Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a313462303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a313462303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          QlM/Or4/Oc3lHdHix/5MWhO7Uum6s3kavCgiLJ1zSvM=
Subject key identifier:   12:D0:D4:02:71:66:FD:A8:81:45:B5:DA:A8:82:A2:35:86:00:46:03
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       6C6DA9D48DA4D3699DA34AAAD3F8D7C2153B4F2F
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313462303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 16:15:51 +0000
ROA not before:           Sun 24 Mar 2024 16:10:51 +0000
ROA not after:            Sun 23 Mar 2025 16:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:14b0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6d:a9:d4:8d:a4:d3:69:9d:a3:4a:aa:d3:f8:d7:c2:15:3b:4f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 16:10:51 2024 GMT
            Not After : Mar 23 16:15:51 2025 GMT
        Subject: CN=12D0D4027166FDA88145B5DAA882A23586004603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:e5:7e:f5:90:0a:2b:51:63:5c:13:4f:0a:
                    82:9f:ea:45:c1:c6:dd:c2:5e:78:38:c3:d4:77:86:
                    e8:87:a2:fe:d7:32:75:21:7d:83:f9:a9:04:3c:27:
                    5f:58:dc:5f:eb:c8:43:0c:eb:a9:a5:e1:c7:3f:eb:
                    16:eb:da:36:fa:79:33:73:7f:7c:6f:1b:49:98:ba:
                    2a:c1:1f:95:c1:ee:8a:35:ca:59:25:41:03:43:cd:
                    0e:14:ea:79:6f:1d:ce:a2:d6:83:03:14:76:41:19:
                    94:97:94:fe:e8:2d:1f:c0:24:37:45:88:5f:d6:95:
                    66:d7:9b:fc:eb:6f:ac:d4:81:55:00:de:aa:c9:08:
                    b1:2a:53:5f:6e:6b:5b:88:5f:9b:02:21:42:7c:fe:
                    91:93:fe:0c:fc:44:36:f5:59:e6:e4:62:13:98:c4:
                    a7:62:65:ea:b6:ce:39:01:83:76:6e:dc:c4:26:0b:
                    0c:e5:16:d7:5b:e3:c4:fe:75:22:f0:bb:95:49:7a:
                    4a:8f:bc:9d:c6:7e:c2:5a:12:69:2c:56:67:16:35:
                    72:03:0d:16:95:3b:82:f3:30:39:f0:f1:a5:9c:fb:
                    54:dd:f7:92:9d:3e:d0:35:cf:84:ad:0f:4c:2f:df:
                    6f:13:b3:27:a3:c9:f6:d6:be:a7:2c:a0:b4:4c:1e:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D0:D4:02:71:66:FD:A8:81:45:B5:DA:A8:82:A2:35:86:00:46:03
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313462303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:14b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         00:57:dd:c2:7a:b4:e0:ed:9f:45:46:27:30:1b:05:55:20:78:
         d3:e3:c2:3a:1f:d2:1a:e7:52:48:93:99:39:82:dd:d1:cf:85:
         c4:3f:b4:04:e4:3d:72:70:a7:ce:9b:97:56:60:e0:9b:07:e2:
         70:d3:02:37:fb:81:b4:ac:8f:8a:75:c5:7c:ed:14:b7:b0:51:
         a3:36:b1:f3:e1:e3:95:1a:82:2e:bd:e2:a4:39:ba:5f:2e:0c:
         25:d9:74:2a:16:70:88:9b:fc:79:35:b4:d6:a3:b7:82:c3:9a:
         dd:53:27:3b:ce:df:5e:86:b7:38:e2:63:f5:5b:0a:73:10:5b:
         81:2a:c5:4c:07:49:e8:a0:b4:77:6b:85:eb:fb:26:77:1e:0d:
         f4:b1:06:5b:96:2d:6f:d4:e3:2a:95:47:23:19:4f:49:ec:6f:
         be:96:54:87:dd:04:24:22:f3:73:32:ba:6e:74:ab:d1:ae:7e:
         85:38:17:57:27:4b:fb:ac:e3:c0:36:65:7a:c5:6f:21:4e:cc:
         86:24:65:b0:5f:3c:98:04:93:f5:f7:e1:a3:18:78:8e:8c:05:
         37:ee:0f:e7:28:d3:ea:c2:34:32:d8:c8:5e:ff:3d:7e:31:49:
         9d:58:90:bf:f9:3f:0b:e3:7b:3d:4e:4c:a0:7d:57:a7:8f:dd:
         77:fa:48:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:17:33 2024 by rpki-client on console-ams.rpki-client.org