Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa
File:                     326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          rfRzP4xw5/lqjBBhW1BwIDqqhV5B3o/6OB81h/fVzP0=
Subject key identifier:   81:DD:69:3F:6B:84:88:08:03:F9:06:7F:82:38:AB:5C:16:0F:8A:85
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       21541471463FC2CC737CDA8940F59F9D9CE0ACCA
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 27 Jun 2025 19:38:01 +0000
ROA not before:           Fri 27 Jun 2025 19:33:01 +0000
ROA not after:            Fri 26 Jun 2026 19:38:01 +0000
asID:                     14618
IP address blocks:        2a07:54c1:8c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 03:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:54:14:71:46:3f:c2:cc:73:7c:da:89:40:f5:9f:9d:9c:e0:ac:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 19:33:01 2025 GMT
            Not After : Jun 26 19:38:01 2026 GMT
        Subject: CN=81DD693F6B84880803F9067F8238AB5C160F8A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:e7:38:aa:e4:8d:d6:d0:08:42:8e:e0:15:
                    2d:5c:46:11:0f:2b:d7:1a:28:62:60:3b:83:82:f9:
                    2d:d7:5e:93:37:3e:28:e6:b7:51:40:8b:28:ef:96:
                    a0:4d:8b:1f:3b:51:db:66:67:2a:78:b8:50:99:4b:
                    a5:5e:39:19:75:5b:47:4b:55:22:ff:57:c0:6f:4f:
                    cb:0b:8d:ba:3a:86:44:4d:e0:3c:ea:40:14:f3:ff:
                    f7:9c:91:13:63:20:e6:bc:5b:79:0c:b6:8e:43:b9:
                    dc:fd:4b:1b:aa:20:5e:68:d4:2a:b4:c7:53:a5:d7:
                    db:27:5b:77:07:33:38:55:18:fa:d9:d7:3f:9b:3d:
                    de:cc:88:a2:f5:50:fc:2c:9c:11:28:5d:d2:0a:fc:
                    80:80:da:9c:fd:be:fe:0e:ac:3e:9c:db:ba:76:03:
                    d8:4c:f6:e9:19:15:ce:87:73:e5:d7:8a:a2:42:f7:
                    26:9c:30:72:b1:d1:4d:13:d7:32:5d:6b:a1:bd:6d:
                    91:66:d4:92:5f:4c:20:cc:97:b2:c8:3f:2c:b7:34:
                    46:ff:d9:42:62:6f:2c:b8:b9:8d:e0:bb:1f:82:24:
                    c4:3b:e4:5d:9a:f7:03:c4:42:e2:6b:fc:07:46:20:
                    80:bf:5c:01:80:22:f1:99:d3:4a:22:41:be:fc:ff:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DD:69:3F:6B:84:88:08:03:F9:06:7F:82:38:AB:5C:16:0F:8A:85
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338303a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:0a:4b:7d:0e:df:a0:53:f0:1e:08:41:4d:d1:97:03:ee:96:
         79:fe:22:be:3e:ef:b1:81:e0:88:77:aa:eb:e3:a6:26:4d:78:
         c1:a2:72:17:98:2a:3f:e2:5a:af:9c:bf:9f:3a:a7:98:3b:51:
         87:cc:47:ab:45:bc:80:f3:bd:86:e7:a9:3c:62:84:43:68:6a:
         49:1c:03:88:f0:df:b8:a3:f1:39:3b:12:35:ea:87:c6:6c:a9:
         e6:e5:48:50:1a:04:d5:80:f7:3b:e0:fb:29:f5:e7:9f:44:0f:
         1d:9c:cb:aa:94:de:92:9b:dd:5b:28:78:c9:24:46:a8:bb:4e:
         f8:07:4a:ca:76:f1:bc:61:57:2f:92:e9:59:44:9f:75:d9:ee:
         26:b1:fc:59:2a:08:93:08:c8:18:27:7f:5b:3a:25:1c:88:5c:
         fc:b1:35:86:22:d6:4e:3a:99:95:7d:a7:96:e1:84:b2:90:02:
         fd:29:2b:a1:1b:34:9f:47:8a:53:38:1b:6d:d6:5f:aa:91:b3:
         12:33:50:94:95:d2:91:ed:20:0e:15:80:ad:9e:ec:ad:53:90:
         18:23:7b:16:e9:b8:3a:f8:bf:0e:2d:7f:2a:29:c7:78:f4:dc:
         4e:cb:8a:2f:58:1d:89:24:33:89:0f:df:ef:30:9d:09:e8:0e:
         87:cf:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:04:24 2025 by rpki-client