Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa
File:                     326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          DmR79or/u6TTpxfXhJ4G+FhKWOQHbsBlpm2ya/+gZT8=
Subject key identifier:   4C:6B:04:45:07:DA:0C:23:FC:06:19:79:54:7F:33:34:EA:60:37:1C
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       174DE8BA1A2927D8B7343AC3BD599D5F47C61706
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     14618
IP address blocks:        2a07:54c1:8c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4d:e8:ba:1a:29:27:d8:b7:34:3a:c3:bd:59:9d:5f:47:c6:17:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=4C6B044507DA0C23FC061979547F3334EA60371C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:2f:88:57:81:d2:fc:6b:c4:af:7b:37:83:
                    8d:90:56:f7:2f:08:1b:5f:ee:16:fb:46:d8:16:1a:
                    d6:19:71:f8:1e:c2:f8:eb:50:2d:a1:df:9c:0c:14:
                    0d:a4:d0:39:ee:4e:29:21:41:3d:be:7a:5c:3e:6f:
                    69:46:0d:1d:b0:ba:22:65:57:e6:1d:26:44:d9:3d:
                    32:79:6a:2c:e6:72:2b:30:d0:e5:24:78:cf:ce:38:
                    c4:9e:be:14:c6:f5:db:0b:48:4a:bb:90:84:cd:1a:
                    73:3d:94:66:d3:9f:3a:cd:7d:f2:25:e3:4e:c7:67:
                    c6:1d:91:ee:b1:42:d0:8c:90:5c:5d:c1:25:c6:b4:
                    b6:df:df:73:88:b9:b0:04:15:d2:b5:24:de:95:65:
                    ae:8c:84:eb:1f:db:ab:85:e1:01:1c:14:77:08:37:
                    15:51:19:7a:ef:55:8b:52:3d:dd:c5:08:f3:91:e4:
                    5a:be:fa:ce:a5:12:b0:19:9a:87:9f:54:59:83:7e:
                    7d:95:28:7d:cd:cd:62:95:84:ab:cc:d1:ce:65:c2:
                    d1:68:0d:40:3c:2d:fd:1f:e7:28:a9:f3:fd:55:35:
                    cd:6f:0f:88:d9:f6:19:cc:6a:cc:e6:63:2a:15:a9:
                    9b:fc:7e:ca:50:ac:00:6e:66:aa:5c:5a:3c:01:4a:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6B:04:45:07:DA:0C:23:FC:06:19:79:54:7F:33:34:EA:60:37:1C
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:c6:23:98:8f:1c:fe:92:79:7b:5a:8a:50:b8:ba:3b:02:
         55:00:2f:16:77:6e:90:37:8b:4f:47:c8:1d:c9:f8:6a:69:07:
         34:be:d2:e1:91:45:89:b1:c9:de:c6:2d:c6:c1:bd:ef:7a:0d:
         fb:b4:cd:10:57:3b:90:6e:eb:34:fb:72:b2:fc:1f:02:6e:90:
         2b:d5:f5:83:8f:53:b7:7d:6b:ab:8a:b6:7d:da:d7:2d:60:b5:
         de:83:71:5b:45:61:eb:e5:17:ad:4f:d7:c4:7d:bf:e4:33:b8:
         14:05:06:66:dc:73:15:9e:3a:5d:c9:15:5d:a8:c7:4b:6a:b0:
         51:b6:00:25:0e:c0:52:a2:03:81:fb:2a:11:79:5a:3d:f8:25:
         94:2c:19:24:76:5e:e6:10:1b:f6:07:19:1a:15:1f:a4:f3:03:
         84:f1:d8:a2:9e:b7:47:22:e3:ac:b2:68:d9:91:06:c7:b4:41:
         5e:e6:d2:91:03:16:12:0f:a2:3c:71:ad:cf:cc:4f:50:7e:c8:
         28:8c:59:76:f9:70:f2:b1:73:b7:08:0f:15:11:26:29:c6:73:
         a6:cf:a9:f0:8c:7e:c8:94:ac:56:b0:41:08:ba:12:c0:de:b2:
         64:5a:58:88:ec:0b:96:0f:71:c3:b7:78:15:57:01:d7:81:b0:
         69:58:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 16:20:06 2025 by rpki-client