Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e203136353039.roa
File:                     326130373a353463313a386333333a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          aLKJLvjlCBAl7/5FBMqdCHzNBCw7wm/r6mLfHGLrtvg=
Subject key identifier:   49:51:6C:CC:2C:E3:20:EB:DE:91:B5:D1:0F:33:89:8A:EF:CD:6C:03
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       4991CE63F1179A29D0DCF4E6120910DF91F508F9
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 27 Jun 2025 00:40:25 +0000
ROA not before:           Fri 27 Jun 2025 00:35:25 +0000
ROA not after:            Fri 26 Jun 2026 00:40:25 +0000
asID:                     16509
IP address blocks:        2a07:54c1:8c33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:91:ce:63:f1:17:9a:29:d0:dc:f4:e6:12:09:10:df:91:f5:08:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 00:35:25 2025 GMT
            Not After : Jun 26 00:40:25 2026 GMT
        Subject: CN=49516CCC2CE320EBDE91B5D10F33898AEFCD6C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4c:58:d8:b2:91:2e:09:72:7a:32:ca:71:ae:
                    6c:7f:aa:0d:9c:4f:3b:70:a6:62:d1:ff:0a:e5:05:
                    60:6b:ba:fb:dd:5a:72:4c:ad:60:72:51:bc:10:83:
                    71:61:d9:f8:d5:1a:d8:b2:65:6d:8f:43:7d:b7:d4:
                    25:9c:b4:d3:6c:d7:c2:e9:6e:03:bc:8d:29:ec:d0:
                    f6:83:d9:1c:cf:8f:e4:a4:f1:b6:b4:ae:23:93:8e:
                    17:7a:36:80:25:80:4d:43:50:92:5b:5d:cc:02:b1:
                    82:e7:ce:e7:08:70:4a:40:fd:18:fd:4a:74:b7:1c:
                    ab:b6:5e:60:fe:34:45:00:b8:61:5e:fb:ae:86:f1:
                    90:17:01:77:a7:60:dc:19:68:45:35:54:41:56:c9:
                    94:7a:52:37:ae:fc:51:b2:e8:fe:db:01:1d:45:f0:
                    f9:ba:88:c4:12:a6:d4:cd:c1:b1:66:6e:46:68:db:
                    f3:2d:81:19:a9:33:c1:29:c6:bb:25:0e:1e:3d:2d:
                    84:62:64:2d:fa:ab:0a:14:e7:69:b7:39:77:cf:51:
                    35:3c:73:ba:48:e7:92:93:f5:0c:54:7f:a6:30:17:
                    6c:de:9a:ab:80:ca:66:81:c2:2d:c9:d3:a7:5f:a1:
                    94:a2:86:19:33:9d:13:cf:a2:cc:1b:70:ad:9c:e3:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:51:6C:CC:2C:E3:20:EB:DE:91:B5:D1:0F:33:89:8A:EF:CD:6C:03
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c33::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:c0:bb:ae:11:5e:64:e8:3e:84:13:76:57:71:4e:e5:33:23:
         16:b4:b3:be:15:d2:d6:51:a3:db:91:5a:ea:c1:df:2a:50:47:
         8f:f8:0e:51:32:c8:f1:eb:9f:a8:23:42:88:29:9f:f5:c4:69:
         3e:e4:c5:c5:a5:08:7d:13:98:d6:a5:32:16:0f:70:81:33:7c:
         40:7f:79:32:a3:23:6c:e5:8a:c0:10:f8:ec:a7:b6:ed:10:85:
         91:57:2e:9e:8e:43:87:fb:0d:6d:2a:29:ab:ab:ea:71:1f:f3:
         e8:9f:69:97:ed:d4:b7:ce:7b:5c:31:b4:50:5c:c4:df:c2:e8:
         fe:5f:9e:ab:2e:3e:c2:d0:f2:38:f2:c8:cb:6d:4e:6f:60:ed:
         75:71:88:6c:66:0b:45:b1:77:d4:22:e9:76:d0:c3:ac:e1:07:
         b6:01:18:4e:6d:2b:53:4d:be:d1:95:dc:ce:d5:9b:b1:ce:53:
         fe:9a:fa:de:f1:76:e2:05:9f:49:46:79:d6:6d:87:c5:8d:69:
         20:a0:9c:58:92:bc:66:30:38:92:d9:76:79:93:d9:30:22:07:
         b1:d6:26:a7:33:12:af:d7:3a:34:f8:1d:d3:35:d1:a1:ad:e9:
         6d:16:d3:48:3f:24:ab:04:98:ed:c7:10:67:0b:74:e9:54:38:
         bd:46:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:30:46 2025 by rpki-client