Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/326130613a363034353a3a2f33362d3336203d3e20313939373632.roa
File:                     326130613a363034353a3a2f33362d3336203d3e20313939373632.roa (raw, json)
Hash identifier:          3DBQfAmUgyZ4m1nFy0KRbbhs3Y/yqYw93++ZVPm03dI=
Subject key identifier:   3A:4F:66:90:79:30:3F:35:52:D7:C4:6B:AF:AC:44:6E:D8:A1:78:A2
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       3953D265160B61CC5D80D013FF571839BAD2F9AE
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a3a2f33362d3336203d3e20313939373632.roa
Signing time:             Thu 30 Nov 2023 22:46:34 +0000
ROA not before:           Thu 30 Nov 2023 22:41:34 +0000
ROA not after:            Thu 28 Nov 2024 22:46:34 +0000
asID:                     199762
IP address blocks:        2a0a:6045::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 12:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:53:d2:65:16:0b:61:cc:5d:80:d0:13:ff:57:18:39:ba:d2:f9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Nov 30 22:41:34 2023 GMT
            Not After : Nov 28 22:46:34 2024 GMT
        Subject: CN=3A4F669079303F3552D7C46BAFAC446ED8A178A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:3e:a0:b5:f6:80:0a:db:23:b5:2c:b8:51:
                    aa:23:5c:19:7c:6d:e5:d2:08:1a:4e:6c:c5:d2:48:
                    4c:56:12:89:5d:36:51:bf:8f:44:7e:f8:2c:6f:32:
                    60:48:a6:f7:2c:6c:df:a5:0a:a5:b5:b1:7e:40:eb:
                    31:bf:36:32:b1:5f:d2:55:89:72:b1:4d:1b:e0:af:
                    b1:d1:e5:7f:d4:e8:fb:5b:eb:f7:1e:1d:cb:c0:77:
                    75:c3:8f:ad:02:15:3a:cd:b0:71:87:fb:e1:e1:bd:
                    c4:ff:20:ca:19:5e:ba:a9:4d:0b:55:c8:bc:80:38:
                    63:ac:b4:48:52:a0:96:9f:79:a3:64:80:67:32:18:
                    88:98:7c:d7:d9:f1:fc:ac:06:28:c0:05:47:ae:52:
                    09:3b:6c:0c:53:b7:8c:c2:48:3d:25:5a:c3:67:dc:
                    91:8c:30:17:a2:4f:f6:e4:b1:29:e9:22:06:ae:c9:
                    a0:0a:11:90:ad:76:82:53:30:fc:be:84:6c:a0:0f:
                    dc:2c:7f:47:e6:a6:a2:48:49:12:92:d9:43:97:e8:
                    59:45:25:07:d7:11:d7:8b:e7:11:a6:e9:dc:dd:f0:
                    b4:09:d8:a1:83:f3:3d:3e:98:67:2c:91:d0:fb:51:
                    ee:df:bf:c0:c6:a5:0f:00:39:d3:a9:55:f1:5d:6b:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4F:66:90:79:30:3F:35:52:D7:C4:6B:AF:AC:44:6E:D8:A1:78:A2
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a3a2f33362d3336203d3e20313939373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:76:d5:7c:0a:7e:4b:50:82:77:ce:5c:5e:5f:c6:9b:8c:63:
         3a:5d:21:c0:cc:b3:33:6c:a7:eb:56:5a:90:d0:d1:1b:65:80:
         f6:c1:21:ce:e0:bb:d1:6d:d4:d8:09:2b:da:fc:78:d0:4b:d0:
         90:9e:6a:15:91:cd:32:b2:f7:fd:29:86:08:d8:c2:ab:33:9b:
         30:9f:a6:3a:13:bc:e1:ed:b7:e9:7d:fc:4f:60:84:b8:36:ee:
         68:4a:35:e2:fd:de:1b:ee:db:3f:8e:d5:5a:14:5b:ee:3b:f2:
         4d:95:16:e0:b5:b0:60:0e:b2:aa:0a:33:c5:d3:2c:08:84:a5:
         a9:34:af:bb:b2:b1:f5:c2:af:ff:7e:3d:3d:57:a8:b9:a3:e5:
         d3:9c:89:84:ab:ed:bd:95:a2:65:ab:2c:9a:72:e3:5a:2e:08:
         6c:51:b9:7d:bf:92:5a:42:0e:8f:b0:80:6f:59:d6:bb:aa:ca:
         e4:da:60:f7:74:25:8e:ae:0b:65:eb:c1:42:56:3d:14:14:e5:
         b4:c3:03:6f:e3:40:03:79:04:cd:70:92:c7:e0:a0:99:7f:e3:
         50:51:59:61:56:36:b4:c5:98:4f:24:d7:7a:a1:bc:82:d4:1d:
         de:8c:d6:ef:c4:0e:1f:7d:5e:af:fd:4f:96:de:22:b7:c7:d7:
         c5:63:58:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:15:24 2024 by rpki-client on console-ams.rpki-client.org