Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386337323a3a2f34382d3438203d3e203134363138.roa
File:                     326130373a353463313a386337323a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          u5pzB6RmWD2KNnrAmzVu02tginQqlqFK0p3mbmh1ekI=
Subject key identifier:   68:A3:DE:47:F2:D1:E7:72:28:3D:F6:89:74:8F:61:15:39:96:4E:F9
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       7C58421C155A7F158F2E4A0A525D88AC5590EB2B
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386337323a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 27 Jun 2025 00:40:43 +0000
ROA not before:           Fri 27 Jun 2025 00:35:43 +0000
ROA not after:            Fri 26 Jun 2026 00:40:43 +0000
asID:                     14618
IP address blocks:        2a07:54c1:8c72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 21:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:58:42:1c:15:5a:7f:15:8f:2e:4a:0a:52:5d:88:ac:55:90:eb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 00:35:43 2025 GMT
            Not After : Jun 26 00:40:43 2026 GMT
        Subject: CN=68A3DE47F2D1E772283DF689748F611539964EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:a4:5d:82:ec:0b:b5:37:b0:92:78:c0:95:
                    eb:8e:4a:c1:52:0d:86:9f:32:00:46:45:08:26:87:
                    b5:4a:ab:28:ca:74:ff:c0:0a:76:c3:3e:31:fe:06:
                    f5:f3:fd:36:54:d4:59:e6:eb:bf:3f:ca:4c:8b:da:
                    5a:af:d8:47:4b:1c:80:7a:03:04:c6:86:83:aa:f0:
                    9b:6a:29:62:33:ff:69:94:5a:7d:f0:e7:9c:41:18:
                    d7:a0:b7:71:82:ad:42:00:78:dc:13:19:0e:eb:1f:
                    3e:11:94:0f:33:cc:fb:25:e1:70:1a:5f:65:1f:7c:
                    c4:b9:3d:30:cc:76:08:11:4d:69:73:2a:b5:49:dd:
                    bd:eb:e8:b7:d1:0b:08:d8:be:06:59:79:db:fb:68:
                    04:00:ec:dc:a6:48:3c:ca:c1:8f:18:b4:f6:ed:1a:
                    a8:db:b8:dc:3d:f2:d7:b8:e0:d5:21:9d:a4:46:44:
                    6d:b1:10:51:87:6e:9a:61:39:2d:2d:ca:96:26:50:
                    2f:5c:38:e3:8c:8d:e9:7e:ed:63:c2:7f:20:ce:8f:
                    4e:f6:11:5a:62:54:74:b5:1a:90:3c:6d:07:8a:16:
                    53:09:3b:46:96:a1:d4:4a:2e:da:ba:17:67:48:15:
                    43:97:6c:4b:7e:e0:d7:c3:ab:9d:d4:e8:19:de:be:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A3:DE:47:F2:D1:E7:72:28:3D:F6:89:74:8F:61:15:39:96:4E:F9
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386337323a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c72::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:52:12:fe:4c:0e:b9:c8:38:c3:02:04:36:4b:69:fd:ea:e8:
         dc:b6:d6:44:27:57:22:cc:88:3e:b3:50:b7:d4:fa:f0:e2:a4:
         2e:ad:72:11:e7:5e:0a:13:cb:81:0b:3d:e1:aa:28:50:1d:52:
         b4:8d:82:1b:0e:34:21:94:ef:0b:bd:6e:c1:f5:db:9b:22:8d:
         73:9d:9d:04:4e:a9:f8:92:89:ce:d6:b1:93:8c:84:d7:78:74:
         38:8c:a4:70:33:54:1c:5a:50:c6:6b:55:a2:58:03:91:2d:2a:
         36:fa:70:23:6e:d0:4f:9b:1f:e7:8d:9e:48:25:68:e8:02:d4:
         f3:3c:d8:15:b3:44:b3:79:dd:20:9c:18:40:26:23:38:c8:b4:
         95:7b:f9:cb:6a:86:e9:94:d4:61:b8:50:41:40:7e:21:3a:33:
         27:fa:04:a9:df:29:2a:10:78:08:73:62:0c:1c:5b:8a:65:e2:
         41:20:d9:eb:19:a6:09:ff:8b:33:dc:e2:3d:c3:fb:9a:43:5c:
         05:77:f9:00:3d:26:11:94:16:23:b3:d3:72:4a:3d:75:cb:ad:
         5e:42:70:92:c8:22:08:26:b1:e0:83:54:bb:0a:ef:69:7f:9b:
         86:30:95:16:de:c9:be:7e:78:7f:3e:79:ff:a4:62:ac:7d:28:
         40:a0:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:14 2025 by rpki-client