Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3438203d3e203530323234.roa
File:                     326130373a353463313a3a2f33362d3438203d3e203530323234.roa (raw, json)
Hash identifier:          723J/b5J4Exzs+KQNjcomI0qKAMx8ASACeei3vE8uzU=
Subject key identifier:   A0:2C:E4:00:BE:F3:ED:73:E4:BE:61:E0:1B:7D:02:31:AD:34:A2:B7
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       3295EFEF909A6E4A0278AFD0CA2AFB5063026572
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3438203d3e203530323234.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     50224
IP address blocks:        2a07:54c1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:95:ef:ef:90:9a:6e:4a:02:78:af:d0:ca:2a:fb:50:63:02:65:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=A02CE400BEF3ED73E4BE61E01B7D0231AD34A2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:7c:80:80:56:57:40:4d:f1:8e:d5:da:ca:
                    77:71:f6:f6:a8:ee:fe:c6:1a:a4:cb:59:f9:8d:57:
                    78:76:96:21:4d:9d:c2:b5:ff:57:d8:7c:b4:de:e8:
                    42:05:30:40:9e:2c:49:37:52:e3:9d:7b:b2:a5:3b:
                    9b:93:e0:4e:97:18:6b:af:74:32:03:f2:3b:77:81:
                    5c:23:83:40:98:30:a9:46:b4:16:bc:d7:de:fc:1e:
                    14:2d:e2:64:ed:85:9a:ab:2e:f9:ea:44:a4:d8:f7:
                    01:16:95:bb:8e:ef:a2:23:b5:86:04:11:8e:ae:af:
                    be:79:61:ca:a2:d0:dd:47:b9:26:77:64:4f:1c:40:
                    e7:91:d8:d3:d8:d7:49:21:94:71:59:06:82:a8:8c:
                    f3:ce:f7:96:df:b6:70:66:1a:ee:00:1f:b5:11:30:
                    39:bd:06:97:a7:5d:15:3b:cc:d1:b9:b8:e0:87:73:
                    b8:21:e7:1d:20:8a:2d:bb:53:1e:99:df:43:d7:a0:
                    46:a3:ca:24:c6:f5:bc:a5:4d:3e:c0:6b:3d:16:74:
                    c2:40:87:3f:3c:8e:45:b4:aa:4a:04:d1:c2:af:32:
                    2e:f9:28:cd:0e:ce:04:32:41:89:61:59:4c:b7:fe:
                    37:c6:d8:0f:af:0f:06:ba:87:c4:34:42:88:db:5e:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2C:E4:00:BE:F3:ED:73:E4:BE:61:E0:1B:7D:02:31:AD:34:A2:B7
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:91:7d:bc:3b:08:6f:a0:35:3b:52:b2:77:8d:7e:b3:5d:26:
         11:a2:bb:17:1c:3b:62:55:25:eb:f0:81:b9:fd:ab:bd:8b:b6:
         d6:40:f3:db:b3:cd:0d:4a:6e:bb:4f:8b:ea:32:28:c4:09:0b:
         9c:e1:df:fc:fe:f8:ba:bf:a2:1c:69:0b:56:6e:48:c8:b8:19:
         55:b2:00:92:e5:54:71:50:3f:c3:57:4c:0f:1c:93:92:09:71:
         39:28:1c:cf:5c:da:cb:83:f3:fc:57:b0:bc:47:aa:11:21:ef:
         ba:10:a7:ea:9b:df:fc:7f:00:6f:ba:b9:e6:de:42:74:17:5f:
         34:84:d4:5a:64:1b:b7:3e:14:44:8e:34:08:ab:d5:48:3b:44:
         5c:5f:ba:ab:fe:84:c5:32:f3:ff:9d:e5:ad:73:3e:18:27:3c:
         4e:b7:1a:50:4f:b3:bc:6e:10:ec:df:e0:61:ff:f5:48:52:9f:
         97:96:2e:02:53:aa:1a:92:62:17:65:d5:2d:55:f7:f4:71:3a:
         4b:c5:25:30:6b:23:3a:fa:4b:59:11:b9:ca:f1:54:72:d3:68:
         68:d7:94:56:4f:d8:df:99:d0:b7:20:b2:6e:2b:51:0a:52:ea:
         2b:88:6e:2f:8b:e5:f3:9a:a5:ac:09:eb:09:47:35:74:df:45:
         68:eb:c8:a6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUMpXv75CabkoCeK/Qyir7UGMCZXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBFN0YzM0Q5
NzBGNzEyMDAeFw0yNTA3MDQxMTEyMzBaFw0yNjA3MDMxMTE3MzBaMDMxMTAvBgNV
BAMTKEEwMkNFNDAwQkVGM0VENzNFNEJFNjFFMDFCN0QwMjMxQUQzNEEyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYXyAgFZXQE3xjtXayndx9vao
7v7GGqTLWfmNV3h2liFNncK1/1fYfLTe6EIFMECeLEk3UuOde7KlO5uT4E6XGGuv
dDID8jt3gVwjg0CYMKlGtBa81978HhQt4mTthZqrLvnqRKTY9wEWlbuO76IjtYYE
EY6ur755Ycqi0N1HuSZ3ZE8cQOeR2NPY10khlHFZBoKojPPO95bftnBmGu4AH7UR
MDm9BpenXRU7zNG5uOCHc7gh5x0gii27Ux6Z30PXoEajyiTG9bylTT7Aaz0WdMJA
hz88jkW0qkoE0cKvMi75KM0OzgQyQYlhWUy3/jfG2A+vDwa6h8Q0QojbXsilAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUoCzkAL7z7XPkvmHgG30CMa00orcwHwYDVR0j
BBgwFoAUVYq40eOEwZ4mXDwfQOfzPZcPcSAwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzE3LzU1OEFCOEQxRTM4NEMxOUUyNjVDM0MxRjQwRTdGMzNEOTcwRjcxMjAuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzQvNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBF
N0YzM0Q5NzBGNzEyMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2kuY2MvcmVwby9NeXRoaWNhbEtpdHRlbi8xNy8zMjYxMzAzNzNh
MzUzNDYzMzEzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzNTMwMzIzMjM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYEKgdUwQAwDQYJKoZIhvcNAQELBQADggEBAC+Rfbw7CG+gNTtSsneNfrNd
JhGiuxccO2JVJevwgbn9q72LttZA89uzzQ1KbrtPi+oyKMQJC5zh3/z++Lq/ohxp
C1ZuSMi4GVWyAJLlVHFQP8NXTA8ck5IJcTkoHM9c2suD8/xXsLxHqhEh77oQp+qb
3/x/AG+6uebeQnQXXzSE1FpkG7c+FESONAir1Ug7RFxfuqv+hMUy8/+d5a1zPhgn
PE63GlBPs7xuEOzf4GH/9UhSn5eWLgJTqhqSYhdl1S1V9/RxOkvFJTBrIzr6S1kR
ucrxVHLTaGjXlFZP2N+Z0Lcgsm4rUQpS6iuIbi+L5fOapawJ6wlHNXTfRWjryKY=
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:25:32 2025 by rpki-client