Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39312e302f32342d3234203d3e203633303233.roa
File:                     32332e3133342e39312e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          cYaG1vYiik+eFsjU4/awvNACW/EQllfY6XuL3x96TxI=
Subject key identifier:   5C:4A:16:BE:89:AD:E3:F2:B2:84:EA:AC:3E:EC:AD:F9:3A:C2:41:EA
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       42D0C6606A1F7201BB2BBFDFB4214A650C3936F6
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39312e302f32342d3234203d3e203633303233.roa
Signing time:             Wed 22 Nov 2023 22:14:39 +0000
ROA not before:           Wed 22 Nov 2023 22:09:39 +0000
ROA not after:            Wed 20 Nov 2024 22:14:39 +0000
asID:                     63023
IP address blocks:        23.134.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 19:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d0:c6:60:6a:1f:72:01:bb:2b:bf:df:b4:21:4a:65:0c:39:36:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Nov 22 22:09:39 2023 GMT
            Not After : Nov 20 22:14:39 2024 GMT
        Subject: CN=5C4A16BE89ADE3F2B284EAAC3EECADF93AC241EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:d8:57:56:0d:68:32:16:78:96:2b:ca:8c:
                    ae:b6:57:25:2f:ba:2b:e2:b7:e7:28:fd:e6:9d:6c:
                    d2:30:cd:8b:81:dc:05:10:fb:89:b3:7d:13:30:0c:
                    07:b1:ce:a7:14:0f:79:c6:50:2b:64:e6:18:0d:e4:
                    29:45:20:10:e1:3a:ae:22:f9:17:7f:19:37:2a:8f:
                    98:23:1e:e6:6d:1b:0e:48:bf:f0:aa:0d:91:a8:e0:
                    37:20:a7:9f:49:df:0a:97:04:d4:a9:62:06:f9:19:
                    3a:0d:4b:e0:d6:81:0b:f5:d3:05:03:51:a6:c5:e3:
                    05:f6:ef:7f:b7:c0:9f:0a:c4:5f:be:ea:d4:a5:2b:
                    46:04:f6:28:27:10:9f:bf:90:72:c1:55:2a:95:57:
                    02:78:97:65:a4:86:d3:25:77:09:24:5b:34:e9:25:
                    a9:f9:f5:4a:91:09:26:70:51:24:8a:0b:fa:32:c8:
                    2a:b7:3a:f0:96:3b:33:58:3b:b3:ca:57:0a:dc:dd:
                    6f:2d:e2:ab:c6:f5:83:6c:75:6a:25:7f:f5:c8:2f:
                    cc:7b:45:b6:04:e6:45:f4:40:61:c0:99:f0:18:0e:
                    4c:ce:cd:a5:5a:0c:6c:86:0d:be:49:95:ac:df:40:
                    3b:be:cd:62:01:d9:a7:ee:b6:de:d5:ed:b5:f1:82:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4A:16:BE:89:AD:E3:F2:B2:84:EA:AC:3E:EC:AD:F9:3A:C2:41:EA
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39312e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:42:94:69:5e:67:84:c3:a5:69:1e:ec:b3:9d:00:a5:a1:a6:
         c8:1f:d1:12:09:5b:69:11:96:ec:c7:0a:57:c2:45:b5:f2:7a:
         39:55:68:82:4d:26:d5:f5:1a:b9:53:5b:91:93:63:96:8e:7a:
         b5:43:27:c9:cf:fc:51:7e:08:8a:6a:0a:7b:43:aa:ca:4e:ef:
         b6:8f:93:ad:d3:d9:c3:ee:be:ea:d9:e0:94:c1:71:f7:43:f7:
         99:73:6c:3c:c5:c3:fb:f7:80:b9:bd:d0:57:c4:86:67:fc:75:
         18:02:8f:87:e0:1a:9d:9f:a3:2c:b3:25:e2:42:0f:28:9e:d1:
         36:16:ca:b2:be:68:1e:2e:fd:af:e4:c9:ea:07:0e:82:7b:d2:
         b7:9c:b3:b2:f2:f4:c4:2e:ee:86:50:83:26:3c:48:ad:79:30:
         15:56:a7:74:9f:08:10:63:dc:e0:d8:f7:65:64:45:91:5f:fb:
         04:9d:22:4c:a1:54:2d:03:78:b7:75:41:fd:4f:77:b7:a4:7f:
         29:86:07:86:18:44:4b:85:0a:2d:14:32:52:fe:0f:11:97:19:
         a4:1c:cd:9a:d1:2c:d5:72:ec:82:f2:f0:4a:5b:73:d7:de:00:
         e9:70:08:23:e9:59:00:b0:63:26:25:05:1d:5e:ce:21:65:b5:
         e6:b9:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:39:42 2024 by rpki-client on console-ams.rpki-client.org