Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a6265303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a6265303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          8k2sshZK2NcYXZ1KSQ+6aU/SVJoX6YttxlpaSYCnHD4=
Subject key identifier:   77:CD:36:85:62:11:F6:A7:D1:F4:44:95:9E:30:5D:1B:6E:60:65:18
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       5FDAA24366E0C6E95AB76199653CBA67A8F2A432
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6265303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 14:15:51 +0000
ROA not before:           Sun 24 Mar 2024 14:10:51 +0000
ROA not after:            Sun 23 Mar 2025 14:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:be0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Apr 2024 09:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:da:a2:43:66:e0:c6:e9:5a:b7:61:99:65:3c:ba:67:a8:f2:a4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 14:10:51 2024 GMT
            Not After : Mar 23 14:15:51 2025 GMT
        Subject: CN=77CD36856211F6A7D1F444959E305D1B6E606518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:9c:f6:74:4a:a9:07:f3:15:6d:c8:85:94:
                    ef:33:36:92:46:1c:e7:6a:34:42:30:30:17:16:e3:
                    e7:fc:af:46:1e:67:fb:1c:a1:5f:f3:3b:57:07:bd:
                    df:ca:84:de:b9:40:c3:27:64:fd:d9:92:12:f8:75:
                    34:e3:e3:0c:c3:ab:47:4a:b8:fa:38:5d:9c:e3:b1:
                    d7:51:77:7f:f0:c5:75:1e:ee:73:1a:2e:03:a4:0f:
                    0e:ef:56:ff:f4:5e:cf:49:35:e4:82:18:e8:12:71:
                    4a:1f:63:7e:65:02:da:a1:48:4e:50:27:a7:94:d2:
                    34:6d:e5:99:1c:89:15:28:f6:87:dd:24:40:0d:d6:
                    4f:cc:e4:08:c7:37:1b:33:be:66:d4:72:9a:18:72:
                    3f:ec:5b:fd:37:72:b4:fc:37:28:c9:71:d6:05:03:
                    4c:c6:45:4c:9c:8c:8d:62:cc:d5:d4:4f:d5:43:d3:
                    bc:17:e9:7f:28:a0:1d:dc:87:47:8c:ef:b8:7e:9c:
                    92:7e:2c:f7:b6:a0:2a:04:97:e8:0f:13:35:6f:58:
                    11:41:3b:7d:f9:50:ed:73:5a:c5:13:e2:96:6d:66:
                    04:4e:2d:d1:c3:07:e5:78:8f:5e:23:34:b8:74:cd:
                    c3:6a:a5:79:24:86:8a:68:c8:f6:7f:2d:76:51:7d:
                    f4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:36:85:62:11:F6:A7:D1:F4:44:95:9E:30:5D:1B:6E:60:65:18
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6265303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:8d:5d:e7:2e:37:e9:c1:18:0e:85:1f:be:0f:60:aa:0d:
         e2:a4:9f:d1:51:31:8d:f6:c2:2a:f6:3c:01:36:41:07:01:1e:
         49:33:b3:92:f9:99:37:22:a3:1f:56:4e:61:c5:06:ff:47:3a:
         dc:1a:a7:e7:8a:83:a0:25:63:d5:11:41:47:1d:5f:74:ae:4b:
         d2:90:6e:4f:80:64:ef:bf:e3:ce:f2:7b:82:5a:23:03:7c:f4:
         63:f7:f3:0d:21:c0:7d:67:53:ff:12:c0:37:07:ff:10:70:33:
         f2:d5:b7:80:65:a1:95:32:58:fd:93:8e:6f:9c:16:32:42:6a:
         47:ec:85:2a:03:34:18:41:11:dd:ac:9a:31:f7:05:77:a0:03:
         3b:96:32:07:41:f9:01:ed:5c:77:b5:41:76:14:1a:4c:88:8f:
         86:0f:f5:75:ff:ad:e2:7d:33:0a:43:3c:20:f4:85:28:bf:e0:
         3d:98:42:0e:24:fd:3b:58:4c:d4:2a:d9:4c:71:9c:bb:43:5f:
         c9:db:d3:88:68:76:e2:03:8f:d4:a8:f0:b0:6a:74:e2:5e:6a:
         41:ca:4e:d1:2c:44:f6:d2:5d:5e:39:ab:f2:7f:99:03:51:be:
         a9:6a:12:5c:cd:a2:12:88:0a:8b:ef:87:50:9d:a9:9d:4b:4d:
         a7:58:c7:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 17 23:09:08 2024 by rpki-client on console-fra.rpki-client.org