Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203136353039.roa
File:                     326130373a353463313a386338303a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          q8hwI6HzVzL2xtwE39eT6VEVBduBCRKoouqO2v+tLaM=
Subject key identifier:   C6:A7:0A:C5:6E:2E:E4:D2:44:35:14:71:66:72:E1:76:89:B7:F0:A2
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       716FB3A9757031850A5F53CFB009E38E5E6943D4
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     16509
IP address blocks:        2a07:54c1:8c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6f:b3:a9:75:70:31:85:0a:5f:53:cf:b0:09:e3:8e:5e:69:43:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=C6A70AC56E2EE4D2443514716672E17689B7F0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:22:05:01:ac:93:da:89:14:0f:1a:ca:5b:fb:
                    a7:22:25:9b:d8:2d:16:43:d3:51:7b:be:29:9f:ab:
                    72:41:9e:35:2a:e6:fc:5f:52:7e:93:79:50:e5:c6:
                    d8:08:32:e0:75:93:21:b0:7d:cc:36:31:90:86:cc:
                    c2:32:df:48:e4:36:51:cc:14:64:d0:0b:ba:ee:7f:
                    fa:10:d9:ec:fd:44:ec:1a:88:82:53:d3:3b:59:73:
                    b2:17:11:f2:6f:62:fc:b4:c0:ce:0f:61:d7:3e:82:
                    22:6a:84:37:6c:9d:2f:b2:cc:cf:7d:2a:d2:9a:74:
                    03:6f:f8:c2:aa:cf:93:00:73:1c:6c:72:a1:c6:a1:
                    a2:90:80:69:e3:19:11:ef:21:19:c0:3a:e1:50:f3:
                    db:09:50:c7:6c:13:14:63:90:8c:b6:fe:0e:37:4d:
                    86:9c:5d:d2:9d:54:a6:b9:02:97:76:83:ff:c2:40:
                    65:13:02:40:25:87:b2:ba:5d:2e:d1:87:0b:ca:b8:
                    ff:60:01:35:01:d9:d6:00:0b:16:b2:7f:d4:ff:90:
                    49:9f:d2:da:85:1a:05:a1:51:83:03:41:70:08:83:
                    ef:77:ed:37:5a:f8:e0:f6:9e:c2:d5:07:9b:91:d0:
                    e9:a8:62:85:06:81:81:0a:62:2d:b9:40:4e:79:7a:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A7:0A:C5:6E:2E:E4:D2:44:35:14:71:66:72:E1:76:89:B7:F0:A2
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:7c:2b:36:5c:e2:cd:8e:55:b0:7b:7b:1c:01:d4:43:d1:89:
         fc:8d:da:c2:26:56:52:5e:65:a8:51:1d:47:6a:4c:07:f9:c3:
         37:0f:94:c1:a0:41:00:26:c5:0c:57:98:c4:35:57:53:30:cd:
         47:25:04:b1:4c:05:67:c1:46:e4:21:ae:f9:ec:35:0f:84:8a:
         e2:55:0b:05:c9:56:6c:a7:34:bc:50:d8:76:bb:cd:63:0c:c0:
         16:1b:77:b1:39:db:a4:8c:d0:35:3d:c0:00:39:c9:3e:99:28:
         a3:ed:c1:f4:50:60:59:9a:d5:67:15:9f:36:3c:e3:c6:25:80:
         af:69:e5:16:66:a3:38:2a:32:04:16:0e:18:38:cb:4f:eb:db:
         9d:86:46:a8:83:64:87:a4:0b:e4:ff:d6:42:73:02:7b:d3:07:
         e7:4f:c8:bf:9c:64:4a:18:97:03:21:0b:aa:0e:80:3a:e7:ef:
         dd:05:31:55:d8:3c:4c:59:9b:fa:5d:c4:db:58:0c:8c:37:af:
         15:f1:f9:02:b2:9f:fd:ee:12:19:74:ce:51:83:d3:3c:2a:9e:
         6c:81:cb:85:e6:07:c8:52:bd:8f:cf:c7:a7:4c:77:8f:78:dd:
         1b:b3:88:c8:6a:9c:1b:33:8b:28:f2:13:48:d1:7a:6c:2f:9b:
         f4:7b:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:53:01 2025 by rpki-client