Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a313034303a3a2f34342d3434203d3e203438353831.roa
File:                     326130363a613030353a313034303a3a2f34342d3434203d3e203438353831.roa (raw, json)
Hash identifier:          11aihDH1YzobEedx33gGRGX6uqrw71nsNRIx6QkzorE=
Subject key identifier:   93:AA:1D:4A:E8:DA:65:E0:1D:F3:15:54:75:5E:C8:6B:27:3A:9C:92
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       1F9D3918431D4B5A63C6FF0B461D692CF38A4CEA
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313034303a3a2f34342d3434203d3e203438353831.roa
Signing time:             Sun 24 Mar 2024 09:15:51 +0000
ROA not before:           Sun 24 Mar 2024 09:10:51 +0000
ROA not after:            Sun 23 Mar 2025 09:15:51 +0000
asID:                     48581
IP address blocks:        2a06:a005:1040::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 14:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9d:39:18:43:1d:4b:5a:63:c6:ff:0b:46:1d:69:2c:f3:8a:4c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 09:10:51 2024 GMT
            Not After : Mar 23 09:15:51 2025 GMT
        Subject: CN=93AA1D4AE8DA65E01DF31554755EC86B273A9C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:43:42:9b:5d:51:5b:98:96:a1:4f:3a:7e:
                    f4:d6:c8:39:8a:86:3e:ad:c5:11:0d:47:95:d7:76:
                    70:c8:db:41:29:24:86:f0:8f:23:10:1c:34:5a:3c:
                    81:7c:a5:22:f2:32:b3:d0:3c:3a:6e:7c:22:22:ef:
                    fd:c1:6e:dc:ca:00:62:90:42:e3:44:96:a7:29:50:
                    88:2b:79:9e:d4:83:62:34:64:e8:d1:4c:7b:08:05:
                    93:96:56:2f:f4:b4:ba:3f:30:6f:00:d5:49:e8:87:
                    d4:93:6e:5d:c3:46:29:df:ae:33:ec:3f:d8:ae:9f:
                    0f:d2:c2:22:fd:39:20:14:5e:1b:82:50:84:88:db:
                    8c:1d:94:57:18:58:23:76:d8:d3:90:b5:1d:24:28:
                    11:93:e3:0b:75:f7:74:b9:3d:77:05:d4:63:35:d6:
                    c0:c0:fb:15:85:99:51:70:ec:e8:48:a2:bc:1c:c2:
                    e9:77:ad:b9:d8:fb:27:f7:38:02:d6:19:48:99:ad:
                    66:b3:32:5d:a5:67:d6:b4:cc:5a:fd:b7:08:bd:e9:
                    e7:4e:a1:8e:a4:3e:e7:c2:8a:e6:58:4f:a3:63:26:
                    80:4c:eb:91:f0:42:fc:8e:68:24:54:4f:17:e6:41:
                    59:ae:58:49:f1:92:7c:bc:8c:eb:61:74:33:30:31:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AA:1D:4A:E8:DA:65:E0:1D:F3:15:54:75:5E:C8:6B:27:3A:9C:92
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313034303a3a2f34342d3434203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1040::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:c2:d6:40:9d:c2:41:ba:23:a9:c8:e8:15:1b:72:1f:9c:91:
         8c:ba:57:db:29:b2:1c:6a:c8:75:bd:34:8e:b6:04:ef:e1:a7:
         d9:8e:6e:96:f8:24:bc:5e:66:93:27:9f:e5:93:a2:fa:83:df:
         bf:d2:68:fb:90:9a:9d:6a:94:38:b0:36:7c:7f:15:6c:cf:36:
         6b:92:18:a5:ee:46:45:c4:bb:b3:d2:0c:6d:99:30:32:10:52:
         d1:6d:ae:64:c3:be:c7:2c:ee:d1:ad:3a:ec:a3:aa:a6:fb:6a:
         fb:cd:3b:85:b4:af:07:1f:3d:19:f2:99:f9:d5:33:62:8b:45:
         21:0c:62:94:ef:0e:95:09:3c:42:0f:5c:68:a4:56:dc:b0:8a:
         36:7c:6b:43:16:00:db:cb:ac:e2:77:fb:9b:83:31:64:a6:77:
         9d:9f:9b:16:51:2b:4e:47:ed:52:e7:04:10:cf:4a:15:f7:92:
         5f:51:5d:f7:e7:47:98:49:a9:2f:7f:90:2d:7f:93:17:29:8c:
         22:70:b7:12:f6:df:bc:83:d9:ef:37:ab:7d:11:94:54:0b:d9:
         8a:56:13:1a:72:55:25:77:e6:90:b7:83:79:14:be:e8:c2:d9:
         b8:30:56:12:be:49:ed:32:dd:1c:08:92:0b:f6:97:35:18:f6:
         e1:8c:5b:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:55:55 2024 by rpki-client on console-fra.rpki-client.org