Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/5/323630323a666163323a363a3a2f34382d3438203d3e2030.roa
File:                     323630323a666163323a363a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          YKZjG6wpG8IBUmYOElGaIn2Uk8tClJvEkp2eJNlU4kg=
Subject key identifier:   3C:AA:FB:2A:DB:1D:E2:06:27:E0:C9:5C:A2:19:B5:E0:61:9A:DF:32
Certificate issuer:       /CN=D90A2CAF3A5960F41FF092B680098C21E44AF2F1
Certificate serial:       0D4A4A2D82A3177C909580BDEFB455B3AF23DF37
Authority key identifier: D9:0A:2C:AF:3A:59:60:F4:1F:F0:92:B6:80:09:8C:21:E4:4A:F2:F1
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/D90A2CAF3A5960F41FF092B680098C21E44AF2F1.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/5/323630323a666163323a363a3a2f34382d3438203d3e2030.roa
Signing time:             Mon 18 Mar 2024 11:02:20 +0000
ROA not before:           Mon 18 Mar 2024 10:57:20 +0000
ROA not after:            Mon 17 Mar 2025 11:02:20 +0000
asID:                     0
IP address blocks:        2602:fac2:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/5/D90A2CAF3A5960F41FF092B680098C21E44AF2F1.crl
                          rsync://rpki.cc/repo/MythicalKitten/5/D90A2CAF3A5960F41FF092B680098C21E44AF2F1.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/D90A2CAF3A5960F41FF092B680098C21E44AF2F1.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 23:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4a:4a:2d:82:a3:17:7c:90:95:80:bd:ef:b4:55:b3:af:23:df:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90A2CAF3A5960F41FF092B680098C21E44AF2F1
        Validity
            Not Before: Mar 18 10:57:20 2024 GMT
            Not After : Mar 17 11:02:20 2025 GMT
        Subject: CN=3CAAFB2ADB1DE20627E0C95CA219B5E0619ADF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:3f:91:7f:31:e4:9d:b2:2e:6b:f5:d8:03:
                    6e:e6:ca:03:03:9e:47:bf:80:bb:2e:fa:e9:14:ca:
                    a6:98:fc:6e:b7:34:22:12:ea:9d:06:3d:cb:fd:a2:
                    d7:ad:07:e6:18:d5:85:19:5d:f1:7c:b3:ed:21:a9:
                    16:c7:16:b9:17:73:70:8d:e9:5b:76:5e:6a:77:84:
                    ce:24:a9:5b:68:40:a8:63:4e:c3:8a:96:34:9d:de:
                    c2:9b:09:d4:6a:53:f6:db:76:54:b9:b6:72:56:c5:
                    b8:83:e5:19:cd:be:91:a4:3d:bd:5e:b9:61:70:ab:
                    c5:94:c7:1d:6a:0b:b1:9a:e3:63:22:2f:36:06:f7:
                    db:a1:ae:bf:23:0a:29:ef:bd:56:da:f2:e7:67:92:
                    2f:5d:1a:39:ed:6d:fa:b3:62:d6:ca:fd:00:53:32:
                    37:e2:c1:42:7e:5b:42:0c:e3:fb:dc:0a:e4:60:78:
                    89:d0:03:31:05:15:d7:d7:8b:c1:98:17:fe:83:c4:
                    16:e2:6f:eb:ed:51:97:14:16:e1:a6:c6:23:2a:0d:
                    46:30:41:b5:8d:01:cd:dc:cd:4c:d3:65:5a:8c:b0:
                    be:39:f4:85:23:af:06:61:d5:25:ab:86:d1:e8:9a:
                    37:06:3a:0b:dd:26:fe:8b:3b:30:65:ad:2c:d1:21:
                    45:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AA:FB:2A:DB:1D:E2:06:27:E0:C9:5C:A2:19:B5:E0:61:9A:DF:32
            X509v3 Authority Key Identifier:
                keyid:D9:0A:2C:AF:3A:59:60:F4:1F:F0:92:B6:80:09:8C:21:E4:4A:F2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/5/D90A2CAF3A5960F41FF092B680098C21E44AF2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/D90A2CAF3A5960F41FF092B680098C21E44AF2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/5/323630323a666163323a363a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:61:e1:4b:74:4d:e1:d3:5b:18:63:b5:fd:ec:d4:75:6a:
         12:2d:2b:c5:de:66:78:fe:eb:77:0c:b4:c3:7e:72:bd:7c:ce:
         4b:05:78:a6:d5:9e:67:76:74:da:d6:68:15:30:66:a0:c0:8e:
         39:61:70:a8:fa:46:cf:55:cb:a8:7a:1e:54:e9:47:1c:a1:d2:
         98:fe:f4:be:e6:d1:46:4e:01:b0:bb:ff:91:cb:0c:2c:77:4e:
         fc:fa:22:68:c2:fd:94:31:3e:03:05:2b:4c:c6:b4:76:4d:b2:
         0b:f1:55:fc:e3:29:70:c4:45:6c:6a:6c:ad:ee:0a:73:c9:99:
         37:fa:36:8b:32:a3:32:c0:3f:9f:63:44:70:de:06:76:42:9a:
         14:3e:84:2c:e8:46:86:7a:65:99:56:99:0e:b1:0d:d1:08:ca:
         8c:3a:49:e0:7c:d6:0c:85:0e:dd:37:76:2b:f9:a3:2c:13:0c:
         eb:e9:7b:77:89:96:b0:cf:35:36:c9:b9:fe:a8:a6:59:9d:94:
         0e:bd:a8:ec:ce:ef:73:98:33:d4:53:65:41:18:3d:75:bd:0e:
         7a:f1:c2:be:3d:9a:21:92:a4:0b:c1:e8:92:42:24:10:d6:34:
         14:a9:7b:4e:3e:3f:b3:f0:05:bc:97:64:96:44:88:7c:4b:cd:
         d2:6d:3a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:20:03 2024 by rpki-client on console-ams.rpki-client.org