Route Origin Authorization

$ rpki-client -vvf krill.ipgua.com/repo/pongery/4/326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa
File:                     326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          HcaRJrqt46U5y6uERiSMiBPPn6NWtH+Sf2e1pKTXtm4=
Subject key identifier:   3A:12:7D:A6:B1:ED:5B:8C:AD:15:DD:E8:8B:0A:A8:B3:53:0E:2E:B7
Certificate issuer:       /CN=953F58832273DFD14187910ADCB3972B70B9BD3A
Certificate serial:       12A068E659BBC40566F5F5607F1C666150305A1D
Authority key identifier: 95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer
Subject info access:      rsync://krill.ipgua.com/repo/pongery/4/326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa
Signing time:             Sat 07 Mar 2026 07:58:19 +0000
ROA not before:           Sat 07 Mar 2026 07:53:19 +0000
ROA not after:            Sat 06 Mar 2027 07:58:19 +0000
asID:                     200160
IP address blocks:        2a0a:6045:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl
                          rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft
                          rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer
                          rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl
                          rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 17:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a0:68:e6:59:bb:c4:05:66:f5:f5:60:7f:1c:66:61:50:30:5a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953F58832273DFD14187910ADCB3972B70B9BD3A
        Validity
            Not Before: Mar  7 07:53:19 2026 GMT
            Not After : Mar  6 07:58:19 2027 GMT
        Subject: CN=3A127DA6B1ED5B8CAD15DDE88B0AA8B3530E2EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:4b:74:ba:57:d2:ad:a9:23:66:4a:24:6d:
                    16:a5:e0:e2:e8:10:f7:b3:67:05:67:53:8e:7e:e2:
                    72:ba:b5:42:94:d9:00:6f:5f:31:ea:ae:ff:96:f7:
                    95:b4:63:26:eb:16:c7:64:17:1f:7d:ce:3d:75:e3:
                    8c:7d:4c:eb:32:54:55:29:00:ae:3a:79:fe:48:08:
                    40:f1:42:a5:96:9a:f9:62:db:a0:d6:2d:ce:ec:ee:
                    57:21:48:74:9b:30:ac:21:0a:84:ea:36:b8:d4:5f:
                    95:0a:a7:cf:4a:37:21:b8:ba:eb:66:75:6d:0f:e7:
                    b0:62:55:2f:ff:a5:ec:61:e7:82:87:ba:ac:7c:ef:
                    ed:8a:b9:4b:b8:a2:0f:20:a1:0c:2c:b5:f4:0d:4f:
                    00:2d:38:bf:5d:d1:b3:b0:1d:e3:f5:91:9d:71:67:
                    1a:e1:c1:31:d0:26:2e:ea:85:d8:d4:61:a6:5e:3f:
                    22:51:f9:0d:b6:9c:de:a5:45:b7:e3:bf:13:8b:c5:
                    d5:e2:5f:3f:07:28:fb:56:16:c8:5d:12:32:30:c3:
                    5c:17:90:77:ac:79:b0:d4:e8:28:ec:ca:82:89:51:
                    f2:66:aa:ac:a0:ec:7a:13:70:90:b0:46:97:63:1f:
                    4d:24:78:23:ca:72:17:9d:60:a5:f3:19:04:3e:34:
                    a3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:12:7D:A6:B1:ED:5B:8C:AD:15:DD:E8:8B:0A:A8:B3:53:0E:2E:B7
            X509v3 Authority Key Identifier:
                keyid:95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/4/326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:95:18:f6:f9:57:c3:c0:aa:29:e9:42:56:7b:94:3c:d0:
         12:cf:8c:bf:cc:0f:0c:b8:b7:7d:dc:39:86:e6:07:45:59:7f:
         c6:1f:f6:20:4d:0b:bd:7e:fa:83:3f:bd:27:d3:c8:f1:a4:09:
         e1:d6:07:96:a9:da:b7:42:b2:c4:7b:f8:86:f8:95:b8:79:fc:
         6c:aa:3d:7a:e1:65:34:49:1a:db:fc:fb:be:aa:11:b9:81:d8:
         3e:1b:fa:8e:4c:97:22:96:60:09:eb:3c:24:9c:98:4b:10:f3:
         9f:67:18:a2:8a:e9:6e:90:dc:0e:0c:8f:22:34:f7:4d:a3:9b:
         84:c6:7d:af:37:5f:f9:0c:05:32:da:0e:91:46:a3:5e:bd:6a:
         d4:61:f2:8a:14:d8:5d:02:66:fb:d3:d6:ab:ee:ff:db:87:50:
         5d:9b:6d:da:86:75:c9:e7:87:f5:de:44:f7:3a:71:78:9a:96:
         ac:db:f2:ed:04:63:87:5f:f0:84:43:d6:89:95:3d:f4:e1:09:
         a0:d3:ab:94:84:89:cc:09:cb:5f:11:03:8e:2a:b7:4e:ed:78:
         1b:6b:6b:2a:13:e8:7c:83:a5:38:4a:b0:a3:56:22:f3:b6:8d:
         e4:2a:85:f2:f7:74:3a:2b:73:17:9a:bc:51:52:a6:a8:90:43:
         32:01:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 04:06:09 2026 by rpki-client