Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/326130613a363034353a333030303a3a2f33362d3438203d3e20323033383638.roa
File:                     326130613a363034353a333030303a3a2f33362d3438203d3e20323033383638.roa (raw, json)
Hash identifier:          iTevXy7uTDOudBTTjtdIQKbZw8u5zhGWqcM+uhKJ99U=
Subject key identifier:   95:34:DD:D0:7E:DE:A6:79:21:C6:79:6C:49:F3:B8:BD:88:6E:A2:04
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       45D2AD2ECC51D9756BADFE7D80E0EA69D06AB069
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a333030303a3a2f33362d3438203d3e20323033383638.roa
Signing time:             Wed 29 Nov 2023 23:25:52 +0000
ROA not before:           Wed 29 Nov 2023 23:20:52 +0000
ROA not after:            Wed 27 Nov 2024 23:25:52 +0000
asID:                     203868
IP address blocks:        2a0a:6045:3000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d2:ad:2e:cc:51:d9:75:6b:ad:fe:7d:80:e0:ea:69:d0:6a:b0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Nov 29 23:20:52 2023 GMT
            Not After : Nov 27 23:25:52 2024 GMT
        Subject: CN=9534DDD07EDEA67921C6796C49F3B8BD886EA204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:29:b3:7b:32:ad:fe:72:18:8b:4d:66:4f:
                    bc:86:99:3b:ed:76:38:34:d8:a3:db:d0:64:78:d9:
                    39:0b:1c:58:93:3d:28:0a:c2:cb:2d:b6:27:2a:0d:
                    5a:ce:1c:77:a9:43:5c:fa:20:55:58:50:83:8c:fe:
                    29:d7:0d:be:3e:7d:37:ed:15:94:a7:01:21:12:fe:
                    98:ac:ed:a8:5e:ae:9c:d7:60:7c:ff:12:d8:f5:ec:
                    e2:60:ee:03:8b:2a:97:70:31:4a:ca:3b:c6:fd:bd:
                    ce:56:bb:92:6f:52:24:66:d2:ff:a5:12:bf:15:11:
                    ba:72:36:69:8e:92:7c:8b:7c:86:66:71:af:ed:d8:
                    e5:df:19:fa:5e:bc:36:7c:cd:9d:2a:77:0c:ad:e9:
                    89:7f:9f:9e:0e:65:bd:0d:f3:ef:e5:cd:62:7b:a7:
                    fe:ad:44:22:f1:dd:ad:f1:d8:b8:86:7a:13:c4:74:
                    dd:71:e7:c9:7e:8c:55:67:08:a8:1d:21:74:5a:b0:
                    01:94:2b:22:8c:6c:47:b6:78:ca:0d:ee:01:3d:aa:
                    9e:41:ca:0f:14:19:6d:1b:4c:39:7a:9b:7c:90:aa:
                    8e:e6:c8:95:c6:91:3b:84:ca:1d:5d:32:8c:b5:70:
                    9a:63:c3:ef:03:04:14:eb:43:04:87:b1:eb:74:48:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:34:DD:D0:7E:DE:A6:79:21:C6:79:6C:49:F3:B8:BD:88:6E:A2:04
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a333030303a3a2f33362d3438203d3e20323033383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:6c:92:51:3d:7a:27:a9:d8:37:35:0f:38:91:9f:b9:f1:26:
         d1:49:22:54:a4:dc:b7:f8:ee:03:43:05:c4:16:38:7b:38:5c:
         12:32:7a:b8:a7:f4:d5:e4:66:11:8e:9b:9a:7f:eb:e4:e4:6a:
         9e:d4:c8:72:fc:46:4f:3b:bd:00:7a:1e:a8:96:8d:ea:b0:0c:
         56:2c:99:22:9d:c5:71:6b:94:1f:a1:26:3a:ab:93:3e:73:bf:
         2e:11:59:4e:16:b1:5b:d9:19:37:8e:fa:29:d7:8a:6a:50:ed:
         4b:8e:f8:b8:ff:ad:3e:e2:ee:88:ce:b5:ab:7d:b0:74:db:9e:
         d1:b3:cb:2a:fe:83:70:59:fe:76:6e:3d:d9:bf:6b:94:32:1e:
         25:3d:15:f1:c0:a0:c7:84:38:1d:98:42:b7:e1:5a:63:99:d7:
         55:ea:2f:9a:09:5e:55:6f:38:9b:f0:1f:ab:5e:f2:48:f8:9d:
         52:c8:29:e7:9a:dd:5d:18:46:f2:a2:9d:54:ef:2b:07:c9:7b:
         85:76:34:97:ef:d5:0c:aa:e1:cd:38:f4:2b:ac:c4:75:c2:73:
         99:a2:cc:e6:cc:a7:79:41:69:ad:9e:57:a4:1b:63:39:82:04:
         d0:e1:ee:e7:a7:31:bf:14:46:d2:b3:67:bd:71:7a:c1:4d:74:
         e8:f4:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:02:35 2024 by rpki-client on console-fra.rpki-client.org