Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a313439303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a313439303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          Pdiv6u4Bxq5Lx5E7ghvcUs+o5fJIvlVmIDzyrdF7jTs=
Subject key identifier:   41:AD:F1:89:0F:FE:87:CF:31:77:34:7F:7F:FC:EB:52:9F:FC:38:10
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       36AD61EDCC0CB54DC31DC8812AFA74EBCA6890B5
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313439303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 16:15:51 +0000
ROA not before:           Sun 24 Mar 2024 16:10:51 +0000
ROA not after:            Sun 23 Mar 2025 16:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:1490::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 14:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ad:61:ed:cc:0c:b5:4d:c3:1d:c8:81:2a:fa:74:eb:ca:68:90:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 16:10:51 2024 GMT
            Not After : Mar 23 16:15:51 2025 GMT
        Subject: CN=41ADF1890FFE87CF3177347F7FFCEB529FFC3810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:fd:5c:5b:5c:5a:02:34:2f:03:51:e0:af:
                    50:41:08:e0:bf:ae:08:07:f0:76:19:c7:06:11:13:
                    54:d3:1f:d8:7e:11:2b:59:45:b3:c8:5c:a6:a0:e0:
                    95:8a:54:60:08:64:2a:d6:18:c0:7e:0a:4c:3a:56:
                    9e:20:a9:44:40:55:6b:cf:23:f1:18:65:c3:b6:68:
                    9f:56:22:4e:01:8d:07:0c:0f:ed:8d:e4:e8:e6:96:
                    7f:85:80:0d:4f:ff:a8:a0:f2:b9:17:f8:80:b0:77:
                    d5:15:5e:4b:28:a7:62:af:b3:88:68:d8:bc:ba:0e:
                    9c:7c:8b:c8:9c:fa:fe:6c:26:ee:8b:3a:9b:31:b0:
                    89:88:47:c4:81:30:c7:4f:1d:34:e1:2b:ef:b4:de:
                    cd:89:46:7a:ef:89:11:d1:e5:04:e0:94:2b:b8:fc:
                    00:33:ed:ed:b7:79:bb:9b:c1:84:06:df:8c:43:2a:
                    d0:5a:e4:a4:93:be:72:00:82:0a:f3:64:cf:e7:7e:
                    e1:2c:2c:65:48:f5:28:85:45:cc:f2:82:f2:61:f8:
                    a8:3c:bd:22:b1:43:94:c2:75:ed:c7:32:ee:ad:42:
                    cf:93:c4:f8:26:93:6d:7a:3c:ec:59:99:90:fe:d6:
                    f1:d6:7f:b4:ca:c5:9f:c4:58:18:ad:86:2d:13:e1:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AD:F1:89:0F:FE:87:CF:31:77:34:7F:7F:FC:EB:52:9F:FC:38:10
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313439303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1490::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:cc:96:83:34:2f:6f:4e:f6:63:d5:d2:b9:d7:74:75:07:
         1d:c6:ce:2a:a8:ac:0a:4a:7d:84:83:3e:de:ce:40:05:e5:93:
         5b:b5:c5:9d:6c:9b:d7:77:0d:9c:6f:2a:88:1f:5b:8b:75:ee:
         34:bf:f0:11:c4:b1:c7:28:20:56:8a:5a:f3:07:07:37:76:aa:
         c4:ce:51:65:b4:5f:93:f7:47:ff:ba:f4:17:09:7d:c3:27:50:
         fb:aa:33:20:c4:e1:39:fb:b6:da:fe:1b:26:08:98:6c:e7:e3:
         8c:10:70:23:f0:dc:1b:ca:17:08:13:93:d8:fa:d9:72:af:47:
         cf:cc:9e:2c:d9:bd:f1:0f:69:20:5e:58:bc:22:f2:84:18:18:
         43:ef:f1:e9:4f:99:7f:dd:3f:70:db:f9:6c:71:d2:d0:98:dc:
         f6:4e:4c:ab:41:11:fc:9e:a0:ce:50:c4:d8:b4:50:2a:3a:49:
         e7:55:65:45:23:02:88:d8:43:46:32:ae:6f:12:19:92:31:3a:
         9b:fb:bf:0d:26:0b:27:a4:0d:f7:f6:21:3d:ad:64:62:f1:80:
         9a:2c:a4:1c:b6:fb:e7:f5:14:8d:6a:08:e4:09:54:77:b2:e3:
         fe:14:d0:63:14:ac:da:55:8f:ae:21:cc:f4:fa:90:ea:60:50:
         14:0e:2b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:55:55 2024 by rpki-client on console-fra.rpki-client.org