Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3438203d3e203530323234.roa
File:                     326130373a353463313a3a2f33362d3438203d3e203530323234.roa (raw, json)
Hash identifier:          ZmcK78qIBqH90jm4Drct7PjIhthQD4huX6ZS7RVV2bw=
Subject key identifier:   CB:77:1D:7A:73:47:46:1A:BF:E7:FF:6F:B3:1C:FF:B2:72:F7:CB:81
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       0E473E7992C66DB85176817016CE809EA31BCE5E
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3438203d3e203530323234.roa
Signing time:             Fri 05 Jun 2026 12:04:24 +0000
ROA not before:           Fri 05 Jun 2026 11:59:24 +0000
ROA not after:            Fri 04 Jun 2027 12:04:24 +0000
asID:                     50224
IP address blocks:        2a07:54c1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:47:3e:79:92:c6:6d:b8:51:76:81:70:16:ce:80:9e:a3:1b:ce:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jun  5 11:59:24 2026 GMT
            Not After : Jun  4 12:04:24 2027 GMT
        Subject: CN=CB771D7A7347461ABFE7FF6FB31CFFB272F7CB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:e5:9f:66:69:ac:b0:c3:5d:c9:80:49:8b:
                    c4:bd:00:09:61:0d:eb:60:f5:1b:52:31:dc:6d:ff:
                    a7:0c:63:2e:0b:f0:ba:3f:81:c0:be:38:7c:64:56:
                    de:a2:87:55:9f:ac:3f:88:d6:fc:d5:67:15:0d:32:
                    b8:e3:f7:a2:58:d0:8e:23:69:03:e5:0b:25:d3:ef:
                    5a:3b:6b:d5:ec:cb:f3:f4:74:42:da:c6:70:08:1f:
                    69:42:af:07:5f:ac:f8:65:04:1a:7f:4a:d2:22:cf:
                    21:6d:49:e0:0f:4d:a3:33:b2:87:b0:76:76:b3:6e:
                    ae:85:a0:3b:dc:26:48:06:00:eb:2c:b6:70:7c:f6:
                    51:ff:bf:e0:b6:61:a2:5e:18:45:92:82:fe:cf:02:
                    a0:a6:19:c2:8d:f2:f7:a0:1b:55:20:7e:02:70:b0:
                    d1:e4:a6:8f:68:e3:43:43:55:a6:cd:b3:52:0c:19:
                    ff:5c:b7:53:6d:82:79:5d:7a:8b:00:26:fe:9b:3b:
                    12:c1:ee:7d:07:e9:0f:ac:b3:0e:3b:c5:d5:2a:f8:
                    ca:b1:83:20:00:2e:1f:04:27:d4:1b:88:d5:75:9f:
                    ff:ff:f6:35:e4:cc:39:1d:77:59:93:8c:5a:8e:aa:
                    36:fb:af:f7:41:ad:ee:8e:b4:58:3b:4e:71:36:89:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:77:1D:7A:73:47:46:1A:BF:E7:FF:6F:B3:1C:FF:B2:72:F7:CB:81
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a3a2f33362d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:c4:57:8b:b5:af:76:0e:1d:81:56:b9:13:17:3b:91:37:73:
         1b:55:31:42:1a:70:14:b6:c3:01:a9:9e:c8:a9:b0:89:cf:16:
         1e:79:ba:e8:a5:96:f8:93:15:31:91:76:2f:78:e9:bb:bd:7e:
         fe:23:12:7a:1e:2c:b4:13:f4:e2:f2:56:2b:44:74:7a:55:68:
         40:be:06:b5:78:2e:b4:af:3a:33:1d:ff:9a:63:63:99:f7:68:
         6f:89:75:b8:a3:e3:fc:d6:89:3d:b4:18:b5:ec:b5:fe:e2:a9:
         93:39:6c:a4:c8:cc:2c:33:66:f8:42:ac:61:c9:1f:8b:2b:31:
         79:e7:54:15:a0:bf:18:91:a9:f1:08:e0:50:6d:f6:29:b6:2f:
         ac:64:0c:89:04:1f:8f:17:f9:32:f6:b0:54:27:58:42:81:89:
         7a:9d:67:3d:27:32:40:0a:e8:e2:05:5e:4a:c6:6e:19:24:96:
         d9:c6:15:e3:c1:29:fd:d4:5e:f3:75:49:32:5e:a8:e4:75:41:
         a5:5e:2e:e4:f6:de:64:4b:a3:87:a1:fb:a7:86:52:73:ee:95:
         3f:40:56:67:95:76:17:33:9d:13:06:f7:93:25:aa:24:f0:25:
         6e:6b:62:b5:2d:2b:1d:24:dd:eb:0d:08:0e:d0:df:c9:d4:68:
         37:63:04:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:58:30 2026 by rpki-client