f9:8f:d2:56:27:df:31:4d:d3:3b:
                    eb:61:4c:8f:d3:cd:ef:67:c4:eb:47:e1:b7:e2:e0:
                    f3:61:a3:55:c8:f3:4d:9d:6a:2a:58:38:01:44:17:
                    b9:76:5b:da:42:f7:6b:66:96:ae:60:e5:3d:b4:01:
                    6f:4b:9e:c8:c9:c2:ec:c8:cd:9d:20:2b:a2:e8:a6:
                    04:68:c1:99:c4:6d:9b:1d:43:e0:86:fb:44:e4:58:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:14:B4:71:DE:4E:6B:7B:78:37:1C:05:F7:D5:2A:5F:BB:EC:2F:90
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:88:b8:04:53:7e:d0:4f:75:ef:d7:62:3c:69:7c:27:02:
         3f:4f:c0:9f:23:4a:09:81:bf:ec:f0:c1:7f:7a:5e:a6:87:dd:
         7a:1c:a6:4d:9a:4b:69:34:b3:93:2c:ea:3f:6a:67:9e:70:64:
         93:cb:20:8a:48:2f:57:21:27:4e:75:cf:a0:6a:15:a7:7e:91:
         b7:0c:3e:a1:fb:05:2c:f5:09:22:76:33:b8:03:12:c6:01:e8:
         d3:0e:7c:92:29:3e:75:b0:ef:0e:33:b5:e0:d9:31:2c:38:42:
         f6:fe:af:10:dd:d3:a0:f1:d8:f6:cf:53:73:d9:58:5f:75:b4:
         b8:69:b1:78:61:98:38:1c:e0:c0:8a:1e:df:6a:3e:c1:86:cf:
         88:47:d7:7e:93:80:ce:70:52:19:3f:cd:c1:53:b3:3c:7f:5d:
         73:7b:5d:65:41:4f:5f:0f:98:33:fc:50:b3:02:67:9e:3b:be:
         69:6a:0a:3c:3d:f3:fa:01:8e:ce:78:70:0d:81:60:df:0b:a8:
         0c:a2:db:fa:cd:cf:f7:2e:0c:2c:a3:d6:3b:33:fd:8a:90:74:
         d8:90:83:c6:6c:93:ed:92:96:ca:00:3f:9f:6a:7c:5c:6c:13:
         6b:fa:4b:58:6f:4d:a6:b5:c2:8e:24:a9:3f:44:27:48:22:d7:
         44:21:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:00:09 2026 by rpki-client