Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39332e302f32342d3234203d3e203633303233.roa
File:                     32332e3133342e39332e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          Gw1lfLIVU0IA2rD7kC86a7ZQGw89tRSUgMpGPsFST/Y=
Subject key identifier:   20:FF:BB:F3:77:99:A8:E4:5C:0E:5A:C8:81:A6:44:EA:0E:E1:AA:F1
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       3F753B2B16C520DAD819508F6A8EE4684BDB44AC
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39332e302f32342d3234203d3e203633303233.roa
Signing time:             Wed 22 Nov 2023 22:14:40 +0000
ROA not before:           Wed 22 Nov 2023 22:09:40 +0000
ROA not after:            Wed 20 Nov 2024 22:14:40 +0000
asID:                     63023
IP address blocks:        23.134.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 02:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:75:3b:2b:16:c5:20:da:d8:19:50:8f:6a:8e:e4:68:4b:db:44:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Nov 22 22:09:40 2023 GMT
            Not After : Nov 20 22:14:40 2024 GMT
        Subject: CN=20FFBBF37799A8E45C0E5AC881A644EA0EE1AAF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4e:c5:3a:96:f6:5b:04:8e:9d:e5:e5:1b:28:
                    64:17:00:cc:62:d0:fa:b1:bb:f3:74:9c:4b:cb:6b:
                    e0:14:4b:01:0e:a0:13:b4:b2:85:d7:e7:5c:89:d0:
                    a7:be:44:92:5a:d9:d7:fc:9e:97:f3:b2:06:7e:ea:
                    7a:68:59:9a:7e:69:1d:10:3b:38:c0:4a:00:a4:1e:
                    b0:c4:cd:39:2f:f4:d5:32:f2:7b:7e:4b:f3:0c:4a:
                    9c:19:a4:2c:b6:90:2e:ad:c7:25:d1:6b:4a:86:31:
                    f1:83:8a:29:01:a8:de:62:2d:89:e5:5e:60:40:2d:
                    32:b4:5a:64:13:8d:ab:8a:28:1d:3a:93:b1:c3:95:
                    5c:5c:cb:00:37:30:e7:e7:e8:7c:7a:85:c3:51:36:
                    35:54:2a:e1:63:23:5a:06:bf:13:9c:37:b3:49:d0:
                    df:ef:9e:85:11:0b:27:82:6c:ef:60:74:9b:67:d4:
                    f9:98:43:17:02:d2:93:a9:af:aa:43:70:45:fe:49:
                    67:45:62:ad:4b:58:03:15:f8:0e:ab:59:74:10:60:
                    9d:0c:d6:fd:11:7d:70:73:f5:41:a5:ab:f9:6e:93:
                    e0:b3:19:0f:f6:9a:a1:83:22:f8:6f:51:9e:d5:8e:
                    11:d7:67:69:76:6f:d3:7a:b3:b7:14:b4:2a:58:40:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FF:BB:F3:77:99:A8:E4:5C:0E:5A:C8:81:A6:44:EA:0E:E1:AA:F1
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39332e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:34:e4:90:e7:d0:e0:b6:f2:d9:ad:52:a4:ab:61:24:47:97:
         4c:56:52:dc:bf:61:d8:30:b1:9a:7f:cc:cc:0c:c5:7e:9f:7b:
         1e:2b:f3:ae:dc:13:1b:7f:61:b7:0f:3c:47:50:b4:78:8c:61:
         90:64:f7:24:65:81:3a:9f:c3:3d:e9:5f:41:5c:9a:70:f4:af:
         e0:50:54:50:a2:50:98:b1:bf:18:51:c9:1c:ad:0a:40:01:cc:
         86:45:31:4c:a5:4d:fa:7e:28:a7:61:65:df:ce:28:7b:15:96:
         68:f0:e0:a2:58:dc:cb:26:eb:3b:81:35:00:8b:b4:a0:15:85:
         a7:9c:f8:09:7d:6c:49:2d:3c:36:9c:36:24:73:e9:e1:6d:07:
         67:c7:dc:c3:a8:42:eb:88:9f:8c:dd:16:49:64:ac:2b:ec:62:
         70:43:6f:6f:e2:ac:77:7b:f7:55:be:79:22:66:47:af:87:e2:
         16:d2:5d:5c:a8:e5:a0:cd:45:99:f8:a9:f5:ae:fb:15:5e:88:
         c8:f8:d4:ac:77:73:c9:5c:af:0b:29:1d:5d:32:48:ff:37:d7:
         37:21:bd:49:68:69:72:cb:40:1e:cb:fd:7d:f0:df:e2:a0:d3:
         bf:21:28:d3:c2:99:ad:b5:10:19:fc:2b:e2:6c:aa:40:a0:2d:
         fc:a5:47:3b
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUP3U7KxbFINrYGVCPao7kaEvbRKwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTExYWU5MjEz
YjUwNmI3OGJmOTkyNGFkNDIwHhcNMjMxMTIyMjIwOTQwWhcNMjQxMTIwMjIxNDQw
WjAzMTEwLwYDVQQDEygyMEZGQkJGMzc3OTlBOEU0NUMwRTVBQzg4MUE2NDRFQTBF
RTFBQUYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E7FOpb2WwSO
neXlGyhkFwDMYtD6sbvzdJxLy2vgFEsBDqATtLKF1+dcidCnvkSSWtnX/J6X87IG
fup6aFmafmkdEDs4wEoApB6wxM05L/TVMvJ7fkvzDEqcGaQstpAurccl0WtKhjHx
g4opAajeYi2J5V5gQC0ytFpkE42riigdOpOxw5VcXMsANzDn5+h8eoXDUTY1VCrh
YyNaBr8TnDezSdDf756FEQsngmzvYHSbZ9T5mEMXAtKTqa+qQ3BF/klnRWKtS1gD
FfgOq1l0EGCdDNb9EX1wc/VBpav5bpPgsxkP9pqhgyL4b1Ge1Y4R12dpdm/TerO3
FLQqWEBpmwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCD/u/N3majkXA5ayIGmROoO
4arxMB8GA1UdIwQYMBaAFGvsGu1lCLsHURsBsXdVF5La6yyQMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8yLzZCRUMxQUVENjUwOEJCMDc1MTFCMDFC
MTc3NTUxNzkyREFFQjJDOTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTMwMzVjZC1jNDZkLTQy
MWMtYjllMC1lNmQ0ZGQzMzZkMjEvY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTEx
YWU5MjEzYjUwNmI3OGJmOTkyNGFkNDIuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYI
KwYBBQUHMAuGanJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzIvMzIzMzJlMzEzMzM0MmUzOTMzMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzYzMzMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeGXTANBgkqhkiG9w0BAQsFAAOC
AQEAqjTkkOfQ4Lby2a1SpKthJEeXTFZS3L9h2DCxmn/MzAzFfp97HivzrtwTG39h
tw88R1C0eIxhkGT3JGWBOp/DPelfQVyacPSv4FBUUKJQmLG/GFHJHK0KQAHMhkUx
TKVN+n4op2Fl384oexWWaPDgoljcyybrO4E1AIu0oBWFp5z4CX1sSS08Npw2JHPp
4W0HZ8fcw6hC64ifjN0WSWSsK+xicENvb+Ksd3v3Vb55ImZHr4fiFtJdXKjloM1F
mfip9a77FV6IyPjUrHdzyVyvCykdXTJI/zfXNyG9SWhpcstAHsv9ffDf4qDTvyEo
08KZrbUQGfwr4myqQKAt/KVHOw==
-----END CERTIFICATE-----
Generated at Wed May 8 00:20:35 2024 by rpki-client on console-ams.rpki-client.org