Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a6264303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a6264303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          MYz5VRtndJGBKjjeAs71tUIlkh5Px2nM4tADkbzxFE4=
Subject key identifier:   F2:85:1F:E3:5B:3B:6D:01:C3:EF:80:0A:A9:C8:C4:BA:C3:6D:A9:AA
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       0A1EC5ADE53565F5414D37D982431FA195531C66
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6264303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 14:15:51 +0000
ROA not before:           Sun 24 Mar 2024 14:10:51 +0000
ROA not after:            Sun 23 Mar 2025 14:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:bd0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Apr 2024 07:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1e:c5:ad:e5:35:65:f5:41:4d:37:d9:82:43:1f:a1:95:53:1c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 14:10:51 2024 GMT
            Not After : Mar 23 14:15:51 2025 GMT
        Subject: CN=F2851FE35B3B6D01C3EF800AA9C8C4BAC36DA9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:67:66:29:48:31:25:e9:38:f6:f0:20:5a:
                    29:8e:0c:c8:8d:7e:27:db:d5:c2:1a:54:a9:25:68:
                    7d:9b:0e:94:a2:77:05:40:2e:a2:f2:15:d4:b5:7d:
                    16:63:3a:50:f4:f2:7d:cf:ee:09:5c:a2:c6:cb:75:
                    47:ca:5e:56:c5:cc:75:50:5c:0e:18:9b:44:95:16:
                    e1:2d:ea:8a:01:2b:26:c9:19:9a:00:91:5e:1f:53:
                    da:38:25:a2:56:47:1f:91:11:79:76:9f:27:ab:2a:
                    53:16:0a:db:81:53:5c:ea:82:58:08:2f:a6:47:82:
                    20:05:3e:11:ce:63:7e:19:3b:6d:22:83:57:8a:b7:
                    3b:98:5f:1c:ad:70:a6:01:a1:27:8a:fd:06:83:24:
                    8f:4c:b6:98:c4:63:bd:93:9a:b7:9f:a9:11:04:32:
                    c2:f6:a4:76:88:1f:32:18:6c:3a:18:a0:95:72:f6:
                    8a:31:aa:e5:5c:db:43:41:48:a4:0b:d1:85:19:03:
                    27:98:b2:46:da:18:bc:1a:50:26:a7:6c:aa:85:b3:
                    7a:dc:59:15:1b:0d:f3:61:8a:9d:80:d0:d8:49:66:
                    2c:87:4a:7d:63:e6:06:72:24:43:73:2e:c8:32:80:
                    78:81:24:7c:04:f7:93:de:63:af:ac:70:40:7c:6f:
                    3b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:85:1F:E3:5B:3B:6D:01:C3:EF:80:0A:A9:C8:C4:BA:C3:6D:A9:AA
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6264303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:bd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         bc:fe:03:84:5d:3c:65:05:77:8a:3a:a6:b6:af:43:23:9c:1f:
         e2:04:82:b4:71:c2:13:d9:27:f0:9e:50:de:45:67:00:8f:63:
         0c:45:9d:a6:77:4d:ee:5e:81:5a:74:71:34:39:14:33:a8:1f:
         72:79:eb:e7:43:98:2f:9a:42:c1:6a:2f:5b:97:88:70:40:60:
         94:32:83:70:59:7a:8e:43:cc:c4:23:22:c9:d8:08:aa:e7:fd:
         41:16:fe:e6:37:e5:d3:ff:40:b6:d3:9a:9e:29:e6:f9:da:cc:
         52:4a:d4:8e:4f:d4:b1:d7:26:4d:6f:76:40:3e:9f:21:03:d0:
         9e:12:99:79:37:81:b6:86:01:3d:1f:5f:69:e2:47:bb:0a:97:
         1c:2b:91:02:a4:a2:81:10:5f:fb:d2:da:bd:e8:c3:e0:cc:07:
         c9:3f:db:82:93:43:46:e2:42:08:64:e3:08:bf:ce:be:f6:8e:
         80:14:22:ed:c8:11:de:2f:b7:76:9e:12:50:0c:f6:17:96:48:
         17:42:d2:97:9f:61:0a:2a:84:04:45:37:3d:ab:7b:de:4b:05:
         aa:d0:96:69:a5:74:f4:ab:a8:7f:a2:a6:ec:55:b0:8c:03:dc:
         b0:2b:c5:bd:a8:0c:ed:86:88:b8:81:48:cc:70:ba:f3:b1:07:
         a2:68:ec:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 23 22:56:54 2024 by rpki-client on console-ams.rpki-client.org