Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3336203d3e203539393230.roa
File:                     326130373a353463313a3a2f33362d3336203d3e203539393230.roa (raw, json)
Hash identifier:          R//9mD4gImW6LBoaAlEWIdtrWg6uhZFxlVQY4cLiSjo=
Subject key identifier:   C4:20:3D:D1:73:82:15:D9:4E:D2:36:27:3B:08:4C:87:13:F2:E3:36
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       12A8EC13F6527DD09B3A96E592BD1658E24A8F29
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3336203d3e203539393230.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     59920
IP address blocks:        2a07:54c1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a8:ec:13:f6:52:7d:d0:9b:3a:96:e5:92:bd:16:58:e2:4a:8f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=C4203DD1738215D94ED236273B084C8713F2E336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9f:3f:78:43:1c:4a:4c:51:99:0d:30:38:b0:
                    d8:b2:d9:b4:a8:dd:b9:a6:38:98:64:40:19:e3:3a:
                    7e:86:2f:50:a2:48:b2:a5:f7:12:cb:c0:78:f0:19:
                    07:b5:63:7f:4a:15:ec:de:f0:dc:d9:60:17:c6:28:
                    b5:ed:4e:7e:da:0a:3b:db:35:52:43:2e:d5:2f:20:
                    61:b6:17:a1:4a:c6:15:09:f1:e1:94:0a:b7:4b:1a:
                    5b:db:24:db:81:01:e2:4f:e7:33:6f:96:f0:ff:73:
                    95:ef:11:cf:1d:b1:9d:c8:b1:85:18:fb:05:30:77:
                    c9:d7:8f:33:bd:a9:d1:85:e1:84:66:b5:fa:66:7e:
                    be:d0:fb:ff:4e:b9:62:47:bb:dc:40:7a:af:01:52:
                    04:54:42:92:9d:e2:f3:fa:da:64:34:a9:5a:a5:a4:
                    66:95:f4:9b:ee:5a:7c:82:b2:a0:77:78:5f:8a:7e:
                    a2:bf:13:44:ac:f0:39:c8:3d:34:5e:d9:e7:ce:27:
                    48:78:4f:8d:fe:e8:9c:cc:9b:41:aa:1e:c2:eb:87:
                    41:1f:8e:68:70:ef:5d:e1:60:f3:de:e3:ef:31:a5:
                    86:2b:5d:24:6c:4c:6d:cc:40:e4:14:d3:77:96:0d:
                    e3:30:ac:72:30:14:20:e4:04:2f:45:14:27:d7:bf:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:3D:D1:73:82:15:D9:4E:D2:36:27:3B:08:4C:87:13:F2:E3:36
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3336203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1::/36

    Signature Algorithm: sha256WithRSAEncryption
         66:49:3b:35:2c:b4:11:70:1e:46:c7:79:17:07:f9:e5:89:85:
         eb:21:21:9e:e3:f2:4d:20:7c:70:de:24:69:0a:46:0d:88:17:
         e5:45:e5:4f:1c:62:a3:ef:41:94:aa:ec:20:83:2b:46:f4:f0:
         11:66:44:d8:b3:f4:22:32:e7:b4:25:f7:c2:12:20:aa:04:57:
         86:64:cb:f6:46:11:40:fd:53:39:eb:73:c0:b0:e3:40:f4:90:
         d3:40:45:d6:0e:4b:0e:86:04:5e:e6:e8:e6:5f:b6:72:88:5c:
         22:d6:90:19:e0:95:36:36:d2:86:2e:d2:26:c6:fd:c5:73:c8:
         a5:fe:44:14:ab:6c:c9:c5:ac:ea:f1:02:29:e6:96:16:bf:19:
         93:c7:6b:f3:f4:4c:f6:28:79:72:b7:95:67:6e:84:e9:82:6d:
         f5:14:f1:87:fa:40:4e:31:73:ad:74:ad:d0:0a:a7:9a:12:2b:
         16:b0:a8:e9:55:57:ff:9f:f8:64:d0:c4:e8:02:94:44:87:c3:
         a8:41:40:f2:8e:99:1c:92:95:7a:1c:fe:7c:bc:2a:11:ed:6b:
         78:fa:73:fa:0c:9e:27:b4:0e:e5:e1:40:81:b0:07:66:31:46:
         21:89:ef:be:15:02:88:86:e9:dd:ae:e2:78:0c:78:e5:75:93:
         5c:d0:c9:ab
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUEqjsE/ZSfdCbOpblkr0WWOJKjykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBFN0YzM0Q5
NzBGNzEyMDAeFw0yNTA3MDQxMTEyMzFaFw0yNjA3MDMxMTE3MzFaMDMxMTAvBgNV
BAMTKEM0MjAzREQxNzM4MjE1RDk0RUQyMzYyNzNCMDg0Qzg3MTNGMkUzMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0nz94QxxKTFGZDTA4sNiy2bSo
3bmmOJhkQBnjOn6GL1CiSLKl9xLLwHjwGQe1Y39KFeze8NzZYBfGKLXtTn7aCjvb
NVJDLtUvIGG2F6FKxhUJ8eGUCrdLGlvbJNuBAeJP5zNvlvD/c5XvEc8dsZ3IsYUY
+wUwd8nXjzO9qdGF4YRmtfpmfr7Q+/9OuWJHu9xAeq8BUgRUQpKd4vP62mQ0qVql
pGaV9JvuWnyCsqB3eF+KfqK/E0Ss8DnIPTRe2efOJ0h4T43+6JzMm0GqHsLrh0Ef
jmhw713hYPPe4+8xpYYrXSRsTG3MQOQU03eWDeMwrHIwFCDkBC9FFCfXv9ihAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUxCA90XOCFdlO0jYnOwhMhxPy4zYwHwYDVR0j
BBgwFoAUVYq40eOEwZ4mXDwfQOfzPZcPcSAwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzE3LzU1OEFCOEQxRTM4NEMxOUUyNjVDM0MxRjQwRTdGMzNEOTcwRjcxMjAuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzQvNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBF
N0YzM0Q5NzBGNzEyMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2kuY2MvcmVwby9NeXRoaWNhbEtpdHRlbi8xNy8zMjYxMzAzNzNh
MzUzNDYzMzEzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNTM5MzkzMjMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYEKgdUwQAwDQYJKoZIhvcNAQELBQADggEBAGZJOzUstBFwHkbHeRcH+eWJ
heshIZ7j8k0gfHDeJGkKRg2IF+VF5U8cYqPvQZSq7CCDK0b08BFmRNiz9CIy57Ql
98ISIKoEV4Zky/ZGEUD9Uznrc8Cw40D0kNNARdYOSw6GBF7m6OZftnKIXCLWkBng
lTY20oYu0ibG/cVzyKX+RBSrbMnFrOrxAinmlha/GZPHa/P0TPYoeXK3lWduhOmC
bfUU8Yf6QE4xc610rdAKp5oSKxawqOlVV/+f+GTQxOgClESHw6hBQPKOmRySlXoc
/ny8KhHta3j6c/oMnie0DuXhQIGwB2YxRiGJ774VAoiG6d2u4ngMeOV1k1zQyas=
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:36:52 2025 by rpki-client