Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a313461303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a313461303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          PLh+st/dgKv5UUWL0efO60J55/6ycgk4inq3p8vOLWU=
Subject key identifier:   6C:31:64:86:73:6B:AD:81:15:95:E9:F2:CE:5E:5F:2B:68:63:8B:D8
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       67B245699874323E0C9309364210B24B931AD97A
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313461303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 16:15:51 +0000
ROA not before:           Sun 24 Mar 2024 16:10:51 +0000
ROA not after:            Sun 23 Mar 2025 16:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:14a0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b2:45:69:98:74:32:3e:0c:93:09:36:42:10:b2:4b:93:1a:d9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 16:10:51 2024 GMT
            Not After : Mar 23 16:15:51 2025 GMT
        Subject: CN=6C316486736BAD811595E9F2CE5E5F2B68638BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:a8:ea:00:50:a2:9a:99:55:14:fb:29:1f:
                    c4:89:40:13:62:7c:51:a4:e5:93:33:b9:2f:b8:15:
                    46:e7:57:61:ae:b4:04:09:be:ec:d8:64:71:7a:05:
                    35:17:63:a0:4c:a9:4c:da:55:42:74:27:a3:f0:4a:
                    63:e9:26:7d:2c:1a:af:f1:99:d6:be:ad:40:56:87:
                    f3:58:8a:c7:f2:e7:2b:bd:b8:e1:4f:2d:6c:ac:5a:
                    07:a1:4a:a6:00:56:2f:38:ec:5d:a4:25:4b:82:ad:
                    cf:e7:93:3a:e2:6b:46:33:09:32:69:1a:23:f8:d0:
                    84:a3:f5:58:a8:eb:dd:1c:4b:f0:4f:a0:cc:85:25:
                    82:54:23:d5:03:9b:c0:90:c1:e2:49:88:86:8b:32:
                    fd:e1:31:99:8f:b3:c9:d6:00:79:d3:b1:cf:d8:e4:
                    05:a3:3e:6e:68:bd:25:5f:a1:bb:f2:e2:1b:b7:ee:
                    3b:1f:f5:d3:91:35:b7:75:d2:c7:c5:31:c0:d6:49:
                    88:94:cc:3a:b8:66:ad:c7:f7:1f:0b:86:38:64:2b:
                    bc:0a:17:a6:ca:bf:16:ec:01:af:a0:40:1d:1f:75:
                    45:76:0b:f5:cf:c9:dc:25:91:1a:08:a6:f3:24:91:
                    7f:bb:fa:e1:8e:ce:18:0a:a1:d4:50:1f:95:39:a0:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:31:64:86:73:6B:AD:81:15:95:E9:F2:CE:5E:5F:2B:68:63:8B:D8
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313461303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:14a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:e0:f1:f8:e9:6d:48:33:54:d4:ea:7a:c9:65:e9:ca:ee:
         aa:57:98:34:c5:7f:49:68:3a:ba:39:b0:44:fa:32:ce:93:7e:
         9f:f0:ea:f5:61:d2:0b:99:b5:f1:f3:3e:dd:ee:76:09:ad:73:
         6e:de:1c:d4:b4:f0:58:81:5b:60:f8:3c:37:0c:b2:93:99:e9:
         db:31:ff:3a:74:11:2d:a6:5b:11:d9:1a:84:c9:51:00:7c:8d:
         43:d8:f3:c3:08:e8:7a:eb:c9:10:f7:9b:87:5c:27:d7:2b:33:
         20:5d:68:bd:38:fc:b8:d4:66:cf:8c:10:8b:26:bf:fa:88:42:
         10:8e:b0:65:80:61:dc:c5:df:46:99:ab:da:f4:f3:ed:c9:46:
         08:29:71:8a:13:05:6b:5c:9d:da:cc:df:9f:eb:86:e5:b1:49:
         32:5f:3d:b4:94:7b:ff:06:41:cf:be:39:bd:6e:e7:c1:45:ea:
         36:b0:71:92:81:43:a0:20:34:0e:09:37:79:86:04:bc:30:2b:
         b9:20:f6:a9:64:48:9e:ee:57:96:bf:af:0c:ab:31:9f:9d:83:
         b9:ac:b5:76:46:fa:ab:23:f2:5d:67:ec:f9:0a:7b:b0:28:c9:
         a7:92:d1:70:7c:8d:63:3d:b9:a8:56:86:ba:e5:01:ec:c3:d3:
         2f:47:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:17:33 2024 by rpki-client on console-ams.rpki-client.org