Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e20393234.roa
File:                     32332e3133342e38382e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          WUhIsa+DQb0vN3RI+W5TnT1p1Q5iwEpIEn/DUAijUs8=
Subject key identifier:   C6:5D:27:EB:03:C4:45:07:65:0F:DD:38:31:B8:A3:38:FE:86:25:E7
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       2162F11A0FE685D7FCC8D451AAFD4D1D8E78F7DA
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e20393234.roa
Signing time:             Wed 22 Nov 2023 22:14:40 +0000
ROA not before:           Wed 22 Nov 2023 22:09:40 +0000
ROA not after:            Wed 20 Nov 2024 22:14:40 +0000
asID:                     924
IP address blocks:        23.134.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 09:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:62:f1:1a:0f:e6:85:d7:fc:c8:d4:51:aa:fd:4d:1d:8e:78:f7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Nov 22 22:09:40 2023 GMT
            Not After : Nov 20 22:14:40 2024 GMT
        Subject: CN=C65D27EB03C44507650FDD3831B8A338FE8625E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:f4:3c:32:6c:a0:ac:fe:84:2a:f4:a8:50:
                    a2:8a:d9:b4:c5:66:07:6d:a7:9a:a0:c7:80:b9:6e:
                    f9:ff:1f:25:e8:ff:23:0f:e7:40:9f:d0:fa:29:d2:
                    ab:c3:5e:4e:8b:16:98:16:11:38:35:11:8e:d2:c6:
                    14:08:ba:86:fc:79:6f:35:f9:f6:92:5f:be:df:d5:
                    71:41:aa:8b:8e:42:41:b1:ad:18:18:9c:58:da:28:
                    05:18:56:9f:c9:a2:4d:13:02:ae:8d:05:bd:c8:90:
                    fa:2c:55:f5:85:13:5b:fd:3c:f3:6b:e7:9d:15:1d:
                    99:3e:b1:16:ed:e4:cc:bc:0f:a6:57:42:15:e0:07:
                    2d:3b:aa:43:6e:77:0c:e2:33:53:fc:b0:bc:18:76:
                    e7:59:40:4c:64:5a:57:a8:f6:c6:5d:41:4e:7c:2c:
                    7c:01:29:a0:ad:a5:d6:ff:70:1f:82:b6:7f:af:f3:
                    ae:da:21:ee:13:e7:d8:b8:15:9b:dc:a0:8d:e2:ee:
                    d5:4c:4d:14:a2:f1:cb:97:9e:40:de:75:db:9b:6b:
                    71:7f:fe:cd:be:69:a2:97:9c:54:48:79:44:2c:29:
                    e7:fc:f6:bc:3d:8e:df:d0:dd:ac:41:4e:e5:73:83:
                    e3:01:d7:6b:42:0d:85:df:cf:84:00:2d:3b:fe:b1:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5D:27:EB:03:C4:45:07:65:0F:DD:38:31:B8:A3:38:FE:86:25:E7
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f1:53:78:d0:b5:0b:63:09:a8:6a:59:6b:de:2f:2f:92:80:
         e9:05:05:39:a8:a8:ef:bb:9a:a6:7c:e1:cc:c4:3e:f8:cc:7f:
         80:e8:c1:a0:b3:19:74:e3:9e:04:da:ec:80:23:dc:a9:f8:19:
         28:1c:91:d1:62:4f:1c:60:3b:7a:85:75:f3:98:d7:3d:f4:ee:
         27:73:3b:de:86:cf:90:04:d7:fc:01:0c:ba:48:b5:59:52:5c:
         6f:96:53:17:a0:de:19:21:ad:30:33:12:6b:53:d7:f2:cd:11:
         60:c8:04:27:8d:e9:c4:6f:a2:ee:79:58:36:d7:90:3f:5b:b7:
         74:b4:6c:82:5f:ac:59:15:a9:5e:e8:e4:88:82:4f:d1:8c:5c:
         5c:95:5e:56:a2:8f:2c:aa:d1:57:c3:cb:fa:53:e7:5c:06:4d:
         5c:3d:f0:09:c9:85:dd:d7:ed:f2:1f:d9:ad:f8:3f:0b:d4:8a:
         f3:72:44:b2:aa:95:d5:04:5f:42:a9:cd:6a:9b:fa:37:19:26:
         58:cf:a5:ed:7a:55:d2:e5:c6:51:63:58:95:95:84:dd:2f:6c:
         2a:67:85:e6:30:e2:12:8b:a5:09:e3:e5:3f:2b:a0:24:16:a5:
         7c:bc:fc:ce:9e:4d:77:f8:c4:8d:41:a4:6f:60:0f:6b:5c:8d:
         59:1a:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:56:21 2024 by rpki-client on console-fra.rpki-client.org