Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6635303a3a2f34342d3438203d3e20323136333832.roa
File:                     323630323a666166643a6635303a3a2f34342d3438203d3e20323136333832.roa (raw, json)
Hash identifier:          myvEgQNwQvF5kKNd7XagYE7JvdUwghGtH7AFr0SfoLk=
Subject key identifier:   3C:B6:DD:1C:81:D0:03:F5:BE:6B:8A:DE:73:2D:03:CB:9C:65:19:EF
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       413558935065083C9EFF5FB5CBC2A44DD2D90639
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6635303a3a2f34342d3438203d3e20323136333832.roa
Signing time:             Tue 29 Aug 2023 22:26:56 +0000
ROA not before:           Tue 29 Aug 2023 22:21:56 +0000
ROA not after:            Tue 27 Aug 2024 22:26:56 +0000
asID:                     216382
IP address blocks:        2602:fafd:f50::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Jun 2024 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:35:58:93:50:65:08:3c:9e:ff:5f:b5:cb:c2:a4:4d:d2:d9:06:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 29 22:21:56 2023 GMT
            Not After : Aug 27 22:26:56 2024 GMT
        Subject: CN=3CB6DD1C81D003F5BE6B8ADE732D03CB9C6519EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:00:ee:1f:00:18:1d:a5:fa:4a:f0:e2:e4:
                    66:4b:bf:e4:e4:fb:f4:6c:4a:bf:1e:dc:c8:4b:af:
                    a0:b6:75:e9:1b:38:09:0e:d3:28:07:45:69:b1:cb:
                    4f:de:df:75:22:e6:65:8e:df:20:81:56:54:d9:fb:
                    8c:13:8a:b4:03:46:3d:99:e6:7b:63:c3:6e:87:46:
                    92:10:c6:9f:31:2b:12:b8:12:e7:d0:ef:c1:b5:10:
                    ce:e5:e0:e7:aa:1d:65:e8:d5:07:85:56:a3:39:02:
                    3b:52:39:e7:a2:3c:25:7a:61:fd:9b:a1:be:ef:1f:
                    cf:f6:25:57:47:d7:4a:1e:e7:82:fe:3f:69:2a:6a:
                    98:ff:c2:d0:0e:cf:25:d3:d5:cf:87:2a:ee:23:29:
                    ff:cc:2d:ad:88:0d:d2:0e:19:5e:4d:af:19:1d:eb:
                    13:d7:5f:c0:1e:7f:02:63:e9:43:14:b1:ec:96:3d:
                    3a:59:12:92:17:3c:7d:06:c7:cd:1f:3f:cd:e6:bb:
                    70:da:b3:52:93:fc:e8:32:b8:e1:69:d6:5f:09:55:
                    a8:bc:60:51:cd:89:7f:37:fe:d3:06:bb:1a:27:0a:
                    c2:04:a5:22:c1:23:0f:27:a4:34:ed:29:ff:ba:f0:
                    f7:e1:a8:2b:42:36:63:0c:47:37:d5:67:bc:da:da:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B6:DD:1C:81:D0:03:F5:BE:6B:8A:DE:73:2D:03:CB:9C:65:19:EF
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6635303a3a2f34342d3438203d3e20323136333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         28:86:43:6f:30:f5:e7:82:b4:2d:ce:10:fd:c2:7f:00:f6:8d:
         77:ed:79:a7:12:84:a3:46:ef:3e:01:b4:f3:60:32:c3:95:6b:
         de:84:05:41:59:39:e7:73:27:66:8e:fd:d1:58:69:4f:f1:63:
         ec:2e:59:b1:bf:66:e3:2c:b1:fc:fb:bc:82:84:f4:79:6c:f5:
         74:f4:9f:a6:11:76:a8:0e:2a:00:b6:6b:a0:19:95:27:92:f3:
         f9:c1:c9:f0:86:86:a7:20:8d:59:9b:96:d9:2d:be:9a:4d:3d:
         2b:24:99:94:42:a6:96:c5:15:c4:b1:1e:49:f3:f8:e1:fb:f3:
         01:ed:33:de:3e:73:d8:2d:2a:d2:14:27:71:7b:9f:ec:ff:87:
         ad:58:9c:03:74:b3:68:35:40:22:d3:4e:25:44:8b:42:ac:89:
         9a:44:5b:9f:c8:d8:53:c9:30:13:3c:21:18:da:42:13:18:66:
         79:30:39:39:e1:bc:66:81:b8:38:52:7f:10:88:06:e8:e7:33:
         17:f8:3c:ce:5b:4f:3e:b1:db:da:eb:b8:8c:64:90:4a:a0:ed:
         95:95:b2:89:dc:19:18:b1:70:12:df:d9:19:19:75:01:df:f5:
         cc:31:be:5f:44:9d:47:21:e4:c3:d4:3c:8f:71:ed:9a:f9:fc:
         25:87:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 01:49:01 2024 by rpki-client on console-fra.rpki-client.org