Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/326130613a363034353a333030303a3a2f33362d3438203d3e20323033383638.roa
File:                     326130613a363034353a333030303a3a2f33362d3438203d3e20323033383638.roa (raw, json)
Hash identifier:          Ha3HC0SqcF05VsXtU4lSMA8YAXLRCCNCNBlhWurDAxc=
Subject key identifier:   F0:67:EC:9B:C0:CD:BC:48:E2:67:8A:77:54:6D:CC:E4:5A:51:D9:43
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       4FB9355F533507E947F8F0EEB78901A91D9A87E2
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a333030303a3a2f33362d3438203d3e20323033383638.roa
Signing time:             Thu 31 Oct 2024 00:19:15 +0000
ROA not before:           Thu 31 Oct 2024 00:14:15 +0000
ROA not after:            Thu 30 Oct 2025 00:19:15 +0000
asID:                     203868
IP address blocks:        2a0a:6045:3000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b9:35:5f:53:35:07:e9:47:f8:f0:ee:b7:89:01:a9:1d:9a:87:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Oct 31 00:14:15 2024 GMT
            Not After : Oct 30 00:19:15 2025 GMT
        Subject: CN=F067EC9BC0CDBC48E2678A77546DCCE45A51D943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:18:50:24:5d:d2:42:76:28:6a:37:ed:01:
                    80:dc:c9:62:bd:a2:89:78:e5:74:63:64:78:11:ed:
                    fe:c8:55:55:66:64:f5:a1:e3:4d:ad:05:67:cb:8a:
                    40:fc:49:eb:42:3b:6d:fc:16:bb:70:f2:23:45:86:
                    3b:6f:bf:dc:9f:97:e4:2c:d1:7b:1a:4f:d7:39:94:
                    df:72:7d:f6:31:f3:ed:9a:67:44:e1:3b:83:c4:21:
                    0a:e3:50:fa:e6:28:d2:41:0f:99:f4:00:e9:6b:10:
                    02:91:e0:ae:4a:6b:76:3c:f0:db:dc:d2:ed:b6:52:
                    06:de:f0:27:f3:51:a7:71:a9:4c:93:b8:7c:96:8e:
                    fe:ac:4d:5f:29:ec:ad:c6:4c:47:3a:6f:38:2d:ee:
                    d0:67:a3:c9:a9:0d:45:63:e3:95:7a:a3:11:ca:7c:
                    f1:c2:9f:4d:1c:ec:ae:24:85:73:5b:5c:83:c7:31:
                    8f:9e:a5:33:1b:ee:d7:b9:6f:f4:ca:e5:57:95:e6:
                    09:1c:96:90:42:7d:b9:a5:b5:94:5b:e3:5a:99:cc:
                    05:52:66:f2:6d:43:ab:28:eb:17:c9:cd:a2:0e:c6:
                    ee:63:33:b8:fb:9d:95:84:d4:10:c6:25:be:d3:84:
                    c1:80:84:11:8f:47:3c:a4:d4:1f:2e:52:cf:4d:f1:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:67:EC:9B:C0:CD:BC:48:E2:67:8A:77:54:6D:CC:E4:5A:51:D9:43
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a333030303a3a2f33362d3438203d3e20323033383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:87:7c:1f:35:e3:22:18:55:52:e6:e2:99:c7:18:6f:fe:22:
         e9:fc:0e:c3:89:d5:f2:37:21:11:99:05:20:84:2b:50:1b:22:
         90:d0:43:88:4c:67:32:c1:fe:cb:b9:e5:c6:69:54:1b:77:c6:
         ce:14:2c:68:20:2c:a2:2f:be:d1:a2:3e:7d:a0:b2:df:5c:d1:
         98:79:9b:c0:18:76:f3:5c:0a:5f:1e:c0:31:5e:00:58:dc:1f:
         01:e9:bc:d7:4c:01:87:a0:ec:30:72:fc:57:22:e5:3a:b5:ea:
         c1:f9:1c:86:bc:85:b4:42:c2:b5:5d:2d:b5:51:3a:74:f7:10:
         b6:69:a4:67:9f:8d:eb:0e:e3:c2:32:3f:5c:34:66:49:d8:87:
         8d:78:43:06:b9:0e:fd:5b:32:05:b4:50:bc:23:f5:ca:28:9d:
         2d:3b:57:9f:2f:a2:50:0d:cd:12:74:08:df:3f:87:ba:7e:84:
         0d:00:bf:78:d6:de:b5:b9:d8:ad:00:d7:2c:e6:d5:69:f2:f9:
         00:11:24:a6:55:25:2b:1b:f4:ed:0a:62:81:aa:d8:c0:10:65:
         6a:11:a1:00:26:41:ac:ae:59:86:ed:d8:cb:f8:99:dd:f8:06:
         a6:41:cc:31:5b:a8:2d:b5:be:d2:e0:c0:20:c5:2b:49:f6:f5:
         49:a5:26:04
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUT7k1X1M1B+lH+PDut4kBqR2ah+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyNDU3MUI2OTNBMDcwOUIzOEFBMDAxNDJCQUMwQUQ4
RDhBQTMwMDAeFw0yNDEwMzEwMDE0MTVaFw0yNTEwMzAwMDE5MTVaMDMxMTAvBgNV
BAMTKEYwNjdFQzlCQzBDREJDNDhFMjY3OEE3NzU0NkRDQ0U0NUE1MUQ5NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfhhQJF3SQnYoajftAYDcyWK9
ool45XRjZHgR7f7IVVVmZPWh402tBWfLikD8SetCO238Frtw8iNFhjtvv9yfl+Qs
0XsaT9c5lN9yffYx8+2aZ0ThO4PEIQrjUPrmKNJBD5n0AOlrEAKR4K5Ka3Y88Nvc
0u22Ugbe8CfzUadxqUyTuHyWjv6sTV8p7K3GTEc6bzgt7tBno8mpDUVj45V6oxHK
fPHCn00c7K4khXNbXIPHMY+epTMb7te5b/TK5VeV5gkclpBCfbmltZRb41qZzAVS
ZvJtQ6so6xfJzaIOxu5jM7j7nZWE1BDGJb7ThMGAhBGPRzyk1B8uUs9N8a9VAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQU8Gfsm8DNvEjiZ4p3VG3M5FpR2UMwHwYDVR0j
BBgwFoAUDyRXG2k6BwmziqABQrrArY2KowAwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS5rb21vcmViaS5uZXR3b3JrL3JlcG8v
a29tb3JlYmkvMS8wRjI0NTcxQjY5M0EwNzA5QjM4QUEwMDE0MkJBQzBBRDhEOEFB
MzAwLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzov
L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAx
ODU3NTVjOTFiZTNmOWQvMi8wRjI0NTcxQjY5M0EwNzA5QjM4QUEwMDE0MkJBQzBB
RDhEOEFBMzAwLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYBBQUHMAuGcnJz
eW5jOi8vcnBraS5rb21vcmViaS5uZXR3b3JrL3JlcG8va29tb3JlYmkvMS8zMjYx
MzA2MTNhMzYzMDM0MzUzYTMzMzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIw
MzIzMDMzMzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgpgRTAwDQYJKoZIhvcNAQELBQADggEB
AGeHfB814yIYVVLm4pnHGG/+Iun8DsOJ1fI3IRGZBSCEK1AbIpDQQ4hMZzLB/su5
5cZpVBt3xs4ULGggLKIvvtGiPn2gst9c0Zh5m8AYdvNcCl8ewDFeAFjcHwHpvNdM
AYeg7DBy/Fci5Tq16sH5HIa8hbRCwrVdLbVROnT3ELZppGefjesO48IyP1w0ZknY
h414Qwa5Dv1bMgW0ULwj9coonS07V58volANzRJ0CN8/h7p+hA0Av3jW3rW52K0A
1yzm1Wny+QARJKZVJSsb9O0KYoGq2MAQZWoRoQAmQayuWYbt2Mv4md34BqZBzDFb
qC21vtLgwCDFK0n29UmlJgQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:43:23 2024 by rpki-client on console-fra.rpki-client.org