Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a6239303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a6239303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          KUpjaEENvHeFl5xv5WsYy9KDNdiEyz3wPx1MKJpn5WE=
Subject key identifier:   60:15:9B:98:0B:BC:6B:8E:74:C9:67:F3:D2:76:55:07:39:D4:D0:9F
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       15AF0CFCC519BAE1922B772B929AA8F786432082
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6239303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 14:15:51 +0000
ROA not before:           Sun 24 Mar 2024 14:10:51 +0000
ROA not after:            Sun 23 Mar 2025 14:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:b90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:af:0c:fc:c5:19:ba:e1:92:2b:77:2b:92:9a:a8:f7:86:43:20:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 14:10:51 2024 GMT
            Not After : Mar 23 14:15:51 2025 GMT
        Subject: CN=60159B980BBC6B8E74C967F3D276550739D4D09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:33:08:ee:e8:75:89:9f:4f:b0:7f:68:61:
                    34:92:19:f8:d7:50:0b:e9:15:d9:f2:db:0b:90:63:
                    e7:70:6e:bb:d3:f7:99:b6:6d:27:22:15:84:d0:ee:
                    b6:4c:b0:61:5d:28:b9:86:c5:fa:e2:e0:37:61:55:
                    bf:ee:5a:09:64:86:7a:9e:d3:ba:c2:99:66:96:f7:
                    67:e6:96:4c:a8:9a:15:44:aa:62:ec:0b:51:f6:69:
                    9d:1b:41:e7:3c:d1:ef:83:dd:f2:22:73:84:4f:71:
                    25:20:89:a3:90:f4:bc:27:b6:f6:d0:c0:ed:70:0c:
                    94:a7:b9:04:1f:69:f5:99:88:59:7f:e1:42:9b:eb:
                    fa:13:d5:de:cb:ab:cd:74:e3:fb:8b:4f:9c:fa:01:
                    0c:b1:d3:60:9f:bf:84:85:27:62:a2:ca:ec:87:ef:
                    3b:e0:e7:54:18:31:d7:38:a8:48:8c:a8:19:07:f6:
                    aa:fa:5c:00:10:1e:04:56:21:1e:1c:74:f5:ad:e7:
                    3c:52:03:d1:71:90:7d:6e:a9:20:88:05:8f:e9:7c:
                    2e:5f:bd:59:fd:22:7f:78:4d:3e:de:b3:c2:20:c9:
                    35:af:94:5b:1d:20:47:dc:ec:48:6a:c3:e6:fc:c3:
                    01:50:ae:0f:7b:38:a3:a9:db:e3:21:3c:06:a9:e5:
                    6d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:15:9B:98:0B:BC:6B:8E:74:C9:67:F3:D2:76:55:07:39:D4:D0:9F
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6239303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b90::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:b5:d8:c3:83:85:18:87:04:40:c1:3d:05:5a:5c:cb:00:8f:
         46:ab:1c:83:71:d9:61:a8:90:a8:e5:70:25:cf:97:f3:eb:7b:
         cd:ee:3f:54:dd:cf:49:b5:ef:6b:56:31:42:f4:5b:c0:ee:f9:
         4a:24:f0:98:3a:30:2b:67:7d:6b:ae:66:eb:af:27:4b:76:87:
         79:72:8e:7a:8f:17:4f:8d:14:49:11:a8:6a:67:3b:0e:a4:88:
         0c:bd:e3:7a:8b:a3:8e:1e:64:b5:4b:e5:78:eb:f7:22:aa:dd:
         c0:fd:7b:e1:33:86:de:dd:53:65:27:9d:26:f1:a5:10:97:2b:
         c8:2e:95:fb:1f:d0:9d:4e:da:81:7d:51:13:f5:15:72:d0:8f:
         8c:11:b2:1a:ff:fe:e0:92:09:43:09:35:44:9a:5f:10:41:e0:
         c8:f7:fa:d7:c9:15:a0:5c:3c:93:07:69:32:82:40:79:e2:5c:
         fb:cf:2d:a2:dc:9a:e6:f3:ed:5c:5c:2a:a7:07:b0:40:69:c4:
         30:87:ed:8b:84:61:ba:c8:56:f8:3b:69:67:21:69:90:e6:11:
         87:4c:2d:ac:3d:88:20:09:28:e4:c1:24:7d:e3:3c:c2:31:f0:
         35:22:a4:9d:db:df:37:8d:82:48:02:cc:51:b6:5e:c2:dd:d2:
         a2:dd:70:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Mar 27 23:38:52 2024 by rpki-client on console-ams.rpki-client.org