Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39322e302f32342d3234203d3e203633303233.roa
File:                     32332e3133342e39322e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          AvTB33qeXLyG2V1wjICOMMTLUVgtOIL+7xhnpOgeYak=
Subject key identifier:   C8:4F:F5:E1:06:72:9E:20:C0:12:44:51:09:D3:88:19:BD:F6:3B:A8
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       1B39CE9F2FA3E96913A8F190D9EF464D2CEE6AA0
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39322e302f32342d3234203d3e203633303233.roa
Signing time:             Wed 22 Nov 2023 22:14:39 +0000
ROA not before:           Wed 22 Nov 2023 22:09:39 +0000
ROA not after:            Wed 20 Nov 2024 22:14:39 +0000
asID:                     63023
IP address blocks:        23.134.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 13:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:39:ce:9f:2f:a3:e9:69:13:a8:f1:90:d9:ef:46:4d:2c:ee:6a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Nov 22 22:09:39 2023 GMT
            Not After : Nov 20 22:14:39 2024 GMT
        Subject: CN=C84FF5E106729E20C012445109D38819BDF63BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:80:e3:e0:84:55:78:ce:f8:57:b1:32:ec:
                    ec:a0:6a:94:0e:27:7d:1e:bd:48:82:89:7f:39:bf:
                    c6:f2:76:75:43:16:e1:4d:67:21:c1:db:38:24:59:
                    b6:fb:2d:c6:1f:ba:17:2b:8d:42:fe:6c:c2:5c:fb:
                    e1:31:f8:28:4a:8d:63:84:a3:fe:cb:19:fe:af:9d:
                    61:80:19:05:d7:40:41:9b:fd:ac:27:1d:91:a3:12:
                    6c:ac:da:79:56:98:f6:0c:aa:4f:0a:63:dd:3b:db:
                    c5:b8:db:af:65:63:8b:75:42:2c:cf:79:61:83:30:
                    53:72:e1:1e:68:c6:00:64:e7:52:c9:fa:a8:65:78:
                    f9:05:9c:aa:82:32:8c:5e:24:ae:6e:e1:79:04:10:
                    b5:f2:ab:24:ff:cf:71:73:c9:29:fc:56:9d:27:e6:
                    de:1e:60:a0:c4:f0:d4:88:64:fe:45:6a:a5:85:33:
                    bf:9d:78:5f:e9:31:00:22:ed:85:72:11:bc:85:9e:
                    fd:1f:3b:67:51:b9:89:c5:3c:8d:a5:d1:06:fc:83:
                    63:1f:4f:f9:73:5e:e2:3e:46:75:77:d0:1f:cc:8b:
                    7a:81:1d:24:4a:fd:dc:1c:f2:1c:a6:2d:ad:10:8b:
                    41:62:94:cb:23:85:f6:6d:15:9a:10:90:f3:a6:3f:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4F:F5:E1:06:72:9E:20:C0:12:44:51:09:D3:88:19:BD:F6:3B:A8
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39322e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:96:22:cb:00:95:60:6b:ed:ba:44:c0:b0:8b:c1:bf:85:43:
         db:4e:7f:b1:c2:3a:f2:71:a5:db:d6:fc:e3:08:60:9a:e2:2e:
         18:01:a3:1d:fb:e9:8e:1f:55:9c:a2:a6:33:c5:45:3c:46:9f:
         d0:65:86:84:d3:41:dc:c7:84:79:75:f2:52:64:0b:73:39:df:
         00:7f:f8:39:b6:2f:ce:06:46:39:ba:bb:2d:da:90:bc:08:44:
         06:6b:30:65:59:61:73:91:71:f9:26:5e:f5:00:c5:09:77:60:
         2a:03:e8:00:38:86:a7:fc:fd:5b:30:2e:6b:a6:4a:cf:57:4c:
         b1:7e:2a:7e:09:59:88:45:af:58:84:fb:90:9a:3c:68:63:f2:
         28:7d:8b:f9:9f:3e:80:ad:2e:4d:fe:cd:74:ba:0b:69:b0:7b:
         62:5d:58:57:5f:9e:c4:67:6c:22:10:48:3e:55:c4:24:ba:26:
         97:3a:2d:5f:a4:01:dc:48:c3:2a:82:0a:b0:62:a2:aa:84:0f:
         02:c7:8b:66:f0:65:f8:02:e5:28:6d:88:44:85:03:4b:42:0f:
         2c:cd:db:65:da:0b:86:20:ca:66:10:a6:dc:4d:9f:40:c3:13:
         41:7c:ee:0a:8b:ea:43:87:ef:21:ab:fe:7e:c2:ad:a9:45:26:
         c9:4b:d4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:21:26 2024 by rpki-client on console-fra.rpki-client.org