Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa
File:                     326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa (raw, json)
Hash identifier:          8ons1QFxvBagrLaLIwHz/EdQ3aHlrloIMbz99+5rhqo=
Subject key identifier:   98:F6:E0:DC:13:FC:59:6B:8A:C8:4F:9C:5D:B8:6B:07:F3:98:9D:39
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       3F1F9E2FA81992BDC88B18B4B18FC6B0DC80CD3A
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa
Signing time:             Wed 23 Apr 2025 10:59:21 +0000
ROA not before:           Wed 23 Apr 2025 10:54:21 +0000
ROA not after:            Wed 22 Apr 2026 10:59:21 +0000
asID:                     214862
IP address blocks:        2a07:54c1:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1f:9e:2f:a8:19:92:bd:c8:8b:18:b4:b1:8f:c6:b0:dc:80:cd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Apr 23 10:54:21 2025 GMT
            Not After : Apr 22 10:59:21 2026 GMT
        Subject: CN=98F6E0DC13FC596B8AC84F9C5DB86B07F3989D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:c1:11:0b:15:6e:c9:70:49:90:a1:a5:9b:
                    05:fa:43:4a:c5:db:2e:83:67:03:33:48:39:26:29:
                    5c:44:81:d8:e3:6b:95:27:1d:4e:54:e1:e8:71:e9:
                    71:71:db:b6:97:df:5e:70:cd:b2:20:cb:8c:06:b9:
                    61:3d:41:da:75:16:d0:0b:cc:2c:36:60:75:9a:7c:
                    a5:fa:ac:8a:2a:77:af:5a:87:a3:6b:4f:9f:f6:a9:
                    8a:4b:0d:9f:b0:fc:03:75:50:72:fb:95:b4:4b:a0:
                    d5:84:3e:92:fe:80:b5:ca:c6:05:68:9c:a1:a2:3e:
                    83:a8:58:75:c6:91:89:6f:78:33:77:eb:62:12:0a:
                    56:f2:34:bd:0f:a3:c8:49:2a:14:34:99:85:69:2e:
                    0f:78:81:81:ae:05:31:d4:c5:4a:d6:88:4d:19:a3:
                    56:c6:b7:f8:c6:f7:c3:f7:07:4b:6a:81:a3:5e:4e:
                    0c:42:0d:1c:9a:2c:5f:93:b6:03:f0:b8:56:16:06:
                    66:90:b4:9c:07:5f:e2:d4:3a:1b:06:ea:41:83:24:
                    88:4d:65:52:77:8d:3c:2d:af:15:7e:fe:78:8b:ed:
                    c1:c6:ef:91:ea:7e:91:27:a1:25:29:41:5c:28:c0:
                    71:1f:26:c2:d7:0d:63:29:a0:8b:cf:75:24:68:03:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F6:E0:DC:13:FC:59:6B:8A:C8:4F:9C:5D:B8:6B:07:F3:98:9D:39
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:3e:5d:36:bc:65:cb:03:6f:9c:cf:b2:10:4e:3b:34:9f:
         a7:02:1d:38:15:e7:55:de:f3:0d:eb:a3:81:cb:3f:3c:e7:6d:
         82:e9:74:10:c4:7a:63:8d:b0:18:0c:55:8c:6a:b9:99:b6:7f:
         ff:7b:cb:a5:a9:7c:ea:3e:d5:db:37:0a:9f:53:b4:40:eb:77:
         ef:51:30:bc:b0:0f:9f:9c:ce:9c:fe:27:ae:74:32:0c:84:da:
         1d:4d:dc:32:70:c3:84:5e:67:d4:75:3e:55:14:ad:9a:e4:4c:
         13:58:83:cb:2f:b8:29:8c:a0:c3:93:1a:fe:f3:8e:fd:7f:2c:
         81:7b:f6:89:f0:ec:5b:0c:da:91:23:f2:3e:21:99:8c:5a:b0:
         80:7e:a2:73:45:c1:d8:73:22:0b:c0:37:06:7b:16:0e:af:72:
         12:f5:a1:2d:1c:a2:08:c9:b7:dc:0b:cc:9e:e1:e1:5a:44:5c:
         66:d0:6c:ff:1e:2a:d5:d3:5a:d6:6b:b4:cf:76:d1:00:b5:3e:
         d2:f0:2e:6f:03:01:78:96:dd:dc:10:45:b2:d5:0c:55:a4:ab:
         21:52:6c:a1:bb:8a:8b:f5:f6:e4:3c:bb:fd:6e:06:54:01:e1:
         d4:eb:5d:de:9f:0a:cd:09:58:be:ed:a9:aa:ce:8a:91:80:b7:
         eb:36:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:10:15 2025 by rpki-client