Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          l5gyNyGznoAb3qmXXrBXDmNRd3K8b5vXrUlNaGWrwrA=
Subject key identifier:   D6:3E:1C:96:DA:35:04:D7:0C:C7:5F:A7:36:58:28:39:28:30:D6:9F
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       650DFE5339ADAA7C5DC9E9DA30321453DBA576CA
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 27 Jun 2025 00:40:18 +0000
ROA not before:           Fri 27 Jun 2025 00:35:18 +0000
ROA not after:            Fri 26 Jun 2026 00:40:18 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 01:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0d:fe:53:39:ad:aa:7c:5d:c9:e9:da:30:32:14:53:db:a5:76:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 00:35:18 2025 GMT
            Not After : Jun 26 00:40:18 2026 GMT
        Subject: CN=D63E1C96DA3504D70CC75FA7365828392830D69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:af:20:fb:65:56:a0:d4:33:64:6d:72:a0:
                    62:5d:b4:0c:10:58:29:7b:c9:44:14:04:c2:a6:b7:
                    65:1c:6f:3d:b8:e5:5f:d2:9e:2d:04:ef:fe:9c:85:
                    8d:17:24:00:89:39:74:f6:ac:b9:7e:68:44:ff:51:
                    d0:29:b9:f1:f7:f6:44:d5:c5:26:49:bf:d7:73:e5:
                    85:31:a9:38:23:cf:fb:e7:b7:e8:ad:2a:63:3b:97:
                    51:12:c9:58:f8:c6:ab:d4:c7:af:75:96:61:88:7a:
                    38:b6:8d:9f:48:43:53:6f:f3:f5:f7:c1:a5:65:f4:
                    75:0c:8b:c2:38:6f:73:fa:97:47:b4:9a:ee:a1:25:
                    19:04:18:85:08:65:62:67:75:3f:ab:e7:13:ab:74:
                    57:92:b4:ba:fb:c0:7a:f3:a8:9e:df:e9:1b:a5:d3:
                    d0:06:c7:03:1e:b7:ec:92:5d:13:f6:59:89:52:f4:
                    08:6e:41:68:66:be:e4:2e:55:ea:d4:eb:04:60:fa:
                    2b:9b:66:7d:7c:76:a7:96:15:53:d6:e9:a5:fa:5a:
                    78:dc:01:83:26:56:16:60:6b:51:eb:86:b9:f8:8b:
                    b5:d9:44:6a:f1:f6:e8:7f:16:29:c7:94:96:cd:11:
                    92:80:95:73:68:ab:3a:a3:de:39:5d:04:8a:e2:0f:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:1C:96:DA:35:04:D7:0C:C7:5F:A7:36:58:28:39:28:30:D6:9F
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c33::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:2a:84:c9:b8:a4:43:7a:76:87:46:a4:ad:f8:28:98:56:d1:
         00:61:69:a2:d8:e3:36:46:cb:34:c2:cc:0e:f2:8b:ee:8d:45:
         cd:bb:07:6d:8b:c7:5d:33:43:b7:d4:22:ab:2e:24:69:33:ef:
         36:54:0a:c3:78:e3:b9:16:b5:62:87:0d:53:ba:c1:f9:67:6b:
         09:3e:42:4c:81:3b:5e:35:07:5e:3d:c0:2b:4c:20:23:db:51:
         a3:37:88:62:e1:6f:e6:74:87:af:c2:51:f6:a7:e9:d9:1a:51:
         6f:23:21:6b:9c:1b:48:33:90:78:a3:00:19:9c:26:59:33:75:
         cc:c3:b7:37:bc:91:88:ee:e3:f4:ac:e3:4f:ce:43:66:17:3e:
         64:de:cf:6f:49:ba:4e:5c:bd:97:64:39:6d:8a:5b:54:e7:9a:
         7e:99:05:31:6a:12:22:7d:ed:89:fb:5d:79:5b:1b:66:7a:c1:
         c7:f4:d9:b5:45:b9:6b:b4:9d:65:e0:87:4a:6b:a6:8b:b4:0a:
         d3:10:d5:4c:91:ba:ff:80:66:0c:8c:29:35:77:22:9c:8a:a1:
         29:61:61:8a:e3:4e:4c:99:cc:4f:18:98:ac:b8:7e:4d:0b:e9:
         de:24:cb:28:f3:6a:f5:74:65:bb:5a:64:93:8a:7c:d1:8b:1e:
         76:44:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:26:48 2025 by rpki-client