Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338323a3a2f34382d3438203d3e203134363138.roa
File:                     326130373a353463313a386338323a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          vAmGtWWkSdlBAbpE7jONIhYifio0K/HjuZKf7Gp3x3g=
Subject key identifier:   F2:3D:F5:2B:DE:51:58:D4:64:71:B1:89:12:97:08:E7:51:33:3C:55
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       61F1F6FBFA811C76A046BD1838C68DC742862AB2
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338323a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 27 Jun 2025 00:59:09 +0000
ROA not before:           Fri 27 Jun 2025 00:54:09 +0000
ROA not after:            Fri 26 Jun 2026 00:59:09 +0000
asID:                     14618
IP address blocks:        2a07:54c1:8c82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 09:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f1:f6:fb:fa:81:1c:76:a0:46:bd:18:38:c6:8d:c7:42:86:2a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 00:54:09 2025 GMT
            Not After : Jun 26 00:59:09 2026 GMT
        Subject: CN=F23DF52BDE5158D46471B189129708E751333C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:a9:ac:c4:91:f3:07:7d:1c:56:94:fa:22:
                    fd:b9:08:83:80:cf:7b:42:fe:27:62:50:a3:5d:d5:
                    37:a9:d4:25:ff:bd:14:a4:ea:87:32:b0:a2:dd:5b:
                    9b:e0:13:38:26:15:f0:35:76:0e:e4:07:42:ca:1c:
                    0c:21:bb:64:04:a3:b5:4e:e5:fa:57:be:93:a9:31:
                    04:89:d5:0a:c9:ca:3c:1a:f3:78:cc:16:a6:4b:8e:
                    74:94:99:b0:44:bb:89:f5:5a:e9:04:ed:b3:91:e2:
                    2c:aa:a1:73:df:5a:db:9f:81:3e:6f:40:13:2a:86:
                    76:8e:fe:6a:a0:bc:e7:f2:2d:ae:20:67:43:fd:18:
                    5e:7c:28:04:03:7e:c3:d4:94:95:63:c0:8a:b2:a3:
                    cf:dc:05:1e:2d:87:e2:a6:1f:d2:a1:bd:68:d3:4b:
                    09:17:e1:84:63:4f:7c:58:8c:f5:19:a2:6a:e1:de:
                    65:c7:92:bc:f9:e0:7b:db:d6:35:93:bb:2a:56:ec:
                    da:00:28:88:ac:9e:50:7a:bc:0c:ac:cb:d8:d6:91:
                    28:fd:99:40:a0:ed:8e:4c:ce:8e:1b:cf:de:7c:20:
                    00:3b:34:25:81:03:f4:65:d4:07:0a:a6:53:69:a4:
                    38:a1:11:16:8c:ff:24:c3:75:88:0d:73:0c:6a:d6:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3D:F5:2B:DE:51:58:D4:64:71:B1:89:12:97:08:E7:51:33:3C:55
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338323a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c82::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:0f:15:8d:e2:e5:d1:f8:d3:18:19:49:93:02:c9:a7:93:
         48:db:73:d3:42:7e:e8:72:1e:25:29:36:c0:25:12:b4:46:dc:
         f7:2d:da:8c:1e:97:52:b2:a6:36:76:e9:62:6b:d7:49:30:94:
         2e:9c:bc:18:ed:a3:f6:10:db:ec:5f:e7:da:9f:20:6c:58:4e:
         be:b7:ac:b6:8c:ab:48:d0:68:c1:33:8a:de:5a:bc:43:00:8c:
         b7:8b:ee:a4:d5:d0:a9:fe:58:53:e7:4a:bf:1a:02:10:1e:d6:
         2c:69:f7:d0:92:e8:03:0d:38:8f:e4:9b:66:80:d1:74:70:c4:
         0b:1a:0e:60:32:fd:e8:ca:41:92:89:cc:f3:ae:58:b6:1a:4a:
         6f:6d:cb:dd:cc:0f:fe:b5:48:bf:12:84:86:65:7a:52:c4:bd:
         3b:ba:80:56:df:c2:b6:b3:18:74:56:4e:e7:1b:77:86:35:98:
         a3:f4:81:25:0c:75:d3:63:52:e6:3d:e5:71:d8:70:9a:c0:53:
         96:40:79:9f:a2:f0:ce:2c:27:c4:e3:8f:e5:ce:09:1a:3a:9e:
         91:f4:a6:45:5a:e6:32:2f:ba:56:9e:85:d1:64:c3:b4:f5:a5:
         51:db:31:28:53:cc:d3:d5:dc:8b:b3:82:b7:80:67:20:92:fa:
         3a:c0:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:05:00 2025 by rpki-client