Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3636363a3a2f34382d3438203d3e203434353730.roa
File:                     323630323a666261313a3636363a3a2f34382d3438203d3e203434353730.roa (raw, json)
Hash identifier:          oR4o5QJiqYHLpMdPhdTUcP3Nyx6rTurTor+D/bROjqk=
Subject key identifier:   6D:24:65:70:13:A9:A9:7C:77:7A:5D:88:5A:59:76:8D:C3:F9:92:5D
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       7B1554409D9C582CF94A8ED414C91C434A415724
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3636363a3a2f34382d3438203d3e203434353730.roa
Signing time:             Wed 22 Nov 2023 22:14:40 +0000
ROA not before:           Wed 22 Nov 2023 22:09:40 +0000
ROA not after:            Wed 20 Nov 2024 22:14:40 +0000
asID:                     44570
IP address blocks:        2602:fba1:666::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 09:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:15:54:40:9d:9c:58:2c:f9:4a:8e:d4:14:c9:1c:43:4a:41:57:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Nov 22 22:09:40 2023 GMT
            Not After : Nov 20 22:14:40 2024 GMT
        Subject: CN=6D24657013A9A97C777A5D885A59768DC3F9925D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:85:7b:5a:17:5e:ee:30:aa:60:0a:58:86:
                    46:e4:de:36:42:40:2b:c9:c6:ff:4c:63:b8:81:12:
                    86:e5:76:70:0b:bd:3e:03:98:a9:37:7e:4f:99:84:
                    af:1a:2a:f0:d4:f6:a7:88:f4:5e:d1:1c:dc:29:0d:
                    bd:e3:5f:41:1d:ca:9f:00:2d:3b:c2:24:21:33:bc:
                    7e:44:54:cc:3e:cb:c3:43:41:c9:17:90:44:e2:bd:
                    6f:79:cc:42:88:8c:61:d1:0c:18:7c:b9:df:dc:8b:
                    ee:67:94:5b:2e:e7:36:d6:2e:52:80:0d:dd:43:5e:
                    12:c4:e8:18:a3:ef:74:60:b4:f4:4e:ac:7e:59:99:
                    c1:eb:33:a0:26:29:8c:96:da:a4:3d:0b:86:d9:26:
                    49:c1:35:b8:e1:dc:f4:07:88:aa:b8:7b:ea:e3:f7:
                    02:45:2c:72:d7:db:b7:ad:d8:93:10:d6:29:93:2c:
                    6f:0c:af:c0:43:e8:0a:96:b9:da:e9:44:03:83:72:
                    66:22:30:55:b2:c2:75:23:23:2d:ef:0c:b9:0a:38:
                    64:85:d5:b9:f9:6d:7d:b5:b6:d1:6c:ba:11:2b:59:
                    9f:8d:65:bf:de:6f:ee:9a:7b:15:cc:9d:ed:7c:3b:
                    3d:93:c3:7f:fe:08:bb:7a:14:88:0d:5d:fe:78:98:
                    aa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:24:65:70:13:A9:A9:7C:77:7A:5D:88:5A:59:76:8D:C3:F9:92:5D
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3636363a3a2f34382d3438203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:666::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:73:f9:29:a5:99:37:75:62:17:e5:01:99:29:c7:92:48:f0:
         50:99:c3:15:d5:ca:79:f6:2e:10:07:0f:3b:9d:5d:ea:bd:ba:
         34:31:9b:f1:02:1d:66:a0:e1:de:4a:2a:3a:04:85:9b:4a:a9:
         67:f0:82:4c:04:ec:5c:bd:d6:71:e2:5f:d7:fe:fe:64:b1:a5:
         be:11:f6:67:20:be:b1:3b:99:4c:13:17:95:17:a0:c1:2c:db:
         bb:30:b5:47:0b:c2:40:c9:76:a6:d4:d5:40:45:3f:3c:a8:41:
         e5:99:79:03:68:24:49:1b:1d:45:7e:34:21:ef:77:af:30:61:
         5a:ba:e4:00:e5:63:50:12:1d:b2:ea:bd:f1:9b:66:ab:b2:5e:
         32:a5:69:02:38:d7:c2:34:06:12:18:82:f3:10:ad:26:16:c4:
         b5:be:4b:97:f0:83:13:f8:45:67:e0:62:12:ae:b8:4e:fe:aa:
         33:96:30:85:12:a1:e3:f0:53:ab:f4:6e:85:a9:3d:38:a6:5c:
         9f:46:df:ab:f4:cb:3c:9a:42:b5:b1:70:ca:fd:88:01:9f:4b:
         61:aa:2e:1f:f3:d7:c4:08:cf:98:18:8a:74:6d:87:3f:d9:42:
         0e:5b:92:b2:f5:f1:b8:0a:50:f6:78:db:a0:48:75:5d:2f:a3:
         3e:41:38:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:56:21 2024 by rpki-client on console-fra.rpki-client.org