Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338323a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386338323a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          1cmUTcAYp60m942giIc1dwwaNuWIZwn1SHvMm30eiYk=
Subject key identifier:   82:3B:13:C8:40:2A:C4:7D:5A:B7:02:69:47:09:1B:85:4F:FC:FC:C2
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       5C71BA1C2C55E728ADB17DD34803378AFB5AABA5
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338323a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:71:ba:1c:2c:55:e7:28:ad:b1:7d:d3:48:03:37:8a:fb:5a:ab:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=823B13C8402AC47D5AB7026947091B854FFCFCC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:c1:75:1c:dc:0d:d1:0b:c4:56:48:e5:7b:
                    e5:6a:fc:f5:45:ba:2b:a4:27:a2:2f:d5:9c:e8:e1:
                    0d:e3:6b:ed:a7:a9:cc:7f:7e:61:65:0a:93:61:0f:
                    9e:48:77:72:f9:67:45:a2:69:d6:3b:ff:32:0a:9a:
                    9c:32:58:35:5b:5d:d6:1c:c7:bc:05:1c:68:82:c3:
                    d3:db:94:d9:25:8b:83:75:ad:78:6f:51:46:d4:34:
                    60:b8:b5:5a:02:b1:44:8d:a3:d4:fa:18:04:c4:45:
                    e6:09:4c:b0:fc:7e:12:a5:1f:ac:17:7e:7c:08:56:
                    7e:ce:f6:cb:6b:d4:29:ab:75:a1:87:cc:0e:08:05:
                    16:06:02:35:25:a0:e2:3b:4d:68:3e:bf:bd:2e:02:
                    7d:4f:b6:82:98:e6:1a:e4:5b:96:41:74:ae:44:42:
                    c4:d1:86:c3:e9:8d:e1:68:9e:00:a2:50:01:ab:7b:
                    00:f2:34:07:57:b5:75:4b:f1:29:c4:f1:99:3e:d1:
                    8b:dc:9d:c1:cb:77:87:a5:e3:ee:b6:20:45:37:8c:
                    db:b2:d9:9c:d0:3d:37:00:98:81:42:00:96:9b:65:
                    57:a9:73:32:3a:d7:4f:43:e9:24:ab:1b:71:60:32:
                    fc:51:45:c4:eb:49:b3:3d:5c:67:cb:f6:88:9b:47:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3B:13:C8:40:2A:C4:7D:5A:B7:02:69:47:09:1B:85:4F:FC:FC:C2
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386338323a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c82::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:73:bd:46:97:b7:8f:76:9e:8f:b4:31:20:b9:7b:cc:76:
         8e:94:be:e5:4e:a8:1f:2d:7d:f3:96:20:ff:f8:c7:cc:df:09:
         f1:51:9b:ec:f5:fc:2c:49:c3:f4:33:e3:09:50:7f:a8:a1:06:
         f8:54:11:6b:bc:da:bb:7f:cd:6e:0f:7b:bb:c3:67:54:6d:e1:
         a2:e1:14:97:9c:b2:37:81:54:14:20:df:74:b5:5c:c6:ab:6e:
         97:fb:31:ec:d2:81:f7:f4:9d:86:90:c8:c2:d7:79:30:0f:e4:
         8c:aa:07:d7:79:70:76:06:d8:98:ab:02:d4:46:ec:fe:b9:bb:
         87:70:eb:aa:fe:5a:d0:3d:38:bf:0f:77:9d:45:63:ae:65:dd:
         67:ca:15:45:7c:b8:46:74:55:5e:a2:5f:6a:b0:22:6a:5f:c9:
         3a:51:ab:a5:46:be:e2:0d:77:2d:94:6d:c6:62:3b:68:8e:3b:
         fc:c2:8e:3e:14:7c:ec:8c:73:04:33:5d:f2:c4:2e:a3:2a:b8:
         c6:59:12:a0:99:08:28:6b:19:45:d2:0a:e2:0d:53:d9:8f:5b:
         55:e7:1f:a5:f2:41:6d:7d:3b:96:17:6b:a0:65:17:86:6b:1a:
         15:41:da:d7:de:e3:12:29:f0:42:f7:bd:66:05:dc:af:33:bc:
         6f:26:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:38:30 2025 by rpki-client