Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e20333936393832.roa
File:                     326130373a353463313a386333333a3a2f34382d3438203d3e20333936393832.roa (raw, json)
Hash identifier:          IxWxzUkyshm4UL2MwKBtMOBWEfSkPzMP1jWgqOaqNnU=
Subject key identifier:   93:40:27:28:8A:80:67:C7:A4:AB:78:BA:7D:5C:C5:D1:5E:86:FE:18
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       150FF925A7785D515888FB297E50CF80854C24AA
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e20333936393832.roa
Signing time:             Sat 07 Jun 2025 16:42:13 +0000
ROA not before:           Sat 07 Jun 2025 16:37:13 +0000
ROA not after:            Sat 06 Jun 2026 16:42:13 +0000
asID:                     396982
IP address blocks:        2a07:54c1:8c33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 09:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0f:f9:25:a7:78:5d:51:58:88:fb:29:7e:50:cf:80:85:4c:24:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun  7 16:37:13 2025 GMT
            Not After : Jun  6 16:42:13 2026 GMT
        Subject: CN=934027288A8067C7A4AB78BA7D5CC5D15E86FE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:e7:66:f2:b9:3b:7e:3f:93:9f:7a:7d:77:
                    89:f4:c0:1c:c3:4c:cc:55:41:32:cb:d2:dc:23:0b:
                    0e:0c:fb:15:46:8c:ef:f8:b3:7d:50:1f:14:3a:70:
                    5a:5a:b9:21:41:23:0d:8e:aa:d8:72:7e:2e:0f:56:
                    31:43:a1:5d:fa:dc:88:47:17:71:65:91:cf:f6:31:
                    45:ee:ff:30:e3:46:50:30:5a:dd:c1:7d:e6:a9:f4:
                    4d:ac:32:d4:7c:c6:b3:cf:b3:cc:78:0a:17:b4:41:
                    77:86:09:47:0a:53:37:60:26:41:60:cf:11:46:4b:
                    72:73:e8:2f:e8:46:2b:b7:cc:84:ea:06:d3:5e:f2:
                    cd:8a:e6:6a:ad:ff:f2:c1:18:01:71:ca:5d:ea:f6:
                    a3:e8:90:61:71:4c:a4:44:83:1f:0f:6d:2e:78:65:
                    66:a3:25:35:98:5c:61:6a:b8:64:45:3a:2e:75:eb:
                    3b:c9:91:63:99:6b:6d:aa:81:d4:16:c7:97:af:42:
                    14:12:31:c9:b0:ce:93:38:8d:27:3a:57:4e:0b:cd:
                    f3:d7:62:b0:33:45:1c:b6:68:61:44:56:e9:62:2b:
                    b2:90:c2:68:ed:44:10:f3:e2:2d:62:8d:83:f8:e9:
                    24:80:41:56:75:a0:9c:3c:f3:fe:35:24:e9:bc:51:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:40:27:28:8A:80:67:C7:A4:AB:78:BA:7D:5C:C5:D1:5E:86:FE:18
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333333a3a2f34382d3438203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c33::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:83:60:42:4c:e8:22:5f:91:60:91:fa:41:dd:4f:da:dc:
         c5:aa:70:ed:86:6c:0b:ca:65:7d:83:18:78:66:23:8c:b7:da:
         d4:67:dc:c5:bc:67:35:0e:19:2d:ca:62:09:eb:01:88:22:78:
         c9:b4:57:c8:30:e0:bc:e0:fc:13:c0:ff:9d:67:07:e2:2a:34:
         9c:9d:2b:81:f4:da:02:58:b5:cb:c1:54:78:fe:04:5e:5d:0a:
         da:4f:41:85:c8:67:42:d8:f8:b3:4f:aa:2b:20:f5:22:9f:0c:
         5b:6a:5a:83:2c:6a:52:ee:db:6b:37:9c:18:58:ad:5b:ab:ca:
         4b:2c:78:2f:c2:95:95:27:0c:68:99:5a:b0:4d:f6:15:eb:7f:
         13:f6:47:dd:b5:72:0e:86:f6:d8:21:f8:2f:63:28:63:43:5e:
         7a:e7:52:10:dc:db:95:a0:0a:ca:72:f9:cc:49:ad:ef:b3:f7:
         60:48:22:88:7f:b1:ba:ac:0e:07:e3:49:c9:3b:09:cd:40:75:
         30:84:bc:ca:5f:7e:7c:8b:bd:94:3b:a1:fe:ea:6b:8c:f0:6d:
         fc:b8:fb:fa:50:0a:8a:f3:1e:d3:ed:af:c7:25:0d:f7:74:79:
         86:09:bb:0c:d3:3c:48:71:2d:a0:b3:6b:80:8d:80:df:a6:6c:
         3e:ce:ff:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:06:26 2025 by rpki-client