Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a6238303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a6238303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          DrlAWUug1R/d4uXyQvbfV+zs88wS4ucOFzaA5IgBhMg=
Subject key identifier:   80:06:F0:0B:4A:14:10:53:FB:A2:A0:41:E6:47:34:20:17:3E:8E:65
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       6DE758A56289E6D6C4705B0C33A152B53AAA6BBA
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6238303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 14:15:51 +0000
ROA not before:           Sun 24 Mar 2024 14:10:51 +0000
ROA not after:            Sun 23 Mar 2025 14:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:b80::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:58:a5:62:89:e6:d6:c4:70:5b:0c:33:a1:52:b5:3a:aa:6b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 14:10:51 2024 GMT
            Not After : Mar 23 14:15:51 2025 GMT
        Subject: CN=8006F00B4A141053FBA2A041E6473420173E8E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:f2:51:ec:3a:6c:d0:1b:2b:4a:f5:f2:13:
                    f6:cb:18:f9:94:3d:f8:29:61:45:5d:66:39:42:ae:
                    26:79:1b:02:0f:ea:ec:5c:10:cc:12:3a:d1:99:a5:
                    bd:a9:10:60:62:27:23:2b:ab:67:9a:ee:cf:5c:16:
                    ac:be:3a:29:a0:17:ff:02:c9:8b:4f:f6:52:b8:a8:
                    b8:52:0a:5d:20:d4:a8:39:6e:c0:65:b9:49:10:2b:
                    bf:ef:12:38:9d:1a:35:26:c5:a9:b3:d7:eb:58:7f:
                    c8:59:61:66:76:44:85:9d:14:12:94:85:82:1f:e0:
                    b5:33:86:56:e1:99:b9:10:14:ca:de:20:03:b2:88:
                    3d:d2:46:2c:d4:29:b1:e7:ce:84:d6:76:2a:e3:68:
                    cb:4e:09:0e:33:83:9a:1f:69:5e:10:57:aa:73:29:
                    a9:fd:d8:02:43:bb:d7:12:e9:ab:78:9a:e5:35:f3:
                    81:70:58:72:f6:5a:8f:dd:6b:d6:5b:25:f5:ca:e8:
                    fb:30:df:5e:f7:44:bd:6b:2c:6b:f2:c1:5c:50:bb:
                    a1:2b:2b:72:04:91:77:01:aa:d7:ab:eb:ad:2c:08:
                    11:e7:e7:f6:24:11:b0:f1:cb:b4:8d:c1:34:bd:70:
                    df:bd:52:56:12:f1:25:57:67:8b:e4:27:58:2d:fe:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:06:F0:0B:4A:14:10:53:FB:A2:A0:41:E6:47:34:20:17:3E:8E:65
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6238303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b80::/44

    Signature Algorithm: sha256WithRSAEncryption
         af:e9:e2:6c:1c:58:0a:9f:63:7a:03:a9:e0:31:ab:f3:96:bf:
         35:88:08:44:a5:b0:76:60:ab:b4:36:b3:ea:2a:33:40:32:b8:
         0f:6d:59:d3:1b:4b:0b:5e:8a:94:be:86:ca:e6:da:36:7d:27:
         34:dd:c1:40:20:b4:41:1f:9c:3f:a5:a4:39:01:9e:ad:0e:af:
         a3:7c:ce:d4:7b:1c:c8:e1:bb:d5:7d:85:93:b2:5e:7d:2a:78:
         de:f2:40:9a:5a:c9:41:c8:cd:5d:1c:47:83:7b:e4:0b:2e:59:
         38:a7:af:47:ff:aa:0b:27:e3:aa:0b:cd:8e:7d:9f:d4:c4:61:
         9a:2b:91:b1:3d:cb:2e:af:d4:6b:fe:ba:1a:18:c1:2a:e0:9b:
         1f:2c:11:2e:20:7b:6c:f2:0c:d5:61:08:cc:ad:aa:c6:ed:38:
         7d:54:66:27:22:d9:fc:4a:49:77:a3:49:bb:f5:5a:76:dc:38:
         f6:ed:7f:c4:d9:4e:e6:be:37:d5:81:33:35:63:4b:74:ea:88:
         4c:82:49:c0:c5:d2:be:a1:b0:4f:af:e9:0b:52:f7:e9:83:e8:
         05:d3:43:86:df:65:3d:40:b8:a3:86:5e:4b:3c:3a:5a:46:a4:
         f8:15:31:ac:4f:d7:67:7c:90:b4:e4:75:13:29:a3:cb:38:14:
         e9:fe:47:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 27 03:17:33 2024 by rpki-client on console-ams.rpki-client.org