Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa
File:                     323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa (raw, json)
Hash identifier:          5o2BtMYU6I/x58jBwZy45VfwoTRGmbUwnOxGCGZMvfc=
Subject key identifier:   01:BE:50:9A:70:29:C9:1E:F4:CB:03:12:88:EA:EC:BF:AD:CF:AC:5F
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       0DFBE08FE6ECF1798C0B6E6B7BC3907684CE5F71
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa
Signing time:             Sun 26 Nov 2023 11:16:06 +0000
ROA not before:           Sun 26 Nov 2023 11:11:06 +0000
ROA not after:            Sun 24 Nov 2024 11:16:06 +0000
asID:                     924
IP address blocks:        2602:fba1:c00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 09:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fb:e0:8f:e6:ec:f1:79:8c:0b:6e:6b:7b:c3:90:76:84:ce:5f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Nov 26 11:11:06 2023 GMT
            Not After : Nov 24 11:16:06 2024 GMT
        Subject: CN=01BE509A7029C91EF4CB031288EAECBFADCFAC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f4:e4:8f:67:1b:5d:59:ac:64:a9:3a:4a:6b:
                    a9:9e:05:7e:44:a4:2e:51:97:57:a0:ef:ac:ab:b9:
                    30:e9:25:de:0e:4c:63:c2:91:e8:7c:50:e7:c1:30:
                    7a:b5:8e:6b:80:cf:91:bf:53:c5:63:37:74:0e:fe:
                    63:be:49:27:44:8e:fb:1a:c4:c8:45:e3:22:47:4e:
                    f9:fd:00:17:e3:91:9e:0c:c3:90:d7:dd:7f:03:c5:
                    c7:17:06:96:81:b2:a6:8c:4f:36:19:56:63:2d:55:
                    3c:59:61:14:57:e4:a8:ce:1f:9a:2b:7c:71:6a:44:
                    d0:32:03:ef:45:f7:5a:35:5f:05:90:b9:c4:d1:05:
                    37:be:0a:70:20:cd:38:1a:36:f5:36:71:ff:f5:70:
                    88:fb:8d:ae:2d:40:89:91:87:e5:1a:55:fb:28:f7:
                    77:18:aa:3e:5d:61:7a:92:57:8b:aa:3f:67:51:ac:
                    75:56:d3:09:ef:d2:55:6c:da:25:ef:50:e6:d7:14:
                    69:01:b5:2c:4f:01:fd:a6:f1:49:30:f0:47:0c:0b:
                    5c:57:be:c5:5a:88:4b:89:b2:53:0f:df:71:9f:c0:
                    0f:c6:a6:3a:8d:4d:eb:1e:27:e1:fb:af:32:0e:fe:
                    04:f2:e1:29:f5:5a:b6:aa:12:fc:c9:55:62:13:82:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:50:9A:70:29:C9:1E:F4:CB:03:12:88:EA:EC:BF:AD:CF:AC:5F
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:d8:74:6c:d2:58:a3:40:97:f5:a4:9d:60:b4:1d:7c:1a:fa:
         89:1c:ed:57:8e:7f:2b:02:7a:4f:cf:f9:99:e7:3b:4a:82:a5:
         57:5a:e3:60:cc:39:f9:54:b0:b1:06:3a:ed:82:d6:30:79:88:
         3d:21:76:1f:57:b1:79:26:d8:e0:fa:8c:15:4c:76:c3:0d:3b:
         26:01:53:98:21:31:70:84:2f:a7:fa:f5:47:e1:67:50:b9:b5:
         98:35:a4:ec:92:d8:94:50:48:e4:db:fa:15:65:52:0d:a2:89:
         85:5c:fd:4f:c6:30:42:04:0a:da:4b:28:ca:0a:29:25:36:1b:
         3b:c2:0f:ca:f5:75:6e:d0:a2:8e:ef:a9:2b:55:4b:2a:7f:19:
         81:83:b3:4a:1d:05:f7:db:0c:24:6d:e7:f2:73:f7:57:d8:b9:
         84:27:9e:f5:ec:9a:dc:4a:59:bf:f4:a5:07:3f:50:d5:8b:aa:
         39:9e:4c:c7:33:ac:0f:23:04:ab:e5:40:0a:40:d9:c5:ea:3b:
         77:c2:89:39:d1:cd:82:62:9b:1a:a6:53:59:39:f9:37:5a:f4:
         dc:b1:e0:7e:2f:5c:51:af:59:e6:58:42:6d:9d:f8:96:9e:a6:
         b4:c7:1f:79:13:10:08:23:70:20:01:c0:11:33:d8:20:de:20:
         0d:a7:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 09:57:46 2024 by rpki-client on console-ams.rpki-client.org