Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/326130613a363034353a333030303a3a2f33362d3438203d3e20313939353134.roa
File:                     326130613a363034353a333030303a3a2f33362d3438203d3e20313939353134.roa (raw, json)
Hash identifier:          Aiu3RQUZdrqZB29Bum/ChgalD7fW/z3WRLJ0VH+JR20=
Subject key identifier:   73:19:90:61:64:FA:22:27:59:10:C6:F4:29:0A:1C:CC:B0:6D:AB:E5
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       59EB8CAF14E6274B4F61221C3AE6B08B4BF1459F
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a333030303a3a2f33362d3438203d3e20313939353134.roa
Signing time:             Wed 29 Nov 2023 23:26:51 +0000
ROA not before:           Wed 29 Nov 2023 23:21:51 +0000
ROA not after:            Wed 27 Nov 2024 23:26:51 +0000
asID:                     199514
IP address blocks:        2a0a:6045:3000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 22:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:eb:8c:af:14:e6:27:4b:4f:61:22:1c:3a:e6:b0:8b:4b:f1:45:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Nov 29 23:21:51 2023 GMT
            Not After : Nov 27 23:26:51 2024 GMT
        Subject: CN=7319906164FA22275910C6F4290A1CCCB06DABE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:b8:5a:ae:b0:20:12:79:03:7a:5d:12:d6:
                    3f:69:53:b8:f8:cc:e9:b5:4c:d5:35:db:a8:83:71:
                    24:9f:ec:d6:45:a2:ee:ec:27:9d:64:f2:0f:c9:89:
                    92:bc:76:d9:5d:7c:0a:db:c2:72:5c:4a:8b:67:ef:
                    84:c4:69:12:3d:11:05:4c:a5:45:97:b8:ec:37:66:
                    2a:7b:08:6d:2e:f0:c8:1d:a6:44:7f:44:77:11:3b:
                    3f:36:86:c7:9c:ac:5b:ff:23:c3:ea:a2:15:76:d7:
                    8f:69:69:d4:43:36:b0:b2:d1:19:32:c5:75:b6:db:
                    63:20:fc:bb:a6:92:9e:93:c0:18:b9:a5:24:35:8d:
                    2c:1e:17:bf:0a:1c:3c:fc:ad:85:5c:f4:ac:d3:06:
                    c8:3b:01:ab:5d:e9:55:4a:fb:a0:9d:e9:db:e7:ec:
                    54:67:78:a5:d4:37:f5:ac:5e:7d:ab:da:56:d3:f2:
                    06:ad:95:bf:42:da:95:14:f9:5e:e4:17:60:db:c7:
                    fd:58:d2:cf:be:51:ce:fa:84:b4:cc:d1:89:b1:ca:
                    5f:69:cf:67:c6:0c:81:0e:6a:8a:a6:79:e5:d1:5e:
                    07:69:b7:a1:01:f7:7d:57:d4:47:22:5b:70:0f:71:
                    bd:15:b9:d3:e8:72:78:4b:59:4d:2a:1d:79:53:6d:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:19:90:61:64:FA:22:27:59:10:C6:F4:29:0A:1C:CC:B0:6D:AB:E5
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a333030303a3a2f33362d3438203d3e20313939353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:7f:d8:47:f8:6a:4c:c7:0d:78:22:43:d0:f1:66:45:37:28:
         9d:d7:90:58:e5:b9:51:54:df:25:e2:83:ef:7c:6e:8e:35:b3:
         17:2d:b8:77:9b:02:05:87:44:5f:a9:20:97:db:c4:de:a6:cf:
         4e:70:31:d6:f5:81:8a:ea:62:d1:f6:ba:a0:28:dd:e6:86:99:
         ce:f7:de:da:00:a8:1c:08:b8:b2:98:cf:93:d7:ae:59:c8:88:
         ae:7c:9c:7e:00:4b:fc:91:11:06:2a:d6:d2:94:4d:52:5a:85:
         54:86:67:50:ab:26:11:07:f7:11:70:e6:f6:eb:e9:7a:ef:93:
         d3:89:27:9a:18:b8:30:9f:1f:f2:d5:91:76:3c:31:44:9c:db:
         62:71:74:04:79:4d:5b:32:32:04:87:63:14:a5:55:88:2b:7c:
         14:99:ff:5e:4f:19:4a:d6:7e:22:43:9e:ea:e9:81:88:6b:50:
         ac:eb:2b:90:fb:4e:1e:da:29:31:c1:4b:21:80:6d:ff:6e:e0:
         5a:be:ec:40:a7:ae:93:95:57:ec:8b:3e:03:fe:0c:5c:e3:fc:
         80:51:04:98:af:61:3d:cf:2f:85:74:e8:85:3c:08:60:1b:e6:
         5e:49:0d:aa:01:61:bb:91:ab:3e:fe:67:6e:37:61:57:47:18:
         7e:59:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:14:56 2024 by rpki-client on console-fra.rpki-client.org