Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39342e302f32342d3234203d3e203633303233.roa
File:                     32332e3133342e39342e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          z7yNHy+9ho+0iSPBbEIfEDvbBHsoYIDEp9sKuOVOUSo=
Subject key identifier:   5A:7C:82:CF:AF:9D:33:FC:EF:C9:8E:E6:68:E4:52:4A:E8:F0:26:DA
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       17B4B499516A89DA1DAD735E58B4B35A1F21764A
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39342e302f32342d3234203d3e203633303233.roa
Signing time:             Wed 22 Nov 2023 22:14:39 +0000
ROA not before:           Wed 22 Nov 2023 22:09:39 +0000
ROA not after:            Wed 20 Nov 2024 22:14:39 +0000
asID:                     63023
IP address blocks:        23.134.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 19:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b4:b4:99:51:6a:89:da:1d:ad:73:5e:58:b4:b3:5a:1f:21:76:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Nov 22 22:09:39 2023 GMT
            Not After : Nov 20 22:14:39 2024 GMT
        Subject: CN=5A7C82CFAF9D33FCEFC98EE668E4524AE8F026DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:78:96:7a:94:d7:b0:14:24:ce:11:21:69:
                    28:03:74:12:3e:e6:e5:ad:1a:ff:fb:03:c8:a0:e7:
                    bd:e9:4f:d6:2c:9c:4a:fb:9e:c8:e2:34:bf:8c:a4:
                    3b:84:88:32:bb:6f:55:7a:e2:1e:9e:0d:a4:4f:e0:
                    0c:4c:e4:1d:c7:3e:fc:a0:9a:f6:2f:29:a3:d9:a4:
                    77:94:2c:96:56:f0:e8:fe:95:e9:60:39:24:17:72:
                    74:5e:90:72:67:21:30:a5:2b:7d:d7:d2:5d:ce:93:
                    70:1b:73:e7:8e:6f:7b:76:ab:b2:d2:1c:73:26:85:
                    a3:c2:b1:17:3d:f8:52:47:24:08:11:93:29:a9:ad:
                    f3:2b:66:cf:7a:e3:e7:80:10:a1:a9:ee:a5:ff:3f:
                    90:5a:9a:2e:fe:cc:fc:45:3a:09:c4:e7:02:5d:44:
                    38:fc:47:7d:7c:82:d4:7e:6d:7c:0d:3f:34:eb:0c:
                    98:5f:69:86:95:8f:51:2b:c9:b7:22:b3:c8:5c:fc:
                    4b:d3:31:3e:10:33:d9:03:38:3c:0e:9f:24:fe:c2:
                    cf:81:08:3e:00:02:c4:e2:ad:82:34:98:a8:c1:2d:
                    46:f2:d3:4e:40:7e:74:b1:86:a8:37:93:d9:b8:da:
                    28:b7:9f:a2:df:48:8d:11:e4:e7:8a:fc:4a:f5:9f:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:82:CF:AF:9D:33:FC:EF:C9:8E:E6:68:E4:52:4A:E8:F0:26:DA
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39342e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:17:a7:f6:c7:bd:ee:80:88:48:21:c0:c7:7c:b8:0c:1e:e3:
         fc:f9:6f:88:fa:37:56:12:81:3b:99:4f:ec:d6:d0:a3:43:31:
         ac:a0:85:d7:dc:2b:7f:4d:09:f9:a0:bd:8b:97:b7:50:93:e6:
         0a:91:38:0c:eb:f1:1c:f6:c1:30:51:f7:e1:d8:5c:ab:dd:2d:
         49:76:68:0f:ca:58:05:99:ce:12:af:f9:98:b8:a5:19:7b:80:
         6f:cc:e3:a7:34:9b:cb:4d:be:6a:5f:c6:f6:c4:45:6e:2f:a1:
         ef:83:50:d4:35:39:9f:61:9e:0f:e7:e6:83:30:ff:26:90:25:
         bd:78:3f:17:53:42:99:05:73:7e:b8:dd:60:bb:d1:3c:0b:81:
         74:ec:36:65:d9:01:a9:96:3f:55:b1:60:29:17:82:90:ff:fb:
         23:78:41:ba:a6:16:66:dd:a4:40:0f:c5:1e:00:3b:49:4b:dd:
         b1:18:bc:6f:d6:4f:7d:74:72:8e:39:57:99:d4:14:a2:35:ea:
         01:5b:a6:aa:da:e8:9f:06:97:8f:45:ab:de:be:c1:c0:d3:7b:
         21:13:1a:de:a3:e0:24:8e:51:c6:44:47:b8:94:55:2e:d6:8f:
         54:44:e8:53:a3:cd:a5:e8:c6:a1:c7:64:f2:f8:ca:92:58:73:
         c7:16:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org