Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a313463303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a313463303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          w0FzZ+0/EhN3Ilo7nT5B1jxst2qpw62XWz0WKp3CPJE=
Subject key identifier:   71:6B:3A:89:6B:58:C6:C9:C5:76:59:20:03:51:AF:C2:7B:F3:69:D3
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       48495985823F34AECA060A39ACEDFBD766812474
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313463303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 16:15:51 +0000
ROA not before:           Sun 24 Mar 2024 16:10:51 +0000
ROA not after:            Sun 23 Mar 2025 16:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:14c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 13:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:49:59:85:82:3f:34:ae:ca:06:0a:39:ac:ed:fb:d7:66:81:24:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 16:10:51 2024 GMT
            Not After : Mar 23 16:15:51 2025 GMT
        Subject: CN=716B3A896B58C6C9C57659200351AFC27BF369D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:74:c3:9d:5e:04:24:30:e1:ad:00:e0:81:7f:
                    01:0c:3f:98:be:ac:46:b2:67:aa:88:c5:04:72:e6:
                    72:9c:d5:f8:72:8d:9c:69:c6:95:82:e1:78:15:b2:
                    d0:97:cb:83:e2:b0:1c:6e:ad:a8:1f:3c:be:61:b4:
                    61:7c:1c:92:c8:0c:c0:0a:66:e5:29:85:1b:bc:7b:
                    e8:da:8d:8e:4f:2b:b1:d5:2e:e5:98:ec:85:a4:8e:
                    dd:af:aa:a6:5a:26:bb:f9:a6:9f:6d:ee:f1:c2:f1:
                    ac:10:4e:fe:29:6f:e5:ac:ce:85:ed:d8:48:33:f4:
                    86:67:99:84:1b:6c:00:46:b3:1e:a8:6c:6d:a6:8c:
                    9b:8d:33:e0:11:71:5d:5e:ec:3b:06:1f:a7:e3:19:
                    96:e4:32:4f:4b:7a:8c:42:ad:d5:8c:ff:77:ea:f8:
                    91:20:7b:12:c5:85:58:d6:a1:e0:cf:b2:4b:1b:03:
                    c6:8b:d5:4f:4c:cc:d4:f1:05:5b:85:0a:13:85:62:
                    53:76:ec:45:41:65:20:bb:24:8c:e7:25:f6:cf:a5:
                    33:f4:0d:bb:a9:e5:a6:e5:1a:05:2c:f3:56:d7:9b:
                    08:03:c4:22:18:04:54:51:73:2b:3f:c8:45:f6:13:
                    93:96:d6:42:f7:c8:42:e5:3c:2c:02:59:df:64:ac:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6B:3A:89:6B:58:C6:C9:C5:76:59:20:03:51:AF:C2:7B:F3:69:D3
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a313463303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:14c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:bb:4a:0c:77:42:d9:0c:fd:e0:5d:e6:43:40:8a:2e:fc:00:
         99:bf:7c:23:7a:b4:3c:6d:c4:af:34:2a:74:0d:9f:3f:9b:33:
         77:31:68:53:05:80:e6:fc:c4:eb:c1:83:d5:03:10:ea:0e:df:
         69:ec:88:67:4f:2b:66:6b:37:09:06:a8:40:86:43:7e:d7:1b:
         ef:39:9c:78:41:9d:39:1d:86:4b:94:28:5f:3a:b7:65:31:a6:
         62:25:1e:c2:7e:65:6d:cc:f7:63:d9:c7:09:7e:b6:31:7b:49:
         5b:a2:90:ab:82:a8:6b:a4:4c:b0:d2:01:a0:43:72:4f:8d:d9:
         0c:b8:37:c2:04:dd:fa:a7:9d:b4:d3:7c:18:d0:41:76:06:19:
         0d:41:cd:1a:29:e0:f2:26:7a:39:90:79:82:43:72:c6:1b:ff:
         ee:6a:dd:17:1d:7e:03:af:90:2c:63:a6:8e:da:dd:2d:63:9e:
         8b:70:eb:15:31:4b:e7:d5:60:5f:9a:8c:fd:b9:2e:75:88:20:
         c2:64:14:8f:17:21:b2:dd:40:8c:5e:1d:d2:91:36:5b:76:fb:
         9f:b7:34:a3:38:34:ad:26:10:de:31:3e:1c:61:54:09:92:07:
         40:45:ea:93:2b:44:1e:8b:41:b8:05:6d:32:88:60:33:c7:1e:
         b7:1d:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:38:01 2024 by rpki-client on console-ams.rpki-client.org