Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203239383032.roa
File:                     3231362e3134362e32372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          wuGcgg195+vCtXsAw4d4XV/P5pzxh94iKH27Mf3YiFM=
Subject key identifier:   6D:EC:86:05:C1:86:E6:08:4B:EB:C7:96:CD:99:A1:7B:E7:A5:F6:7D
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       78F64C9A57D9CA371B48763F25FEEB8967E0018C
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203239383032.roa
Signing time:             Tue 12 Mar 2024 02:12:44 +0000
ROA not before:           Tue 12 Mar 2024 02:07:44 +0000
ROA not after:            Tue 11 Mar 2025 02:12:44 +0000
asID:                     29802
IP address blocks:        216.146.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 17:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f6:4c:9a:57:d9:ca:37:1b:48:76:3f:25:fe:eb:89:67:e0:01:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Mar 12 02:07:44 2024 GMT
            Not After : Mar 11 02:12:44 2025 GMT
        Subject: CN=6DEC8605C186E6084BEBC796CD99A17BE7A5F67D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:34:1f:10:55:77:cb:e1:7a:0e:3d:ed:c3:
                    07:8b:0c:71:62:14:a5:3b:3d:cb:25:00:ba:79:d1:
                    ad:5e:60:64:5c:7d:3c:16:df:b4:e6:28:74:ff:98:
                    a5:6e:97:5a:0c:66:06:d9:61:2a:76:73:ac:57:53:
                    ca:83:e0:82:73:85:c7:69:f6:8c:33:9e:2f:74:64:
                    bc:88:3f:59:f3:0a:de:d6:42:6c:a7:a2:4a:88:60:
                    c4:12:33:88:5b:27:cc:4f:f5:5c:e1:14:92:07:c0:
                    e5:ac:82:c1:e0:a6:e5:06:09:da:03:cc:46:64:08:
                    c5:3d:eb:6d:18:72:4d:78:d2:cf:15:c9:de:2f:77:
                    0b:ff:cf:ec:ce:09:d0:2b:ec:2d:dc:dc:89:ea:aa:
                    63:7e:32:71:09:43:57:93:df:6e:be:ce:06:3e:7d:
                    b7:ad:84:22:99:27:95:75:1b:ed:74:9d:2d:07:11:
                    20:2c:7f:d1:f0:62:b0:7d:6a:39:75:77:a8:b5:f9:
                    fc:94:59:fd:41:0b:41:f6:71:f5:1a:01:69:32:af:
                    17:22:65:3e:f6:38:3e:e4:fe:55:63:80:f7:72:69:
                    b5:4a:bc:b5:41:b6:70:32:df:26:b1:01:56:aa:ee:
                    ca:6a:bb:2f:3b:8e:83:9b:80:ea:38:b0:b0:01:ac:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EC:86:05:C1:86:E6:08:4B:EB:C7:96:CD:99:A1:7B:E7:A5:F6:7D
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ea:15:e7:39:01:ce:9b:42:5a:09:91:31:a2:70:4d:7b:a3:
         b7:a7:0c:2d:d2:b4:6b:34:c3:e2:81:16:c5:1a:84:7c:b9:08:
         b3:e6:69:85:f1:16:46:77:66:bb:02:1d:8e:ad:5d:4c:53:2e:
         94:13:ef:cc:e6:b3:36:69:97:dc:83:00:92:03:70:1e:17:40:
         9a:fe:15:66:9e:2d:ed:60:e6:2d:6b:00:7b:ab:7f:0f:28:cb:
         42:6c:f7:40:06:93:14:94:72:fd:5e:30:c4:7b:2d:ba:04:6b:
         56:bb:21:57:47:54:a0:43:65:97:b1:0e:d5:50:60:45:22:ec:
         33:ff:5b:96:a6:6d:4b:61:6c:c2:15:b4:da:7c:7f:5a:e8:d1:
         3b:d4:83:d8:49:ff:04:52:a8:70:47:bc:2b:7d:23:f1:3c:78:
         3e:3c:6d:b9:60:54:f8:87:d0:42:36:8c:38:0a:85:56:de:b2:
         4b:59:ad:59:98:fb:36:16:bb:66:3e:c9:f9:fe:ac:fa:46:36:
         8e:95:be:5b:4c:e0:b2:c5:e3:07:c8:36:ec:b5:d8:54:61:ce:
         10:38:90:2e:56:e5:d0:6d:26:58:c3:15:f8:6a:5f:5a:51:42:
         5c:ad:c5:c7:73:63:96:d4:68:67:22:11:1e:9a:e7:1d:88:4b:
         16:2a:2d:d2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIUePZMmlfZyjcbSHY/Jf7riWfgAYwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTExYWU5MjEz
YjUwNmI3OGJmOTkyNGFkNDIwHhcNMjQwMzEyMDIwNzQ0WhcNMjUwMzExMDIxMjQ0
WjAzMTEwLwYDVQQDEyg2REVDODYwNUMxODZFNjA4NEJFQkM3OTZDRDk5QTE3QkU3
QTVGNjdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmc0HxBVd8vh
eg497cMHiwxxYhSlOz3LJQC6edGtXmBkXH08Ft+05ih0/5ilbpdaDGYG2WEqdnOs
V1PKg+CCc4XHafaMM54vdGS8iD9Z8wre1kJsp6JKiGDEEjOIWyfMT/Vc4RSSB8Dl
rILB4KblBgnaA8xGZAjFPettGHJNeNLPFcneL3cL/8/szgnQK+wt3NyJ6qpjfjJx
CUNXk99uvs4GPn23rYQimSeVdRvtdJ0tBxEgLH/R8GKwfWo5dXeotfn8lFn9QQtB
9nH1GgFpMq8XImU+9jg+5P5VY4D3cmm1Sry1QbZwMt8msQFWqu7KarsvO46Dm4Dq
OLCwAawzKwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFG3shgXBhuYIS+vHls2ZoXvn
pfZ9MB8GA1UdIwQYMBaAFGvsGu1lCLsHURsBsXdVF5La6yyQMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8yLzZCRUMxQUVENjUwOEJCMDc1MTFCMDFC
MTc3NTUxNzkyREFFQjJDOTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTMwMzVjZC1jNDZkLTQy
MWMtYjllMC1lNmQ0ZGQzMzZkMjEvY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTEx
YWU5MjEzYjUwNmI3OGJmOTkyNGFkNDIuY2VyMIGIBggrBgEFBQcBCwR8MHoweAYI
KwYBBQUHMAuGbHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzIvMzIzMTM2MmUzMTM0MzYyZTMyMzcyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JIbMA0GCSqGSIb3DQEBCwUA
A4IBAQBg6hXnOQHOm0JaCZExonBNe6O3pwwt0rRrNMPigRbFGoR8uQiz5mmF8RZG
d2a7Ah2OrV1MUy6UE+/M5rM2aZfcgwCSA3AeF0Ca/hVmni3tYOYtawB7q38PKMtC
bPdABpMUlHL9XjDEey26BGtWuyFXR1SgQ2WXsQ7VUGBFIuwz/1uWpm1LYWzCFbTa
fH9a6NE71IPYSf8EUqhwR7wrfSPxPHg+PG25YFT4h9BCNow4CoVW3rJLWa1ZmPs2
FrtmPsn5/qz6RjaOlb5bTOCyxeMHyDbstdhUYc4QOJAuVuXQbSZYwxX4al9aUUJc
rcXHc2OW1GhnIhEemucdiEsWKi3S
-----END CERTIFICATE-----
Generated at Tue Apr 30 15:50:29 2024 by rpki-client on console-fra.rpki-client.org