Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a6237303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a6237303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          dGeJRH25qNAo8IvEOscjiArbdj0KXvBKeYBoNvq5/gA=
Subject key identifier:   07:5A:08:DA:82:4B:FE:81:06:84:93:62:6F:F0:CD:EF:1B:EC:DE:77
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       5EA8AA78835EF4DA564C551FA5069EE4CD10D4AB
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6237303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 14:15:51 +0000
ROA not before:           Sun 24 Mar 2024 14:10:51 +0000
ROA not after:            Sun 23 Mar 2025 14:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:b70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 21:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a8:aa:78:83:5e:f4:da:56:4c:55:1f:a5:06:9e:e4:cd:10:d4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 14:10:51 2024 GMT
            Not After : Mar 23 14:15:51 2025 GMT
        Subject: CN=075A08DA824BFE81068493626FF0CDEF1BECDE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:1f:48:b2:8b:ba:fc:d8:e6:50:57:20:d7:
                    4c:30:45:2e:4b:b1:9f:be:1c:b8:ad:10:24:a6:2d:
                    cd:2a:d5:c3:e4:75:3c:d9:76:70:6f:c8:96:64:c4:
                    6f:94:d2:c5:29:45:14:f2:4f:0a:2f:f4:da:fe:19:
                    bd:69:61:46:da:c0:d5:00:50:15:3e:fd:bc:88:cb:
                    be:33:bc:e4:05:81:a6:bd:2c:6a:20:9a:bd:cb:54:
                    76:a1:c1:19:60:9e:95:5d:e9:7d:e1:38:43:92:b7:
                    8e:eb:a5:90:ed:7c:8b:58:dc:51:7b:4d:a0:d2:24:
                    3a:ed:ec:65:88:fa:9d:96:91:18:1a:3b:65:3a:c5:
                    bd:7e:f4:be:e0:67:b4:f7:2c:b3:b5:47:dd:f7:e8:
                    29:5d:2c:43:c0:bf:77:d9:0c:25:c1:3a:81:ad:35:
                    5a:6b:18:ad:dd:dc:69:15:a7:02:87:da:13:ec:b5:
                    51:f8:77:e7:51:97:eb:5c:40:23:a2:d3:32:f8:5d:
                    49:b6:d1:81:1f:e0:bf:cb:e5:97:ac:24:65:f7:a1:
                    c9:ca:45:1c:63:03:31:32:38:bd:e9:f2:cb:35:83:
                    0f:ff:43:ea:4a:0d:4e:32:6d:0f:fa:74:24:67:6c:
                    bd:67:3e:9a:b4:d2:2b:17:8f:ae:88:bb:b6:ed:d9:
                    9b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5A:08:DA:82:4B:FE:81:06:84:93:62:6F:F0:CD:EF:1B:EC:DE:77
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6237303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b70::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:a0:bd:ec:98:d2:4b:67:57:26:79:d6:2e:a1:6c:4b:50:72:
         b9:8b:3d:78:59:9e:0c:0e:85:49:91:e2:c3:dc:99:c5:a2:db:
         ce:0c:13:f5:cb:d8:b1:14:01:98:ac:c9:08:b0:31:79:2d:bf:
         c1:c5:38:4f:d6:56:22:d0:f4:86:c3:96:82:ed:d8:4e:61:b8:
         92:db:40:96:87:2e:5f:e4:72:0b:95:d3:ea:a3:06:30:39:3d:
         05:00:19:86:ad:a4:97:97:0b:50:a3:aa:a4:41:bc:f7:76:3a:
         39:ce:de:b1:87:73:01:80:48:70:f8:55:dc:f4:83:fa:7c:98:
         80:3e:47:41:6f:d8:ef:db:ae:df:c1:35:92:d1:3a:58:a1:50:
         cb:25:61:7e:ad:56:b7:57:13:2e:45:6a:e0:33:15:b0:06:4f:
         93:f7:0e:d1:ed:e0:98:d1:b0:b0:4f:be:c3:bb:74:48:9e:ef:
         45:af:c2:54:42:db:ea:a2:e1:fa:cb:aa:35:1a:00:30:50:64:
         6b:25:ae:bb:0d:65:1c:4f:37:68:00:37:8b:3b:d7:2c:c4:66:
         fa:a0:f4:2f:9b:6b:82:61:39:47:05:4a:aa:2b:11:0c:a7:b1:
         ad:d9:d1:b5:5c:18:a4:15:43:59:fb:bc:e2:3d:44:3e:2f:47:
         07:dd:fe:de
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUXqiqeINe9NpWTFUfpQae5M0Q1KswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE5MzBEQTQyQUY3ODA1NzdCQTczNkYwRTIyRUVBRTk0
RjhEQjI5MzAeFw0yNDAzMjQxNDEwNTFaFw0yNTAzMjMxNDE1NTFaMDMxMTAvBgNV
BAMTKDA3NUEwOERBODI0QkZFODEwNjg0OTM2MjZGRjBDREVGMUJFQ0RFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvox9Isou6/NjmUFcg10wwRS5L
sZ++HLitECSmLc0q1cPkdTzZdnBvyJZkxG+U0sUpRRTyTwov9Nr+Gb1pYUbawNUA
UBU+/byIy74zvOQFgaa9LGogmr3LVHahwRlgnpVd6X3hOEOSt47rpZDtfItY3FF7
TaDSJDrt7GWI+p2WkRgaO2U6xb1+9L7gZ7T3LLO1R9336CldLEPAv3fZDCXBOoGt
NVprGK3d3GkVpwKH2hPstVH4d+dRl+tcQCOi0zL4XUm20YEf4L/L5ZesJGX3ocnK
RRxjAzEyOL3p8ss1gw//Q+pKDU4ybQ/6dCRnbL1nPpq00isXj66Iu7bt2ZtJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUB1oI2oJL/oEGhJNib/DN7xvs3ncwHwYDVR0j
BBgwFoAUupMNpCr3gFd7pzbw4i7q6U+NspMwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzcvQkE5MzBEQTQyQUY3ODA1NzdCQTczNkYwRTIyRUVBRTk0RjhEQjI5My5jcmww
gZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJw
cy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1Yzkx
YmUzZjlkLzIvQkE5MzBEQTQyQUY3ODA1NzdCQTczNkYwRTIyRUVBRTk0RjhEQjI5
My5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtp
LmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vNy8zMjYxMzAzNjNhNjEzMDMwMzUzYTYy
MzczMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzAzMzM2MzMzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCoGoAULcDANBgkqhkiG9w0BAQsFAAOCAQEAI6C97JjSS2dXJnnWLqFsS1By
uYs9eFmeDA6FSZHiw9yZxaLbzgwT9cvYsRQBmKzJCLAxeS2/wcU4T9ZWItD0hsOW
gu3YTmG4kttAlocuX+RyC5XT6qMGMDk9BQAZhq2kl5cLUKOqpEG893Y6Oc7esYdz
AYBIcPhV3PSD+nyYgD5HQW/Y79uu38E1ktE6WKFQyyVhfq1Wt1cTLkVq4DMVsAZP
k/cO0e3gmNGwsE++w7t0SJ7vRa/CVELb6qLh+suqNRoAMFBkayWuuw1lHE83aAA3
izvXLMRm+qD0L5trgmE5RwVKqisRDKexrdnRtVwYpBVDWfu84j1EPi9HB93+3g==
-----END CERTIFICATE-----
Generated at Fri Apr 19 13:27:49 2024 by rpki-client on console-ams.rpki-client.org