Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/5/326130613a363034353a336630303a3a2f34302d3438203d3e20323039333130.roa
File:                     326130613a363034353a336630303a3a2f34302d3438203d3e20323039333130.roa (raw, json)
Hash identifier:          +rs/31HlRhHrdiQZT4HGfjhEcxOGfXRBdlbOhNvCqSA=
Subject key identifier:   29:67:74:3E:DB:B5:4A:31:9A:91:E7:CF:09:FC:1A:E9:67:F2:AC:DF
Certificate issuer:       /CN=421B765C540F139258E8C8E64499AC6317AE6F93
Certificate serial:       659B30F6E3D2E68579AD30C0A925AC1CFC983A5A
Authority key identifier: 42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/5/326130613a363034353a336630303a3a2f34302d3438203d3e20323039333130.roa
Signing time:             Thu 03 Jul 2025 16:46:32 +0000
ROA not before:           Thu 03 Jul 2025 16:41:32 +0000
ROA not after:            Thu 02 Jul 2026 16:46:32 +0000
asID:                     209310
IP address blocks:        2a0a:6045:3f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl
                          rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 19:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9b:30:f6:e3:d2:e6:85:79:ad:30:c0:a9:25:ac:1c:fc:98:3a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421B765C540F139258E8C8E64499AC6317AE6F93
        Validity
            Not Before: Jul  3 16:41:32 2025 GMT
            Not After : Jul  2 16:46:32 2026 GMT
        Subject: CN=2967743EDBB54A319A91E7CF09FC1AE967F2ACDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:9e:92:28:6d:ee:43:c9:e4:0c:f0:42:10:
                    0a:7f:76:39:e3:2f:22:e1:61:aa:8e:78:44:16:84:
                    e6:f6:5d:84:cf:73:25:22:93:14:95:d3:48:93:ed:
                    0e:62:5e:b0:cb:7e:26:d0:4e:1b:68:dc:c3:a0:48:
                    68:81:42:d2:d8:8d:bc:4e:33:78:28:34:a5:b7:34:
                    2e:b9:62:d7:42:a0:ee:44:5b:bf:c5:56:da:6a:f0:
                    d3:8a:cc:83:1c:9e:a7:aa:26:73:d3:20:42:c8:b5:
                    27:a8:4d:3e:a8:c2:93:a5:d2:21:5c:e9:8e:03:9b:
                    b9:d2:96:5a:af:18:ac:86:f4:93:9c:2f:e7:0a:ff:
                    a1:89:5e:b2:19:9b:b0:64:67:95:54:83:f4:2c:f6:
                    9a:05:5a:6a:90:86:37:f5:cb:c3:a9:c3:14:db:76:
                    f7:67:da:75:72:ee:9f:78:d9:43:f8:a7:65:5f:68:
                    5a:d6:4d:a1:25:c4:5b:a7:30:07:58:62:0d:46:75:
                    46:b9:07:31:69:27:e2:67:4f:14:31:17:47:ec:cb:
                    20:ec:a3:d2:91:9c:e0:36:8b:41:83:4f:cb:b3:00:
                    9f:91:e0:07:ab:cc:05:6d:90:8e:11:2f:38:7d:ba:
                    d1:ed:dc:e8:5e:19:bf:6b:fb:9a:1b:63:8d:4b:c0:
                    5c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:67:74:3E:DB:B5:4A:31:9A:91:E7:CF:09:FC:1A:E9:67:F2:AC:DF
            X509v3 Authority Key Identifier:
                keyid:42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/5/326130613a363034353a336630303a3a2f34302d3438203d3e20323039333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:32:88:67:19:0a:bf:a4:52:01:68:a0:05:50:e2:f0:61:f8:
         34:cb:46:84:e7:2c:da:9f:d3:24:7e:1b:65:1f:3b:68:36:7c:
         76:b9:8a:de:5e:98:28:3c:6f:f8:6e:6d:1d:96:2c:db:1c:68:
         64:3f:7e:b0:a5:4c:eb:5a:c2:cb:91:c0:25:34:a5:da:6b:62:
         46:a2:22:6a:64:0f:32:dc:f0:18:63:92:f6:ed:dc:eb:c8:1d:
         52:c9:2b:63:ff:7f:fb:c6:30:03:62:3f:d0:52:cf:14:32:81:
         1c:33:85:45:b9:72:97:78:de:28:e9:38:e8:51:8c:24:ae:7a:
         f2:14:e7:8d:c8:b8:f0:0f:5f:db:1a:86:c7:f9:7e:09:f5:b7:
         a9:b6:aa:82:87:8f:5b:0a:30:2e:77:4b:5a:d3:51:30:fa:a4:
         dc:43:6c:46:a1:49:c8:a4:13:2b:0c:b9:3a:cc:00:30:1a:5e:
         7d:b9:e8:d8:17:ff:3b:ef:93:db:bb:9b:e2:d4:64:6e:8b:fc:
         fd:f4:d6:61:bc:ea:b1:1a:e8:8a:b8:77:61:5b:ea:be:9e:be:
         10:5a:5a:d7:48:a8:4d:3c:6d:9c:c9:d2:be:45:a2:85:5c:15:
         63:30:a9:b6:a2:d4:8f:58:d3:ad:73:ad:c2:77:89:53:43:dc:
         cd:38:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 10:33:58 2025 by rpki-client