Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338323a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386338323a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          i5u/kNSOJ8TC0SF7EziHuAvb7Cax8uypcrDBh5gKzBc=
Subject key identifier:   13:EB:07:AB:BB:4C:BC:75:B6:AF:09:6F:1A:54:2D:8E:B3:B2:99:00
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       596570798211712E423CF17EFF8D7C28BBF7975F
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338323a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 27 Jun 2025 00:59:13 +0000
ROA not before:           Fri 27 Jun 2025 00:54:13 +0000
ROA not after:            Fri 26 Jun 2026 00:59:13 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 01:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:65:70:79:82:11:71:2e:42:3c:f1:7e:ff:8d:7c:28:bb:f7:97:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 00:54:13 2025 GMT
            Not After : Jun 26 00:59:13 2026 GMT
        Subject: CN=13EB07ABBB4CBC75B6AF096F1A542D8EB3B29900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:76:69:ab:b5:f1:a3:6e:80:cf:59:8b:8d:
                    8f:ee:21:82:0b:3c:e0:b6:66:b2:75:3f:c0:94:4b:
                    8e:b0:09:b3:f6:a4:63:4f:5c:a4:f2:1f:0e:b7:91:
                    33:5c:ca:1a:4d:45:dd:65:ea:20:d4:30:79:fd:4c:
                    8a:10:3b:88:3c:9a:9b:f8:b4:7c:23:1f:9b:29:4f:
                    c2:5e:9a:7b:d9:a6:10:94:10:40:3f:ca:6f:84:54:
                    32:7d:49:9a:71:bf:d5:45:c4:7d:39:07:58:a1:d6:
                    4c:1e:fb:0f:bf:6f:d7:3a:fc:ed:f3:ab:60:67:17:
                    5f:75:2f:40:46:5d:fe:a8:22:27:c4:8b:c3:99:10:
                    2f:4a:d4:05:ff:05:7f:5a:fa:68:8b:fd:24:8d:81:
                    70:4a:8f:3b:b5:55:01:d0:49:ee:4b:6a:d3:12:6e:
                    b5:d8:7b:d1:c1:7e:6b:41:25:1f:f0:af:5c:49:ff:
                    27:c0:80:b2:96:ab:5f:26:e5:e9:a4:b4:00:00:23:
                    13:9a:09:71:cf:5f:4d:3d:ad:4c:3a:8b:7e:98:1d:
                    4e:04:e6:00:0e:35:88:a1:f7:80:40:af:1d:ee:4f:
                    5c:00:b0:b7:88:d7:7b:93:3d:3b:c7:e9:77:4d:be:
                    02:01:89:89:57:b9:5b:22:14:c6:fe:ac:c2:8d:f0:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EB:07:AB:BB:4C:BC:75:B6:AF:09:6F:1A:54:2D:8E:B3:B2:99:00
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386338323a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c82::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:80:f6:d5:63:45:5d:8b:e6:bf:a9:03:8f:37:7d:42:16:3f:
         ee:ad:2d:44:e9:97:fe:a4:80:91:f5:e2:43:44:32:53:d9:1b:
         3b:3b:30:50:56:68:84:e4:9f:53:98:3b:0e:d9:8e:44:6d:5f:
         5c:3d:2d:7d:af:1f:fd:26:27:b1:fd:50:2c:5b:0c:18:40:b8:
         eb:cc:cd:dc:a4:da:70:46:9a:b9:12:c7:67:7d:67:7f:58:75:
         a4:55:d6:86:32:02:e5:bb:c0:21:e4:61:4f:f0:f3:1f:ed:cc:
         cb:3f:b9:d8:2a:40:5f:b8:55:b2:ae:83:2e:46:e2:b8:cd:dc:
         fc:5e:0d:56:3d:08:0d:f1:6c:63:3d:7d:bf:0e:b1:69:8d:a5:
         dd:de:71:df:53:0b:81:19:5d:63:cd:b4:ca:6d:89:cf:a7:a9:
         30:cc:b8:85:10:fd:16:3c:a8:33:37:7e:38:f6:d0:a7:01:41:
         ea:88:b3:8e:39:75:84:c1:eb:6f:25:a3:4e:80:ed:bb:35:46:
         74:10:2d:64:5a:49:3c:fb:a1:72:c6:b8:32:b4:e3:61:3a:8a:
         1a:f7:78:e7:32:37:0c:58:a6:59:1b:1a:7a:64:28:77:e7:4a:
         e8:24:ba:47:2e:a1:ed:3c:e2:f5:04:4f:25:b5:5e:5a:75:ea:
         96:0d:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:36:55 2025 by rpki-client