Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338303a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386338303a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          Ds6VOwzjRNh8k7fhgjLQNVx6owU9SNtej4a3HdQQzbg=
Subject key identifier:   D2:BE:1D:BF:E9:88:49:DD:8E:6C:73:3C:1C:25:41:AD:E3:6C:14:96
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       541D5B8B135B82088AE78DC1C198CA6523487ACF
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338303a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 27 Jun 2025 19:38:09 +0000
ROA not before:           Fri 27 Jun 2025 19:33:09 +0000
ROA not after:            Fri 26 Jun 2026 19:38:09 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1d:5b:8b:13:5b:82:08:8a:e7:8d:c1:c1:98:ca:65:23:48:7a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 19:33:09 2025 GMT
            Not After : Jun 26 19:38:09 2026 GMT
        Subject: CN=D2BE1DBFE98849DD8E6C733C1C2541ADE36C1496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:88:5a:f6:7e:4f:c4:4a:4e:69:e0:49:dc:
                    16:fe:23:c2:33:83:50:1b:53:81:f6:76:c9:14:f5:
                    40:35:b0:4b:c3:58:f2:7c:81:5d:01:e2:6b:d4:b0:
                    59:0f:7e:f9:12:3a:d7:c1:4d:29:ef:16:56:23:f3:
                    bc:cb:76:49:3e:1c:74:38:0f:c1:61:8e:a6:8d:a8:
                    4f:3c:e7:d7:eb:e6:1a:11:5e:b7:97:ca:3b:c1:20:
                    8f:2c:89:1c:58:62:8f:1b:dd:aa:f2:65:5b:bd:fb:
                    51:0f:d0:09:ab:50:83:c8:f1:07:65:27:3e:94:08:
                    1b:c7:c0:5c:75:b1:0d:c7:b3:da:19:a2:3c:b9:47:
                    b7:83:a9:af:15:03:8c:7c:6f:0b:4a:fd:13:4f:1c:
                    42:14:1a:30:60:92:95:d5:e9:c3:75:d0:c2:40:36:
                    92:90:d8:54:37:24:5a:18:78:9e:d4:fe:18:4d:dc:
                    65:20:c4:12:25:e8:7e:4f:08:55:8e:1b:c8:51:00:
                    01:a9:46:8f:9f:95:86:8e:8e:c5:9c:22:9e:c0:3d:
                    c4:84:17:81:3a:e6:51:4e:3e:35:8c:64:ee:06:27:
                    19:f7:c3:9d:03:28:63:f5:26:26:82:88:3f:9b:cb:
                    2c:51:d4:c4:c3:f5:23:a6:0b:ff:cc:82:45:8c:ed:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BE:1D:BF:E9:88:49:DD:8E:6C:73:3C:1C:25:41:AD:E3:6C:14:96
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338303a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:41:b6:e5:ac:c8:c1:17:3d:73:36:9f:b3:3b:19:da:ab:
         d9:90:15:da:5e:3d:f8:07:42:a4:bd:46:fa:2e:b1:82:f5:3a:
         86:9f:b9:f4:7a:94:9a:7e:f6:3c:7e:de:c6:fe:50:ce:d4:06:
         30:0b:60:cf:9c:a4:a5:bf:9f:10:b0:cd:85:f3:b2:07:0e:19:
         e4:24:53:e7:79:c1:1c:79:14:12:ed:cb:c9:9d:02:c5:03:14:
         54:de:08:29:76:23:c9:35:b2:aa:36:bb:f5:68:a3:43:95:f5:
         2e:d6:38:a2:ca:de:b0:a1:5a:08:6f:ef:9a:12:08:4e:23:2e:
         0b:5b:e8:cc:ee:9f:15:18:09:2e:b0:fc:c2:97:4d:bd:cc:22:
         2f:bb:cf:24:5e:21:57:bd:df:4e:83:1e:8b:eb:e1:ed:d4:33:
         1d:dc:a9:60:04:83:b8:63:08:ec:4e:23:30:dc:5a:b1:72:0e:
         96:ac:92:5b:82:85:1a:4c:5c:2e:65:33:1b:e5:a4:14:a8:fc:
         f6:20:1d:aa:68:b2:16:ea:32:43:1c:85:7c:e2:a6:e6:c4:75:
         c9:7e:a6:64:d9:7c:d2:e6:9e:1e:bb:d3:22:2b:33:5b:16:b4:
         6e:cf:25:4b:f1:eb:69:41:ea:6c:53:4d:6a:80:c7:c6:c8:32:
         71:b9:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:34:23 2025 by rpki-client