Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133382e302f32342d3234203d3e203334393237.roa
File:                     3134372e3136302e3133382e302f32342d3234203d3e203334393237.roa (raw, json)
Hash identifier:          fVAHJdH6HcvWo4i3/oml3gN5e7fYYzWN6cPEzWxJNiI=
Subject key identifier:   5E:34:01:33:EF:57:45:4B:09:A0:56:19:2A:F9:41:C7:F9:68:59:F9
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       5FCCFBE5A7A39CE7DB8555A41553168D2C975BBE
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133382e302f32342d3234203d3e203334393237.roa
Signing time:             Wed 26 Jun 2024 12:53:42 +0000
ROA not before:           Wed 26 Jun 2024 12:48:42 +0000
ROA not after:            Wed 25 Jun 2025 12:53:42 +0000
asID:                     34927
IP address blocks:        147.160.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cc:fb:e5:a7:a3:9c:e7:db:85:55:a4:15:53:16:8d:2c:97:5b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jun 26 12:48:42 2024 GMT
            Not After : Jun 25 12:53:42 2025 GMT
        Subject: CN=5E340133EF57454B09A056192AF941C7F96859F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:7c:ad:25:fa:d7:53:d1:7d:41:ba:b2:21:
                    8f:b2:a3:5c:27:9d:e0:d9:5b:bd:d9:b5:bc:76:1b:
                    eb:dd:c9:ed:10:ab:64:a6:27:f9:5b:87:0f:04:f0:
                    3f:7d:24:ee:db:4a:cc:96:4d:0f:89:0e:8a:a2:92:
                    7c:23:cc:9f:ab:b3:8e:28:b8:23:ee:85:bf:fb:f1:
                    92:e2:c7:31:59:e7:f3:7b:2e:09:3b:81:d8:25:19:
                    62:0e:47:4c:74:c2:af:ed:52:d0:f7:e1:00:cc:0d:
                    90:35:ef:15:40:d4:de:da:2e:d1:3b:79:66:be:11:
                    c4:a9:0d:35:69:f2:4e:84:0a:68:64:eb:ad:3d:dc:
                    b8:3b:6a:67:fe:f5:01:a1:64:52:49:21:88:5f:b9:
                    94:ed:ad:9b:a5:dd:3b:ab:58:c3:31:ad:1e:6c:19:
                    e2:ab:e8:93:79:01:bd:55:5a:0a:c5:9a:b0:be:e4:
                    9a:1a:b9:2c:c5:dc:b4:a3:6a:c6:e2:5c:59:18:22:
                    67:4d:36:c1:6a:2a:16:09:11:cc:6e:13:6d:cc:63:
                    5c:a9:5e:3f:93:a6:a5:84:48:9c:cc:be:9f:a0:95:
                    6a:f8:d0:56:fa:c0:db:7e:c9:b8:6d:51:6b:37:34:
                    74:43:1f:ff:72:4c:46:7f:e8:7a:ad:95:71:7c:e3:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:34:01:33:EF:57:45:4B:09:A0:56:19:2A:F9:41:C7:F9:68:59:F9
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133382e302f32342d3234203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:db:ab:a1:3f:69:ef:80:2f:6e:6e:dd:a9:fb:97:a7:a1:
         a9:45:a7:d1:a8:4c:c1:33:a5:40:a5:71:2b:18:80:18:5d:cc:
         34:55:74:95:e5:43:10:29:d2:12:2a:15:40:26:33:59:2b:25:
         de:9e:6f:a0:85:c3:ad:3a:f3:d3:7f:c9:46:e9:ec:81:5a:6f:
         d9:c5:2c:e9:92:07:bd:ee:a0:71:63:9c:70:3d:e7:cd:76:d9:
         bb:0f:a1:4c:e2:49:6e:ae:05:da:99:16:b6:c5:63:6d:d1:70:
         05:bf:a9:26:c2:29:96:b4:65:10:38:be:89:2c:53:36:ac:e1:
         55:da:c4:ae:6f:a3:d9:a5:f6:4f:fa:9b:a5:0f:a6:b9:44:fe:
         1b:0f:ab:e7:26:26:92:66:c5:7b:e2:b1:ab:83:24:3f:37:46:
         d0:c4:64:71:9a:a7:53:8c:56:bd:d0:0b:ec:63:8a:e9:d6:bc:
         13:4d:00:5e:e8:cd:9a:71:89:ed:16:43:62:8a:bf:04:9b:49:
         1e:39:c9:5a:f2:4f:a1:b1:c0:96:f1:75:09:c1:0e:21:6a:57:
         31:41:94:9b:29:55:39:e7:f0:08:dd:03:68:0f:4c:f1:5e:ee:
         80:c0:d4:53:1e:88:8a:03:7f:ca:43:89:ac:74:3a:4e:42:95:
         87:b5:3d:27
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUX8z75aejnOfbhVWkFVMWjSyXW74wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQwNjI2MTI0ODQyWhcNMjUwNjI1MTI1MzQy
WjAzMTEwLwYDVQQDEyg1RTM0MDEzM0VGNTc0NTRCMDlBMDU2MTkyQUY5NDFDN0Y5
Njg1OUY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvp8rSX611PR
fUG6siGPsqNcJ53g2Vu92bW8dhvr3cntEKtkpif5W4cPBPA/fSTu20rMlk0PiQ6K
opJ8I8yfq7OOKLgj7oW/+/GS4scxWefzey4JO4HYJRliDkdMdMKv7VLQ9+EAzA2Q
Ne8VQNTe2i7RO3lmvhHEqQ01afJOhApoZOutPdy4O2pn/vUBoWRSSSGIX7mU7a2b
pd07q1jDMa0ebBniq+iTeQG9VVoKxZqwvuSaGrksxdy0o2rG4lxZGCJnTTbBaioW
CRHMbhNtzGNcqV4/k6alhEiczL6foJVq+NBW+sDbfsm4bVFrNzR0Qx//ckxGf+h6
rZVxfONfBQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFF40ATPvV0VLCaBWGSr5Qcf5
aFn5MB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGKBggrBgEFBQcBCwR+MHwwegYI
KwYBBQUHMAuGbnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzEvMzEzNDM3MmUzMTM2MzAyZTMxMzMzODJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDMzMzQzOTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACToIowDQYJKoZIhvcNAQEL
BQADggEBADPR26uhP2nvgC9ubt2p+5enoalFp9GoTMEzpUClcSsYgBhdzDRVdJXl
QxAp0hIqFUAmM1krJd6eb6CFw60689N/yUbp7IFab9nFLOmSB73uoHFjnHA95812
2bsPoUziSW6uBdqZFrbFY23RcAW/qSbCKZa0ZRA4voksUzas4VXaxK5vo9ml9k/6
m6UPprlE/hsPq+cmJpJmxXvisauDJD83RtDEZHGap1OMVr3QC+xjiunWvBNNAF7o
zZpxie0WQ2KKvwSbSR45yVryT6GxwJbxdQnBDiFqVzFBlJspVTnn8AjdA2gPTPFe
7oDA1FMeiIoDf8pDiax0Ok5ClYe1PSc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org