Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/7/326130363a613030353a6434313a3a2f34382d3438203d3e20323033363335.roa
File:                     326130363a613030353a6434313a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          cxEJliO8ahcHrd1ffL2E6vzw7y3YjVmdGfWU9zRZEpY=
Subject key identifier:   CD:9E:B6:9F:FC:71:DA:07:AE:D1:97:6E:30:3D:42:17:E7:68:FE:7D
Certificate issuer:       /CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Certificate serial:       23DDF6BEA25D207286B282ED60D1DBAC4EE12420
Authority key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6434313a3a2f34382d3438203d3e20323033363335.roa
Signing time:             Sun 24 Mar 2024 16:15:51 +0000
ROA not before:           Sun 24 Mar 2024 16:10:51 +0000
ROA not after:            Sun 23 Mar 2025 16:15:51 +0000
asID:                     203635
IP address blocks:        2a06:a005:d41::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl
                          rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 13:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:dd:f6:be:a2:5d:20:72:86:b2:82:ed:60:d1:db:ac:4e:e1:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
        Validity
            Not Before: Mar 24 16:10:51 2024 GMT
            Not After : Mar 23 16:15:51 2025 GMT
        Subject: CN=CD9EB69FFC71DA07AED1976E303D4217E768FE7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:4f:0c:42:cf:59:15:87:f6:41:23:ab:f6:
                    ca:7c:6c:75:5b:6b:e1:d0:6d:36:67:75:43:0e:1f:
                    0a:cb:be:69:04:c3:41:ae:dd:db:97:3d:7b:be:00:
                    16:32:38:37:e3:f3:04:d0:19:18:65:c8:97:c4:e4:
                    47:37:ae:a6:73:23:43:28:1d:c6:9f:0b:c6:57:85:
                    2e:6f:2f:18:c6:74:9a:b1:ce:27:ce:d6:5d:53:af:
                    d0:8c:10:2a:38:76:9d:d5:41:59:7f:cc:38:d8:59:
                    89:3c:53:72:67:5d:65:2d:a0:05:d1:87:fc:af:93:
                    00:00:4d:ee:2b:55:6d:2b:aa:b5:b6:72:06:19:66:
                    3d:5d:47:1f:25:1a:8c:08:c9:7e:e4:cf:f1:7f:af:
                    87:82:10:d9:8e:69:e0:4b:b5:71:0b:c2:4d:dd:a5:
                    da:56:84:79:55:73:3d:c0:c0:b3:09:f3:c8:ad:16:
                    4d:91:8d:7d:b8:10:56:6b:45:7d:83:0a:3d:81:27:
                    04:22:f2:f8:6a:9b:57:a4:ee:27:97:d5:9e:eb:ef:
                    91:ad:47:d0:28:64:62:d1:fa:30:b6:00:5a:d7:46:
                    85:53:d3:cd:47:1e:36:7c:ce:53:cc:b5:7b:c6:e7:
                    e2:6d:12:f9:5c:09:59:fb:a7:9d:c8:4e:80:c0:60:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9E:B6:9F:FC:71:DA:07:AE:D1:97:6E:30:3D:42:17:E7:68:FE:7D
            X509v3 Authority Key Identifier:
                keyid:BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/7/326130363a613030353a6434313a3a2f34382d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d41::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:82:04:f0:5a:13:6c:57:9f:f9:83:3e:51:fd:e6:7f:2c:
         3a:92:a4:3f:75:53:6b:b6:99:e6:cb:20:50:b2:ae:5d:e9:f3:
         63:45:fa:ae:ad:b1:18:55:67:e8:ff:4a:ff:6e:fc:d5:74:b1:
         6e:73:21:1a:94:2f:ca:e1:63:88:e5:21:dd:0f:cb:ef:68:34:
         ab:5f:d2:9b:72:ae:42:df:9e:6d:61:ed:e0:25:c4:f5:e9:af:
         03:37:d3:69:3f:b1:ae:48:9d:e1:62:25:5f:02:15:ea:05:48:
         68:d2:4b:5a:ff:f6:bc:6b:9c:22:e7:75:69:d1:62:7d:52:45:
         8d:2d:1f:0a:12:32:0c:8f:f1:2d:d6:84:05:d9:df:38:55:7f:
         27:65:4f:60:5d:78:6b:bf:29:ba:3f:86:7d:47:91:4d:93:9a:
         54:f6:a3:0f:79:6d:c9:12:1f:6a:c9:cc:69:1f:92:c0:37:cf:
         d6:41:95:f1:55:60:76:7d:52:ed:4e:76:d5:c0:f6:cb:c0:1d:
         fe:4c:29:fa:2b:93:80:88:31:c5:f6:63:37:bd:d1:4a:d1:71:
         e4:b2:ad:0f:ab:ba:e1:12:06:c6:62:db:d0:8e:57:e9:43:05:
         7d:99:d6:d5:6e:6d:db:1a:8d:0b:b6:50:c2:5c:b3:10:2a:e8:
         06:0b:ed:a6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUI932vqJdIHKGsoLtYNHbrE7hJCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE5MzBEQTQyQUY3ODA1NzdCQTczNkYwRTIyRUVBRTk0
RjhEQjI5MzAeFw0yNDAzMjQxNjEwNTFaFw0yNTAzMjMxNjE1NTFaMDMxMTAvBgNV
BAMTKENEOUVCNjlGRkM3MURBMDdBRUQxOTc2RTMwM0Q0MjE3RTc2OEZFN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxU8MQs9ZFYf2QSOr9sp8bHVb
a+HQbTZndUMOHwrLvmkEw0Gu3duXPXu+ABYyODfj8wTQGRhlyJfE5Ec3rqZzI0Mo
HcafC8ZXhS5vLxjGdJqxzifO1l1Tr9CMECo4dp3VQVl/zDjYWYk8U3JnXWUtoAXR
h/yvkwAATe4rVW0rqrW2cgYZZj1dRx8lGowIyX7kz/F/r4eCENmOaeBLtXELwk3d
pdpWhHlVcz3AwLMJ88itFk2RjX24EFZrRX2DCj2BJwQi8vhqm1ek7ieX1Z7r75Gt
R9AoZGLR+jC2AFrXRoVT081HHjZ8zlPMtXvG5+JtEvlcCVn7p53IToDAYCi9AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUzZ62n/xx2geu0ZduMD1CF+do/n0wHwYDVR0j
BBgwFoAUupMNpCr3gFd7pzbw4i7q6U+NspMwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzcvQkE5MzBEQTQyQUY3ODA1NzdCQTczNkYwRTIyRUVBRTk0RjhEQjI5My5jcmww
gZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJw
cy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1Yzkx
YmUzZjlkLzIvQkE5MzBEQTQyQUY3ODA1NzdCQTczNkYwRTIyRUVBRTk0RjhEQjI5
My5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtp
LmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vNy8zMjYxMzAzNjNhNjEzMDMwMzUzYTY0
MzQzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMzM2MzMzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoGoAUNQTANBgkqhkiG9w0BAQsFAAOCAQEALxaCBPBaE2xXn/mDPlH95n8s
OpKkP3VTa7aZ5ssgULKuXenzY0X6rq2xGFVn6P9K/2781XSxbnMhGpQvyuFjiOUh
3Q/L72g0q1/Sm3KuQt+ebWHt4CXE9emvAzfTaT+xrkid4WIlXwIV6gVIaNJLWv/2
vGucIud1adFifVJFjS0fChIyDI/xLdaEBdnfOFV/J2VPYF14a78puj+GfUeRTZOa
VPajD3ltyRIfasnMaR+SwDfP1kGV8VVgdn1S7U521cD2y8Ad/kwp+iuTgIgxxfZj
N73RStFx5LKtD6u64RIGxmLb0I5X6UMFfZnW1W5t2xqNC7ZQwlyzECroBgvtpg==
-----END CERTIFICATE-----
Generated at Sat Apr 20 05:45:56 2024 by rpki-client on console-fra.rpki-client.org