Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338303a3a2f34382d3438203d3e203136353039.roa
File:                     326130373a353463313a386338303a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          nCTdQZwq3WxjhO/jEDQ0UMWj3FCL6XT59PKor6x45tU=
Subject key identifier:   F0:29:FA:74:AF:8F:5E:F9:2B:18:46:62:F5:63:9B:F9:30:46:B3:9F
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       4E4B640E49845A025B90AD37C1A9B9EA2FE27587
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338303a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 27 Jun 2025 19:38:04 +0000
ROA not before:           Fri 27 Jun 2025 19:33:04 +0000
ROA not after:            Fri 26 Jun 2026 19:38:04 +0000
asID:                     16509
IP address blocks:        2a07:54c1:8c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 21:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4b:64:0e:49:84:5a:02:5b:90:ad:37:c1:a9:b9:ea:2f:e2:75:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 19:33:04 2025 GMT
            Not After : Jun 26 19:38:04 2026 GMT
        Subject: CN=F029FA74AF8F5EF92B184662F5639BF93046B39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:e6:c6:39:2c:6f:20:3e:87:37:bd:fc:70:
                    53:cc:80:17:7f:e5:71:ee:6c:56:e4:d4:23:c6:72:
                    87:12:f1:33:8b:fa:03:37:71:3b:ff:84:5d:c2:e3:
                    ae:0c:0d:1a:4b:e4:ac:fd:ed:40:99:17:91:43:c3:
                    67:f1:f9:56:27:85:d9:10:93:09:45:d0:05:c9:ec:
                    6c:ad:e4:2f:2e:42:9b:d5:a0:0f:91:ed:9f:9a:3b:
                    fe:81:e3:0d:6b:15:9b:43:a6:e1:38:43:25:ba:ce:
                    88:4a:3f:59:bc:40:6d:80:fe:4b:90:29:be:36:1c:
                    e3:1e:82:3f:90:e1:b3:9a:c1:d9:f7:d9:52:50:ec:
                    13:c3:72:24:ce:67:96:2c:d1:b5:21:44:77:53:8e:
                    b5:58:db:82:a4:65:5e:57:54:1d:a7:a4:3b:00:d8:
                    74:da:13:de:79:b1:05:7e:7b:25:0b:c8:0f:e4:0d:
                    6b:bc:9a:29:f5:93:f3:fd:ce:aa:50:71:eb:93:c6:
                    ff:9e:23:69:b7:d7:bf:c6:67:26:2d:37:63:d6:92:
                    02:ed:f9:02:67:f0:39:c3:0e:a4:bd:12:08:95:4b:
                    cf:d8:25:5a:32:04:5d:4e:e7:3b:e1:eb:29:6d:73:
                    77:3d:bd:e4:2c:a2:82:a6:b2:8d:a2:94:6d:57:f2:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:29:FA:74:AF:8F:5E:F9:2B:18:46:62:F5:63:9B:F9:30:46:B3:9F
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338303a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:7a:fa:26:31:d8:20:92:2e:bc:93:26:98:90:a4:15:38:
         e3:a2:d5:1c:2b:73:1a:24:7a:69:c7:14:69:63:5d:b6:f1:90:
         81:33:8d:1f:8b:c8:30:2e:53:eb:cc:fc:f2:57:15:84:b9:0d:
         aa:45:4a:33:25:c1:5f:1a:7e:f9:a8:b4:f7:00:19:5a:2f:1f:
         b5:b0:68:85:6c:d9:0e:bc:c9:f8:a7:49:54:91:a5:0c:19:44:
         22:5f:a1:82:1c:bb:fb:ac:56:50:60:7a:c8:cb:80:8a:1a:a0:
         10:18:40:c8:92:f6:2b:16:d9:e8:b5:4a:29:e9:6c:77:d6:65:
         57:d0:3e:16:5c:93:af:64:42:98:a9:2c:12:6d:76:be:af:5e:
         61:2f:a6:9b:5d:cd:f8:2d:16:47:71:dd:6c:7c:2b:c1:70:f6:
         bc:d0:01:60:6a:0f:01:20:b6:0c:3c:44:4a:a1:c3:83:a3:41:
         36:66:3c:e2:98:9e:4d:98:8d:9a:c3:61:7a:14:ab:17:54:84:
         28:37:e2:bd:c4:73:06:96:32:08:03:a2:c9:db:9a:7a:46:5c:
         66:5a:90:d9:30:bb:e1:f2:b1:34:57:4b:13:0a:a0:b8:64:a7:
         dd:74:62:08:9e:4b:e2:8d:ca:3f:a2:70:84:4a:a2:05:19:5b:
         fa:61:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:41:10 2025 by rpki-client