Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a6266303a3a2f34342d3434203d3e20323033363335.roa
File:                     326130363a613030353a6266303a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          cH8Tw2SUcRfDR4jYX7Dv7/545AmnEApgUjVYFtUIebc=
Subject key identifier:   E7:24:C9:4F:E2:ED:3D:62:DA:58:F6:C4:D8:AF:51:5A:25:EC:28:8C
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       16E8061558872ED14BB5A184DB5B03EC85E7AB4D
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6266303a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 14:15:51 +0000
ROA not before:           Sun 24 Mar 2024 14:10:51 +0000
ROA not after:            Sun 23 Mar 2025 14:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:bf0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e8:06:15:58:87:2e:d1:4b:b5:a1:84:db:5b:03:ec:85:e7:ab:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 14:10:51 2024 GMT
            Not After : Mar 23 14:15:51 2025 GMT
        Subject: CN=E724C94FE2ED3D62DA58F6C4D8AF515A25EC288C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2b:c0:d8:97:50:08:5d:f2:67:9a:f5:1d:76:
                    7d:df:fa:a4:07:18:34:63:a1:81:71:0e:ea:2a:7d:
                    d1:20:c3:29:9e:2c:0d:f8:a3:7e:3f:eb:8f:4f:55:
                    5e:16:a1:a3:21:af:c8:5e:59:1f:7c:d3:40:fb:e7:
                    b0:d3:77:c9:47:8e:d5:bd:28:f7:ef:a1:b9:94:42:
                    01:1b:82:f8:c4:e2:c9:fe:6c:36:11:45:e1:49:0c:
                    f9:46:1e:7c:ed:96:3a:f7:2d:fa:ce:8b:ad:57:81:
                    04:c6:13:b5:80:53:96:8c:43:2a:7d:a9:04:3c:21:
                    78:5a:ec:50:b6:6f:d5:e0:28:72:78:22:4b:a8:81:
                    a4:7d:c4:c2:ef:17:b9:a6:c0:ab:ae:73:f6:dd:8b:
                    67:68:74:84:6d:c8:d9:2a:fb:43:6e:23:5a:ac:ba:
                    4c:78:f7:c3:01:79:46:56:e1:d7:92:69:c4:79:2e:
                    fe:5e:0b:17:94:2f:f5:bc:d4:d5:1b:91:6f:0c:44:
                    a3:27:a1:2e:e7:bb:76:44:10:7f:95:63:b6:d1:99:
                    ec:13:a1:f2:99:95:69:1e:a9:46:d4:fd:50:dc:d5:
                    34:02:7b:40:b8:dc:67:18:a9:b0:4a:cb:45:1b:54:
                    bd:de:ca:d1:6f:b9:5c:07:c8:83:9a:1d:76:43:e3:
                    2d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:24:C9:4F:E2:ED:3D:62:DA:58:F6:C4:D8:AF:51:5A:25:EC:28:8C
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6266303a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:bf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:6b:b8:1a:f0:f8:eb:8b:17:c9:91:8e:78:9f:02:78:30:
         ed:88:e9:6e:01:89:59:4c:ec:f5:cb:07:6e:b3:98:e1:1a:7b:
         17:71:01:2e:24:8e:aa:95:ac:19:67:db:36:e2:75:88:60:d4:
         44:29:04:b0:f6:00:3b:d1:0b:1b:cf:b4:72:fa:6c:fa:51:39:
         a6:fa:a2:35:2e:74:70:78:96:17:2a:e0:12:21:e9:22:b6:e8:
         35:9a:d1:c4:06:7e:d3:90:81:7b:89:1b:1a:e6:2f:45:07:11:
         cc:08:97:e6:84:a8:f0:17:af:67:2e:2c:f7:19:4a:7a:3f:05:
         82:d1:6c:b7:25:24:e8:13:41:cb:ea:5e:cb:3b:f7:be:fb:5e:
         0c:fb:05:72:f5:ff:14:37:96:89:85:39:72:8d:bf:52:7b:bd:
         7e:8f:d4:8f:e0:88:41:c9:56:1b:0a:39:66:e0:b9:98:e6:cc:
         f8:3c:e3:74:76:52:05:e2:11:6e:b6:3d:66:40:9a:c7:a1:22:
         6a:6e:e5:81:c5:04:1b:ad:db:24:84:2f:c7:82:3f:35:98:ff:
         43:76:83:c6:64:c7:6a:76:f8:50:bd:2b:0f:e7:39:34:3d:13:
         64:69:fd:c1:9a:d8:38:d6:d0:65:1d:15:be:82:94:e0:3a:e5:
         ea:5e:4c:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 27 03:17:33 2024 by rpki-client on console-ams.rpki-client.org