Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3336203d3e203539393230.roa
File:                     326130373a353463313a3a2f33362d3336203d3e203539393230.roa (raw, json)
Hash identifier:          DZKOPdPxN4RKxKqCYD1n5CmbpjGH6LZ2MN9D03ndySk=
Subject key identifier:   C8:B8:4C:C4:D6:EC:80:5D:5F:34:84:E9:C3:33:D7:D4:21:40:05:35
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       6B0310D7DF00DBC7EFE2198C5D8764EB2C4BD515
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3336203d3e203539393230.roa
Signing time:             Fri 05 Jun 2026 12:04:24 +0000
ROA not before:           Fri 05 Jun 2026 11:59:24 +0000
ROA not after:            Fri 04 Jun 2027 12:04:24 +0000
asID:                     59920
IP address blocks:        2a07:54c1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:03:10:d7:df:00:db:c7:ef:e2:19:8c:5d:87:64:eb:2c:4b:d5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jun  5 11:59:24 2026 GMT
            Not After : Jun  4 12:04:24 2027 GMT
        Subject: CN=C8B84CC4D6EC805D5F3484E9C333D7D421400535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:b4:9b:cb:c0:68:d2:a9:8d:21:6f:71:17:
                    4d:49:19:ab:26:01:95:af:14:9e:05:7c:77:f4:0a:
                    f0:b1:19:6e:07:e1:4c:6e:5d:53:ff:0d:33:17:8d:
                    e5:c6:e7:d2:06:0a:77:e4:d3:2b:9d:9c:f8:64:05:
                    0e:35:b1:13:d0:b6:82:65:5c:0d:3c:2f:f6:0f:43:
                    cf:e2:92:aa:36:38:88:78:f2:73:dd:68:02:15:7c:
                    22:ac:99:a1:e5:20:0a:c2:49:16:59:37:fc:70:0e:
                    71:d4:1f:c8:ba:cd:a4:09:6c:f6:53:06:93:57:78:
                    60:52:ad:95:7a:8a:af:d3:58:54:92:c4:f3:c6:b7:
                    5e:58:94:e2:d1:4c:e5:9d:43:83:62:a3:6d:b9:6a:
                    4e:ed:e9:59:f5:e4:c0:90:2c:f1:1f:5c:59:d4:35:
                    45:16:5d:48:44:81:5c:29:b5:08:09:59:4c:bb:55:
                    5f:f6:68:e6:eb:aa:85:d6:de:10:d8:b2:6b:ef:1a:
                    db:f2:25:69:e2:47:8e:2e:0b:1a:52:d7:d4:11:0b:
                    59:67:07:9e:00:16:bd:03:9b:55:99:34:a6:8c:c0:
                    fb:ac:35:b3:ac:1d:3f:fb:d2:ce:2f:16:c3:17:10:
                    86:f4:cc:a0:ee:42:dd:b8:67:d1:07:e5:5c:26:5a:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:4C:C4:D6:EC:80:5D:5F:34:84:E9:C3:33:D7:D4:21:40:05:35
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3336203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:e4:dd:9b:f5:b3:bb:83:52:f2:c8:2b:2a:07:ee:b3:e2:0d:
         77:30:58:d9:f1:2e:1f:20:75:9f:09:62:ab:80:19:83:1f:9a:
         61:89:2b:08:0a:f4:99:2e:cd:0d:b9:f9:b5:0a:b0:89:55:38:
         6c:64:85:9c:42:3e:b1:6f:25:ea:b5:c1:5f:48:d2:ba:47:6c:
         01:ba:6d:31:db:2c:74:48:59:54:2f:31:85:ab:9e:3d:82:e2:
         6a:30:62:2b:33:18:97:d8:cf:29:64:9b:a4:5f:e5:87:6c:e1:
         64:15:90:6b:5f:80:7f:b9:6c:46:47:92:e6:98:4a:56:a8:c1:
         d1:d2:ba:9a:7d:26:fd:d8:55:f4:a3:cc:bd:b7:48:b4:f8:da:
         4c:14:e1:e2:6b:43:c8:48:1f:63:8a:56:3f:25:91:0b:0d:18:
         38:43:47:91:14:87:dc:5f:fd:15:58:30:b6:7a:e8:75:c4:6e:
         6f:c4:47:70:ef:39:c8:f1:28:76:a4:c1:d7:72:53:53:f0:11:
         06:09:27:56:80:81:99:fe:ba:e5:87:f3:df:1e:af:26:68:a7:
         75:07:b6:e1:68:c0:3d:18:60:a1:30:6a:73:cc:42:d0:b8:e2:
         1d:47:1b:0c:6d:70:42:93:04:00:44:2b:f7:51:c2:04:34:c0:
         1b:ad:45:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:57:36 2026 by rpki-client