Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/5/326130613a363034353a623030303a3a2f33362d3336203d3e20313939333736.roa
File:                     326130613a363034353a623030303a3a2f33362d3336203d3e20313939333736.roa (raw, json)
Hash identifier:          3NlhixJLCPfvqsZmah78Y9alUgdK2F7/8hW2gsARQ+s=
Subject key identifier:   BC:D1:99:ED:2C:47:35:29:80:0E:70:AE:60:15:29:50:6D:A6:8A:02
Certificate issuer:       /CN=421B765C540F139258E8C8E64499AC6317AE6F93
Certificate serial:       344C096315A2D7C5D9863E0AEDA4CAD86A96B9B9
Authority key identifier: 42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/5/326130613a363034353a623030303a3a2f33362d3336203d3e20313939333736.roa
Signing time:             Thu 03 Jul 2025 16:46:32 +0000
ROA not before:           Thu 03 Jul 2025 16:41:32 +0000
ROA not after:            Thu 02 Jul 2026 16:46:32 +0000
asID:                     199376
IP address blocks:        2a0a:6045:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl
                          rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4c:09:63:15:a2:d7:c5:d9:86:3e:0a:ed:a4:ca:d8:6a:96:b9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421B765C540F139258E8C8E64499AC6317AE6F93
        Validity
            Not Before: Jul  3 16:41:32 2025 GMT
            Not After : Jul  2 16:46:32 2026 GMT
        Subject: CN=BCD199ED2C473529800E70AE601529506DA68A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:a3:c6:b9:02:53:6c:a9:18:15:4b:58:17:
                    cb:70:2b:a7:b8:b8:21:d6:ca:3e:38:f7:44:d2:b4:
                    bc:86:6a:9e:1d:f9:70:d4:24:3d:60:ac:00:04:b8:
                    e3:4c:42:54:47:69:07:57:ef:25:bc:f6:db:62:00:
                    bc:65:59:33:01:f5:8d:45:dc:b5:d6:f7:cf:34:3a:
                    7e:db:65:80:26:b6:be:38:c0:41:38:8e:8f:79:bc:
                    82:1e:7f:df:d8:3f:68:1b:bb:93:ad:f6:8d:7b:61:
                    b2:0c:ec:50:06:f0:fb:b8:94:0a:30:32:8e:b5:1c:
                    14:4b:4d:07:ba:19:0f:4d:28:55:ab:b6:bc:37:d5:
                    dd:22:19:4a:04:c4:d4:b4:23:41:48:bd:fe:d5:15:
                    84:91:d0:12:ef:22:5c:56:9d:02:0c:6a:f8:1d:48:
                    b1:c6:7f:27:c2:21:ca:16:50:bd:72:ef:b5:b8:11:
                    75:25:77:62:6c:2c:d5:cf:3c:75:f4:86:57:38:ef:
                    44:46:f6:d0:ec:62:eb:7c:b1:25:6a:02:86:4a:48:
                    ce:03:36:4a:39:48:84:50:d4:cd:06:d5:24:6c:6a:
                    1d:10:d9:d0:8e:8e:df:6f:9f:a5:ae:4b:9b:41:78:
                    f0:99:63:cd:67:21:76:56:31:00:e1:c8:a6:df:c0:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D1:99:ED:2C:47:35:29:80:0E:70:AE:60:15:29:50:6D:A6:8A:02
            X509v3 Authority Key Identifier:
                keyid:42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/5/326130613a363034353a623030303a3a2f33362d3336203d3e20313939333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:79:7a:ae:f8:9b:b8:34:1b:f5:e4:00:67:b8:ef:a4:67:c0:
         40:a3:0b:a9:30:d4:fc:1b:ab:80:fc:91:66:fd:c4:b1:f0:78:
         b9:3f:d6:6c:c0:73:6d:0d:b4:40:68:d4:96:59:d2:a7:1f:ef:
         85:fe:ea:06:f2:70:11:09:55:9e:6e:0f:54:32:bd:49:0e:83:
         4b:12:d2:10:8c:d9:3e:2e:79:33:ea:62:e3:4c:c3:54:3e:85:
         74:4e:3e:7b:0f:02:57:14:99:67:66:ce:a5:c5:af:26:b5:03:
         15:a7:f6:61:61:6d:47:4e:c8:95:0d:85:d3:de:a1:a1:a9:38:
         5c:4c:4b:4d:0d:a2:bf:9f:6b:af:fa:1c:4a:eb:f8:c9:97:c4:
         5c:4d:38:cd:b1:6e:dd:9b:36:09:dc:fd:5d:7c:39:78:cc:42:
         b0:2c:56:98:fd:05:d1:82:26:a3:13:55:ba:79:87:c3:45:e8:
         5b:38:b0:72:0a:a0:3e:e9:81:61:5d:b8:17:b9:36:ff:1f:f9:
         61:bc:07:d2:97:d5:35:e4:a6:eb:c9:7d:00:27:ce:e8:0e:4b:
         bb:d4:9e:5f:cd:7f:8a:1e:3d:38:b2:64:41:75:43:0c:74:08:
         22:03:10:98:f9:c4:28:a8:5d:a0:12:4d:f2:ea:aa:f5:1d:d6:
         40:62:0c:9e
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUNEwJYxWi18XZhj4K7aTK2GqWubkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxQjc2NUM1NDBGMTM5MjU4RThDOEU2NDQ5OUFDNjMx
N0FFNkY5MzAeFw0yNTA3MDMxNjQxMzJaFw0yNjA3MDIxNjQ2MzJaMDMxMTAvBgNV
BAMTKEJDRDE5OUVEMkM0NzM1Mjk4MDBFNzBBRTYwMTUyOTUwNkRBNjhBMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxKPGuQJTbKkYFUtYF8twK6e4
uCHWyj4490TStLyGap4d+XDUJD1grAAEuONMQlRHaQdX7yW89ttiALxlWTMB9Y1F
3LXW9880On7bZYAmtr44wEE4jo95vIIef9/YP2gbu5Ot9o17YbIM7FAG8Pu4lAow
Mo61HBRLTQe6GQ9NKFWrtrw31d0iGUoExNS0I0FIvf7VFYSR0BLvIlxWnQIMavgd
SLHGfyfCIcoWUL1y77W4EXUld2JsLNXPPHX0hlc470RG9tDsYut8sSVqAoZKSM4D
Nko5SIRQ1M0G1SRsah0Q2dCOjt9vn6WuS5tBePCZY81nIXZWMQDhyKbfwEQNAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUvNGZ7SxHNSmADnCuYBUpUG2migIwHwYDVR0j
BBgwFoAUQht2XFQPE5JY6MjmRJmsYxeub5MwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS5rb21vcmViaS5uZXR3b3JrL3JlcG8v
a29tb3JlYmkvNS80MjFCNzY1QzU0MEYxMzkyNThFOEM4RTY0NDk5QUM2MzE3QUU2
RjkzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzov
L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAx
ODU3NTVjOTFiZTNmOWQvNy80MjFCNzY1QzU0MEYxMzkyNThFOEM4RTY0NDk5QUM2
MzE3QUU2RjkzLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYBBQUHMAuGcnJz
eW5jOi8vcnBraS5rb21vcmViaS5uZXR3b3JrL3JlcG8va29tb3JlYmkvNS8zMjYx
MzA2MTNhMzYzMDM0MzUzYTYyMzAzMDMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIw
MzEzOTM5MzMzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgpgRbAwDQYJKoZIhvcNAQELBQADggEB
AG15eq74m7g0G/XkAGe476RnwECjC6kw1Pwbq4D8kWb9xLHweLk/1mzAc20NtEBo
1JZZ0qcf74X+6gbycBEJVZ5uD1QyvUkOg0sS0hCM2T4ueTPqYuNMw1Q+hXROPnsP
AlcUmWdmzqXFrya1AxWn9mFhbUdOyJUNhdPeoaGpOFxMS00Nor+fa6/6HErr+MmX
xFxNOM2xbt2bNgnc/V18OXjMQrAsVpj9BdGCJqMTVbp5h8NF6Fs4sHIKoD7pgWFd
uBe5Nv8f+WG8B9KX1TXkpuvJfQAnzugOS7vUnl/Nf4oePTiyZEF1Qwx0CCIDEJj5
xCioXaASTfLqqvUd1kBiDJ4=
-----END CERTIFICATE-----
Generated at Sun Jul 6 02:44:59 2025 by rpki-client