Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386338303a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          TJtVzYov2c+qDD9s6sZMSfGSazoofGD5HrEKNz09mlE=
Subject key identifier:   F6:3B:C5:82:BE:7D:45:69:B9:E7:81:87:5C:F2:82:AA:E5:97:E6:A4
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       01E47E167347B5A6EB568FAA0DBD162735734732
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 05 Jun 2026 12:04:25 +0000
ROA not before:           Fri 05 Jun 2026 11:59:25 +0000
ROA not after:            Fri 04 Jun 2027 12:04:25 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e4:7e:16:73:47:b5:a6:eb:56:8f:aa:0d:bd:16:27:35:73:47:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jun  5 11:59:25 2026 GMT
            Not After : Jun  4 12:04:25 2027 GMT
        Subject: CN=F63BC582BE7D4569B9E781875CF282AAE597E6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:e4:07:01:57:d6:d3:44:d1:0b:0f:dd:b7:
                    61:e0:cf:c3:06:17:e9:43:fa:ad:8a:52:88:16:ad:
                    eb:64:ca:a4:8e:70:89:20:e9:49:fc:f5:7e:d6:69:
                    40:e7:7e:7f:be:6b:76:2e:38:b6:f1:ac:59:3d:a0:
                    07:2a:40:ee:d7:5e:c5:24:97:f9:5c:40:45:58:78:
                    a9:4b:4b:a8:62:4e:6c:10:0d:a4:d9:74:f1:ee:ef:
                    a7:4a:fb:96:d3:9c:4c:a7:87:6d:3c:0f:97:d0:69:
                    18:09:2e:33:a6:bf:cc:aa:f0:b7:41:a9:57:f9:df:
                    c0:4f:33:f7:68:a3:bd:a7:41:e8:33:55:bf:c7:13:
                    6f:6c:db:89:e9:a3:3d:09:ab:de:b0:68:81:b3:1b:
                    c9:8f:c2:5a:8e:e0:a1:2e:ac:02:b9:69:59:78:9d:
                    f3:27:8e:ab:92:c0:c1:25:4d:18:4f:ff:fd:23:40:
                    e0:51:e2:3c:56:3d:0d:9e:d5:18:2d:cb:9b:2e:c2:
                    ce:09:cd:69:9f:f3:6b:79:e1:31:7f:72:60:3c:30:
                    97:6a:9b:ea:8d:26:ae:9e:39:93:f4:5f:4a:d7:08:
                    a2:60:a0:00:f8:56:f4:95:35:f7:f4:f5:ff:da:a9:
                    73:4b:ee:0a:a0:34:4c:83:4d:dd:02:a1:7b:6b:6e:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3B:C5:82:BE:7D:45:69:B9:E7:81:87:5C:F2:82:AA:E5:97:E6:A4
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338303a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:d1:ad:f6:7b:bd:16:49:41:00:fc:b2:85:af:3e:a3:89:7e:
         01:6f:6e:4b:b9:a3:3b:f1:60:75:10:34:81:cc:00:62:96:c6:
         41:d5:b8:0b:51:63:2d:39:b1:e3:74:fe:ca:bc:06:3f:67:bd:
         87:dd:a4:fa:c8:ba:28:f1:ef:41:73:d0:24:bc:21:91:4d:5a:
         c8:5f:5b:0f:af:84:6e:55:d6:b6:dd:fd:78:d0:a3:e1:f8:39:
         61:32:96:a0:03:2a:ed:c3:68:38:e1:e4:ea:8d:12:47:f3:30:
         0f:ea:85:5a:60:48:b6:83:c7:bc:dc:0f:a0:a7:51:8e:e8:ac:
         bd:01:40:84:c0:c1:84:91:72:74:45:d1:b3:1b:df:3d:cc:cb:
         5b:be:a7:65:53:6b:b8:c7:72:8b:ee:50:07:ca:5c:d2:bd:4f:
         59:23:ef:9e:81:8e:aa:b4:58:24:c0:0f:ba:50:3a:2a:c3:ff:
         12:3a:6a:bb:2d:ce:6b:98:9f:eb:de:72:34:09:1c:ec:d7:91:
         cb:22:d2:91:e3:ad:17:7c:79:30:9e:9b:53:11:49:69:09:53:
         65:1a:9b:90:22:f8:2a:56:c4:ce:aa:74:d6:db:d6:cd:e6:da:
         49:fc:9a:32:ab:27:4a:4c:b9:e5:b2:25:64:5e:c6:7c:bf:7b:
         7b:20:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:00:10 2026 by rpki-client