Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/326130613a363034353a336630303a3a2f34302d3438203d3e20323039333130.roa
File:                     326130613a363034353a336630303a3a2f34302d3438203d3e20323039333130.roa (raw, json)
Hash identifier:          aB/lI/X5QNJabqmr+zWl9lCVc+u/286D3630xqg/a7M=
Subject key identifier:   E9:9B:1A:1A:E1:70:25:77:0B:B8:87:CD:95:3F:FB:9B:DE:0A:22:A2
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       1C69414B9CB1E50BC20F771F29EE657449CD6F05
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a336630303a3a2f34302d3438203d3e20323039333130.roa
Signing time:             Thu 05 Dec 2024 03:43:47 +0000
ROA not before:           Thu 05 Dec 2024 03:38:47 +0000
ROA not after:            Thu 04 Dec 2025 03:43:47 +0000
asID:                     209310
IP address blocks:        2a0a:6045:3f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:69:41:4b:9c:b1:e5:0b:c2:0f:77:1f:29:ee:65:74:49:cd:6f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Dec  5 03:38:47 2024 GMT
            Not After : Dec  4 03:43:47 2025 GMT
        Subject: CN=E99B1A1AE17025770BB887CD953FFB9BDE0A22A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:11:4c:43:29:c3:28:41:f0:5c:e5:46:c0:
                    0f:79:04:3f:1f:33:18:07:b2:e6:24:42:ca:c1:21:
                    74:ec:4b:3e:8d:7c:36:f6:38:85:b1:d3:95:93:bc:
                    ac:81:ca:18:c7:b6:ef:ed:4f:10:54:50:c3:f9:e6:
                    9b:07:9b:b6:9c:da:9b:48:5d:60:17:e1:8a:75:6c:
                    fe:ea:4d:74:d3:30:90:c4:63:43:e1:ae:b8:57:cf:
                    d4:2c:07:bf:ea:a7:90:27:cf:06:c5:45:a0:56:08:
                    d5:9e:d7:fb:97:b5:35:64:e3:92:aa:13:92:70:c3:
                    16:a1:99:69:41:8a:38:11:47:52:0d:c8:c0:0a:db:
                    03:fd:c6:14:32:d5:09:1a:6e:fa:bd:eb:d7:a2:97:
                    dd:f5:78:52:3c:0f:9b:14:35:80:b5:1d:3b:e9:de:
                    f5:7e:de:fb:6a:57:9e:68:ad:2e:1b:70:59:05:e4:
                    8a:5d:f2:dd:ee:09:81:bd:1c:9f:85:a4:00:5d:66:
                    13:e0:e9:a9:08:8c:a2:b1:c7:4e:46:61:5b:7f:90:
                    da:ce:66:11:68:84:11:63:33:b6:23:dc:36:89:23:
                    27:58:ef:e7:10:9a:33:46:a9:a7:6e:01:ae:8f:29:
                    67:8c:3b:af:cd:c0:b4:1d:c9:8d:58:12:f6:7e:3a:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9B:1A:1A:E1:70:25:77:0B:B8:87:CD:95:3F:FB:9B:DE:0A:22:A2
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a336630303a3a2f34302d3438203d3e20323039333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:3c:d9:f4:02:15:19:84:89:41:0e:e3:c7:4b:fc:26:c8:a8:
         2b:83:c3:b9:b9:df:7d:39:01:37:5f:37:68:aa:d2:85:9e:27:
         57:03:b2:2e:c0:0a:59:36:95:44:90:09:5d:ae:4b:bf:65:b8:
         7f:71:76:93:23:48:ce:16:97:9f:12:dc:8e:e8:b7:8f:14:dd:
         48:d1:a3:f6:a6:b5:ff:f4:e3:86:08:cd:ab:21:ae:4d:f1:a8:
         72:82:51:61:68:b5:16:b9:06:e4:27:21:13:5d:fa:ee:9a:25:
         6b:05:7a:c1:01:85:81:5b:12:b2:7e:ef:35:39:40:db:29:fb:
         d0:c2:7b:e7:ac:ea:8e:9f:b4:0f:fe:11:5d:a5:44:39:33:59:
         bc:83:2b:cd:8c:c8:32:d5:39:11:4b:1e:c4:e1:d0:2b:22:45:
         7a:65:72:2d:35:a5:9d:cb:9a:fb:cb:9b:5c:ea:c1:f7:9d:d9:
         b2:95:76:2a:67:23:dc:c9:39:bf:fa:1e:b0:e5:a9:54:9b:e4:
         0f:1e:cb:39:2f:59:2a:7f:ba:e4:2f:da:da:53:5a:64:46:02:
         73:48:5f:f4:17:81:7c:cb:d7:b5:13:bf:60:4d:f4:4a:a5:9c:
         17:8f:6c:e0:96:fd:60:9c:25:9c:4b:3d:15:a1:11:9e:2f:09:
         ef:6d:71:75
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUHGlBS5yx5QvCD3cfKe5ldEnNbwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyNDU3MUI2OTNBMDcwOUIzOEFBMDAxNDJCQUMwQUQ4
RDhBQTMwMDAeFw0yNDEyMDUwMzM4NDdaFw0yNTEyMDQwMzQzNDdaMDMxMTAvBgNV
BAMTKEU5OUIxQTFBRTE3MDI1NzcwQkI4ODdDRDk1M0ZGQjlCREUwQTIyQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/hFMQynDKEHwXOVGwA95BD8f
MxgHsuYkQsrBIXTsSz6NfDb2OIWx05WTvKyByhjHtu/tTxBUUMP55psHm7ac2ptI
XWAX4Yp1bP7qTXTTMJDEY0PhrrhXz9QsB7/qp5AnzwbFRaBWCNWe1/uXtTVk45Kq
E5JwwxahmWlBijgRR1INyMAK2wP9xhQy1Qkabvq969eil931eFI8D5sUNYC1HTvp
3vV+3vtqV55orS4bcFkF5Ipd8t3uCYG9HJ+FpABdZhPg6akIjKKxx05GYVt/kNrO
ZhFohBFjM7Yj3DaJIydY7+cQmjNGqaduAa6PKWeMO6/NwLQdyY1YEvZ+OrkbAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQU6ZsaGuFwJXcLuIfNlT/7m94KIqIwHwYDVR0j
BBgwFoAUDyRXG2k6BwmziqABQrrArY2KowAwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS5rb21vcmViaS5uZXR3b3JrL3JlcG8v
a29tb3JlYmkvMS8wRjI0NTcxQjY5M0EwNzA5QjM4QUEwMDE0MkJBQzBBRDhEOEFB
MzAwLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzov
L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAx
ODU3NTVjOTFiZTNmOWQvMi8wRjI0NTcxQjY5M0EwNzA5QjM4QUEwMDE0MkJBQzBB
RDhEOEFBMzAwLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYBBQUHMAuGcnJz
eW5jOi8vcnBraS5rb21vcmViaS5uZXR3b3JrL3JlcG8va29tb3JlYmkvMS8zMjYx
MzA2MTNhMzYzMDM0MzUzYTMzNjYzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIw
MzIzMDM5MzMzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRT8wDQYJKoZIhvcNAQELBQADggEB
AHQ82fQCFRmEiUEO48dL/CbIqCuDw7m53305ATdfN2iq0oWeJ1cDsi7AClk2lUSQ
CV2uS79luH9xdpMjSM4Wl58S3I7ot48U3UjRo/amtf/044YIzashrk3xqHKCUWFo
tRa5BuQnIRNd+u6aJWsFesEBhYFbErJ+7zU5QNsp+9DCe+es6o6ftA/+EV2lRDkz
WbyDK82MyDLVORFLHsTh0CsiRXplci01pZ3LmvvLm1zqwfed2bKVdipnI9zJOb/6
HrDlqVSb5A8eyzkvWSp/uuQv2tpTWmRGAnNIX/QXgXzL17UTv2BN9EqlnBePbOCW
/WCcJZxLPRWhEZ4vCe9tcXU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:21 2025 by rpki-client