Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e203134363138.roa
File:                     326130373a353463313a386333333a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          rF6FigHwH/TA50s/DEBi25Y0nIdmkjvnYYiiZpbcI38=
Subject key identifier:   E2:7E:0D:CA:47:A1:08:C9:D9:11:AD:45:4E:96:B8:2E:48:0E:63:33
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       655A96687BBF8AE78ABDBB22CC1E34FF459D3928
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 27 Jun 2025 00:40:29 +0000
ROA not before:           Fri 27 Jun 2025 00:35:29 +0000
ROA not after:            Fri 26 Jun 2026 00:40:29 +0000
asID:                     14618
IP address blocks:        2a07:54c1:8c33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 21:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5a:96:68:7b:bf:8a:e7:8a:bd:bb:22:cc:1e:34:ff:45:9d:39:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 00:35:29 2025 GMT
            Not After : Jun 26 00:40:29 2026 GMT
        Subject: CN=E27E0DCA47A108C9D911AD454E96B82E480E6333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:e7:10:ec:47:b7:63:7d:69:76:32:7a:ab:
                    43:e1:28:06:bb:32:6e:a5:28:39:a7:e3:18:aa:46:
                    1e:51:65:94:f8:78:4b:76:9e:9e:90:d5:5c:5f:44:
                    07:7b:36:5b:df:97:84:97:27:44:60:98:6d:89:b8:
                    90:73:42:e0:45:95:42:d6:dd:ed:6c:66:2a:79:54:
                    86:11:c4:a0:0a:32:51:51:c2:5c:f4:40:72:2b:cc:
                    60:42:29:d1:8e:39:98:96:f5:96:dd:09:9c:90:f1:
                    06:78:dd:5d:57:ba:4e:dd:98:17:b6:1b:90:7a:ab:
                    af:11:8c:9e:e5:5c:4e:35:59:27:b0:c9:3c:7b:c0:
                    22:df:95:a2:fa:d0:3b:59:72:9d:d1:ef:9a:0f:ec:
                    5d:26:70:7c:37:22:b5:5d:81:06:fd:db:34:95:4a:
                    25:c7:2a:23:02:fd:25:1c:82:fe:ec:03:23:36:a1:
                    be:3c:d9:50:52:77:e1:e4:60:48:ca:c5:d7:aa:a2:
                    f3:bb:60:2e:00:cb:62:c7:e9:66:4d:bc:a6:0a:f5:
                    29:19:84:c1:f7:85:0f:58:a5:22:52:7c:e0:90:58:
                    3c:12:aa:b1:99:de:2d:11:14:c3:50:9e:8b:8a:ae:
                    72:86:d0:a4:fd:ab:b7:da:d9:ab:66:23:54:56:53:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7E:0D:CA:47:A1:08:C9:D9:11:AD:45:4E:96:B8:2E:48:0E:63:33
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c33::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:e3:bb:b3:da:df:f8:08:e1:a8:60:d9:1b:76:20:d6:69:
         a2:ee:42:01:71:09:a8:7d:b3:36:e9:bb:5b:71:7f:76:ee:83:
         64:42:0e:fc:0a:37:96:7d:1a:dc:d2:ba:6f:7d:8a:7a:7a:8c:
         f7:9b:43:d0:94:b1:7f:a1:da:1f:98:39:58:60:92:0d:cd:08:
         c7:3a:68:ed:f4:cb:ee:99:9f:e2:7a:c7:6c:73:bf:a2:c2:6d:
         42:c1:9b:e1:1a:75:08:29:38:3b:ce:98:a2:07:a5:ce:e2:fd:
         c3:a8:47:df:36:16:d7:f5:63:c6:41:07:cd:ef:e1:80:b0:b8:
         50:c5:61:48:4b:96:20:af:ff:fb:1c:0a:9b:f2:fd:7b:8b:23:
         88:7e:45:0e:8f:37:4a:7c:bb:f2:73:b9:b0:16:94:ae:e5:fa:
         a3:1a:02:aa:01:ed:65:2a:06:11:da:bb:96:0a:62:d9:d1:ec:
         35:71:38:43:10:e4:02:62:ed:ee:04:76:0a:40:27:0a:d2:ae:
         a4:8b:85:49:24:9f:f7:96:0c:94:08:80:0d:4b:7a:c0:11:58:
         b3:93:0c:e5:ae:53:85:9d:01:47:02:03:1f:a9:41:58:2f:04:
         a5:2e:6f:83:5b:48:81:6a:8d:5b:0c:9f:c8:09:22:59:72:ce:
         b5:cd:3f:78
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUZVqWaHu/iueKvbsizB40/0WdOSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0OEQwMEY5
RjQ3MjMwRTAeFw0yNTA2MjcwMDM1MjlaFw0yNjA2MjYwMDQwMjlaMDMxMTAvBgNV
BAMTKEUyN0UwRENBNDdBMTA4QzlEOTExQUQ0NTRFOTZCODJFNDgwRTYzMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXrecQ7Ee3Y31pdjJ6q0PhKAa7
Mm6lKDmn4xiqRh5RZZT4eEt2np6Q1VxfRAd7Nlvfl4SXJ0RgmG2JuJBzQuBFlULW
3e1sZip5VIYRxKAKMlFRwlz0QHIrzGBCKdGOOZiW9ZbdCZyQ8QZ43V1Xuk7dmBe2
G5B6q68RjJ7lXE41WSewyTx7wCLflaL60DtZcp3R75oP7F0mcHw3IrVdgQb92zSV
SiXHKiMC/SUcgv7sAyM2ob482VBSd+HkYEjKxdeqovO7YC4Ay2LH6WZNvKYK9SkZ
hMH3hQ9YpSJSfOCQWDwSqrGZ3i0RFMNQnouKrnKG0KT9q7fa2atmI1RWU7MBAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQU4n4NykehCMnZEa1FTpa4LkgOYzMwHwYDVR0j
BBgwFoAU+YEZiLqszYFGw8esT0jQD59HIw4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEyL0Y5ODExOTg4QkFBQ0NEODE0NkMzQzdBQzRGNDhEMDBGOUY0NzIzMEUuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzAvRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0
OEQwMEY5RjQ3MjMwRS5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4Zp
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTIvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzODYzMzMzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQz
NjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqB1TBjDMwDQYJKoZIhvcNAQELBQADggEBAH3I47uz
2t/4COGoYNkbdiDWaaLuQgFxCah9szbpu1txf3bug2RCDvwKN5Z9GtzSum99inp6
jPebQ9CUsX+h2h+YOVhgkg3NCMc6aO30y+6Zn+J6x2xzv6LCbULBm+EadQgpODvO
mKIHpc7i/cOoR982Ftf1Y8ZBB83v4YCwuFDFYUhLliCv//scCpvy/XuLI4h+RQ6P
N0p8u/JzubAWlK7l+qMaAqoB7WUqBhHau5YKYtnR7DVxOEMQ5AJi7e4EdgpAJwrS
rqSLhUkkn/eWDJQIgA1LesARWLOTDOWuU4WdAUcCAx+pQVgvBKUub4NbSIFqjVsM
n8gJIllyzrXNP3g=
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:22:38 2025 by rpki-client