Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa
File:                     326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier:          tWDTxerDwcwLcxjvdLagtFMuphddDugx3DC8gewEXoM=
Subject key identifier:   42:B7:68:FA:F5:A8:DF:43:10:7D:A8:F3:11:35:F1:E7:AB:1B:FC:80
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       2CE250DD9D466FC4B07205DE404296DB47F5D589
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa
Signing time:             Thu 29 May 2025 16:00:47 +0000
ROA not before:           Thu 29 May 2025 15:55:47 +0000
ROA not after:            Thu 28 May 2026 16:00:47 +0000
asID:                     204857
IP address blocks:        2a07:54c1:8300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 01:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e2:50:dd:9d:46:6f:c4:b0:72:05:de:40:42:96:db:47:f5:d5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: May 29 15:55:47 2025 GMT
            Not After : May 28 16:00:47 2026 GMT
        Subject: CN=42B768FAF5A8DF43107DA8F31135F1E7AB1BFC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:1f:7f:aa:1c:22:c1:17:ae:97:62:4e:b6:
                    ad:47:73:d3:72:c4:99:1e:c2:95:ae:fc:26:73:82:
                    9a:67:40:68:2b:ee:23:85:08:2d:20:91:0d:49:d0:
                    74:a1:57:fc:8e:a3:1e:09:99:a0:4e:cd:c3:3a:af:
                    b3:36:ab:31:4c:54:c6:92:55:69:b3:ff:c8:b1:eb:
                    c4:05:cb:c5:6f:bb:41:a4:1b:8f:c5:04:05:9c:13:
                    2a:d7:a0:cb:9b:3d:3c:cc:de:14:10:51:04:1a:b4:
                    fe:df:99:86:77:1d:76:b9:24:97:12:c6:d1:b2:b3:
                    ba:3b:eb:3c:8f:ab:d3:40:a4:6c:dc:96:90:98:49:
                    d7:15:3a:f0:37:ad:e0:f2:82:15:d0:a8:86:b3:4f:
                    05:e3:0f:65:96:94:4f:63:42:27:35:85:21:f8:b0:
                    92:39:c6:8c:1b:8e:ab:c7:c7:3b:a9:a4:9f:ae:a4:
                    45:0c:88:c2:16:95:ee:af:73:ac:d4:40:99:f1:e8:
                    69:44:bf:51:c3:45:ed:1e:c8:49:eb:3e:6e:83:f6:
                    1e:cd:7e:6e:67:bf:98:7a:50:64:0f:14:80:c4:0f:
                    96:0e:b1:88:96:16:c8:5d:7a:d8:ed:22:9b:7c:fc:
                    f9:0d:15:ff:a0:99:33:23:84:2c:d3:ad:b7:16:f1:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B7:68:FA:F5:A8:DF:43:10:7D:A8:F3:11:35:F1:E7:AB:1B:FC:80
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:09:ba:9f:29:01:9b:90:73:cf:b8:25:26:02:5e:86:32:
         08:1e:20:0c:18:dd:5c:22:50:e5:14:08:0a:fc:48:b7:23:ec:
         5e:eb:33:a2:ab:37:fe:6b:50:fc:61:3a:b0:d6:4b:c7:de:2f:
         98:26:6e:d4:59:cd:bf:13:18:f2:70:82:0e:d3:af:53:a2:9f:
         28:8e:6e:e6:d3:3b:c4:da:88:27:44:21:76:49:03:50:9c:d8:
         0e:68:7a:b6:57:7c:1e:4e:15:b3:27:84:d0:3d:e8:96:b7:db:
         6e:8c:00:91:02:69:f8:6b:c2:2c:bd:aa:42:ca:f8:46:02:38:
         60:89:e1:79:a8:ae:88:c9:bf:90:2a:9d:9b:e0:d0:41:3e:63:
         28:ba:d7:62:74:0b:77:82:3e:d9:0e:86:1b:fd:7e:4c:3c:73:
         5b:2e:12:8d:75:3f:fb:d3:6e:c3:34:55:51:c6:67:c3:f9:6f:
         6b:f3:d9:73:af:6d:bf:0b:d2:96:cf:70:b1:a7:27:94:84:39:
         5d:ac:88:05:cb:fd:72:2c:37:e9:09:0b:55:f6:1f:7a:bf:df:
         cc:ca:18:b4:4f:19:0e:f9:65:61:1b:a6:c4:0b:d3:62:54:f8:
         0a:53:50:2a:2b:1a:a6:75:a1:e4:7e:4e:94:04:9f:53:5f:e9:
         4c:ab:28:bb
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIULOJQ3Z1Gb8SwcgXeQEKW20f11YkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0OEQwMEY5
RjQ3MjMwRTAeFw0yNTA1MjkxNTU1NDdaFw0yNjA1MjgxNjAwNDdaMDMxMTAvBgNV
BAMTKDQyQjc2OEZBRjVBOERGNDMxMDdEQThGMzExMzVGMUU3QUIxQkZDODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hB9/qhwiwReul2JOtq1Hc9Ny
xJkewpWu/CZzgppnQGgr7iOFCC0gkQ1J0HShV/yOox4JmaBOzcM6r7M2qzFMVMaS
VWmz/8ix68QFy8Vvu0GkG4/FBAWcEyrXoMubPTzM3hQQUQQatP7fmYZ3HXa5JJcS
xtGys7o76zyPq9NApGzclpCYSdcVOvA3reDyghXQqIazTwXjD2WWlE9jQic1hSH4
sJI5xowbjqvHxzuppJ+upEUMiMIWle6vc6zUQJnx6GlEv1HDRe0eyEnrPm6D9h7N
fm5nv5h6UGQPFIDED5YOsYiWFshdetjtIpt8/PkNFf+gmTMjhCzTrbcW8TYhAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUQrdo+vWo30MQfajzETXx56sb/IAwHwYDVR0j
BBgwFoAU+YEZiLqszYFGw8esT0jQD59HIw4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEyL0Y5ODExOTg4QkFBQ0NEODE0NkMzQzdBQzRGNDhEMDBGOUY0NzIzMEUuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzAvRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0
OEQwMEY5RjQ3MjMwRS5jZXIwgYcGCCsGAQUFBwELBHsweTB3BggrBgEFBQcwC4Zr
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTIvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzODMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzAz
NDM4MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGACoHVMGDMA0GCSqGSIb3DQEBCwUAA4IBAQCWPAm6
nykBm5Bzz7glJgJehjIIHiAMGN1cIlDlFAgK/Ei3I+xe6zOiqzf+a1D8YTqw1kvH
3i+YJm7UWc2/ExjycIIO069Top8ojm7m0zvE2ognRCF2SQNQnNgOaHq2V3weThWz
J4TQPeiWt9tujACRAmn4a8IsvapCyvhGAjhgieF5qK6Iyb+QKp2b4NBBPmMoutdi
dAt3gj7ZDoYb/X5MPHNbLhKNdT/7027DNFVRxmfD+W9r89lzr22/C9KWz3CxpyeU
hDldrIgFy/1yLDfpCQtV9h96v9/Myhi0TxkO+WVhG6bEC9NiVPgKU1AqKxqmdaHk
fk6UBJ9TX+lMqyi7
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:05 2025 by rpki-client