Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338323a3a2f34382d3438203d3e203134363138.roa
File:                     326130373a353463313a386338323a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          N8pdiCBBnGtQ2T7npnbHT8KjK6SM/7WXSBaDacZGH6A=
Subject key identifier:   4D:AF:94:C6:58:EF:31:FC:CE:C1:08:4C:6B:15:76:E4:F9:89:DE:3E
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       56920341AB1669C74080C944ECAC91718D4B1B17
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338323a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     14618
IP address blocks:        2a07:54c1:8c82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:92:03:41:ab:16:69:c7:40:80:c9:44:ec:ac:91:71:8d:4b:1b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=4DAF94C658EF31FCCEC1084C6B1576E4F989DE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:d0:e7:bb:aa:b1:95:d6:ff:40:60:33:78:
                    04:eb:57:41:7b:39:72:47:e8:fc:e9:32:bd:3f:f7:
                    a1:0b:8d:43:7a:4f:16:2b:11:a6:6b:07:bd:65:b3:
                    95:5c:e5:4b:83:51:02:22:99:1b:cf:f2:8d:d4:5f:
                    71:a5:25:88:24:4e:a2:a7:9a:32:c8:52:78:52:4a:
                    a9:9c:3a:cf:f8:87:df:31:20:0e:52:96:c4:a2:04:
                    79:59:b6:a6:b5:cc:33:92:49:00:1c:7f:3e:d2:5e:
                    27:1c:ec:53:e9:ad:11:d0:61:6a:0d:ba:c8:16:39:
                    3b:db:fd:cc:a2:c5:e5:f5:61:77:71:b0:13:da:2c:
                    01:28:18:c1:13:41:21:b7:0c:68:4b:46:d9:95:46:
                    61:fb:06:49:b1:fb:8a:9c:1e:de:2c:e1:f1:0b:1e:
                    e7:6d:79:24:80:be:16:5d:d5:aa:b6:39:eb:55:c5:
                    af:0d:26:ce:3d:d8:d6:94:87:9b:f6:0d:3e:0b:b0:
                    10:53:fe:6e:18:84:32:9e:ff:1b:4b:da:95:42:f6:
                    3a:1e:06:a9:fb:f2:be:52:6d:bd:6f:e1:ba:1a:71:
                    2e:70:c3:48:a8:e5:e1:7d:cf:61:9a:bb:4b:e9:34:
                    c1:89:1a:9c:36:32:f7:8f:99:d9:94:bd:12:46:38:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AF:94:C6:58:EF:31:FC:CE:C1:08:4C:6B:15:76:E4:F9:89:DE:3E
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338323a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c82::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:47:3e:bf:07:cb:a2:2b:21:32:ad:58:aa:a7:cd:2d:bc:01:
         cf:f8:a7:93:e6:79:c2:13:9a:82:44:b7:c4:c4:81:f4:c4:9d:
         b2:71:53:35:85:33:eb:62:3c:1c:30:c8:30:35:33:fb:51:e6:
         ab:00:66:90:57:c6:4d:18:6d:80:32:7e:f4:24:83:87:9c:ae:
         81:f5:40:8d:87:2c:31:a2:04:3c:10:28:00:38:2c:7c:6d:0d:
         f8:4b:16:d2:1e:67:1d:66:7d:37:61:2c:21:79:67:fd:a4:fe:
         06:37:83:77:e1:9f:58:a3:f0:9b:8c:a8:6c:7c:d0:91:d3:b9:
         86:56:33:a6:4b:97:a0:ed:ef:ec:4b:59:40:5b:4d:86:a3:6c:
         dd:f7:1d:8c:5b:df:2b:84:e6:20:4b:e2:f8:7d:59:eb:2b:0d:
         84:e0:ac:9e:32:ec:0c:74:b0:4d:e6:49:a9:5f:d7:e0:d3:03:
         16:42:7c:d0:19:05:84:3b:21:e2:a9:62:b6:ce:50:88:93:88:
         4b:97:bf:30:c7:3d:3a:20:a3:88:66:fe:0a:55:a3:7e:68:7e:
         45:ed:de:62:c7:18:9f:51:8f:1b:10:d9:cb:65:33:8c:f2:2b:
         e7:b9:ca:4a:a8:ce:0d:7f:e8:f8:c4:92:51:8b:b2:42:7d:d0:
         d0:a8:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 16:04:48 2025 by rpki-client