Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133392e302f32342d3234203d3e20343030333034.roa
File:                     3134372e3136302e3133392e302f32342d3234203d3e20343030333034.roa (raw, json)
Hash identifier:          HKMdfuPvXZnifSjQ8L5/plfzaYpa6+szqEjmjJF/0qs=
Subject key identifier:   7C:86:18:07:F4:F7:EE:4E:C7:21:B1:81:1F:53:7C:6A:B3:16:C3:A4
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       3A7FDA54F669712D0D0B9E10864D57018517871C
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133392e302f32342d3234203d3e20343030333034.roa
Signing time:             Tue 23 Jul 2024 02:09:54 +0000
ROA not before:           Tue 23 Jul 2024 02:04:54 +0000
ROA not after:            Tue 22 Jul 2025 02:09:54 +0000
asID:                     400304
IP address blocks:        147.160.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7f:da:54:f6:69:71:2d:0d:0b:9e:10:86:4d:57:01:85:17:87:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jul 23 02:04:54 2024 GMT
            Not After : Jul 22 02:09:54 2025 GMT
        Subject: CN=7C861807F4F7EE4EC721B1811F537C6AB316C3A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:dd:f7:ff:49:9b:29:6e:bb:13:ad:d6:76:
                    5b:df:6b:b0:a7:78:b8:00:80:f1:40:6a:7c:5d:24:
                    74:5f:b6:31:d8:44:01:03:62:3b:48:f7:ce:2b:d7:
                    d8:4a:b7:53:4e:fd:92:a0:b7:c7:a2:30:ee:4d:11:
                    0b:14:9b:4b:41:cd:a1:9e:78:c1:24:70:85:80:ac:
                    4a:d8:13:2a:31:63:be:1d:17:1d:5d:63:55:5a:9b:
                    b7:54:49:4c:b8:5f:53:3b:97:17:89:d8:da:44:4a:
                    32:1a:9a:46:99:e0:70:85:4f:fa:08:7a:6a:df:f2:
                    ad:21:80:1c:43:ae:ac:8d:f2:ff:c9:80:18:c4:8a:
                    f8:8a:d7:04:ee:76:f4:db:ab:d4:a2:1d:32:6f:7e:
                    1c:ff:9d:11:1b:f2:2e:36:3c:09:2f:6c:ac:79:04:
                    d2:5d:4a:9d:a2:41:ef:bd:3a:95:fc:99:8b:ab:24:
                    c7:e6:ef:61:a8:33:5f:92:b1:f9:39:f2:a8:a9:3b:
                    e4:1a:8c:b6:14:25:da:f2:ab:8e:21:e3:2f:3f:db:
                    c3:c8:46:b0:c9:78:e3:d3:e3:af:49:5d:6b:39:88:
                    7f:af:a7:ce:53:5c:07:e0:f6:80:7f:f1:5f:c0:0b:
                    cd:62:11:34:21:1d:6d:25:56:fe:c6:5e:cf:94:40:
                    0a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:86:18:07:F4:F7:EE:4E:C7:21:B1:81:1F:53:7C:6A:B3:16:C3:A4
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133392e302f32342d3234203d3e20343030333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:15:b8:21:67:30:94:6a:be:24:47:f5:b3:aa:ab:92:7d:5e:
         d9:27:1d:38:f1:16:62:bc:d2:25:c4:6b:84:bf:14:59:48:7d:
         07:69:84:e3:c1:e6:69:b3:9d:f8:23:da:8e:91:63:42:c7:20:
         b2:9f:0e:01:98:52:92:31:5e:cb:43:92:c7:69:ec:ed:c6:67:
         fa:c9:aa:d7:76:75:7f:1f:fd:8a:e8:1a:0f:b3:4d:01:f8:0d:
         7c:12:cb:8e:b9:6e:65:d4:17:8c:a8:8a:5a:05:50:3f:4c:62:
         6d:32:b9:71:dc:78:db:60:c1:7b:56:ed:1a:82:7e:45:4c:4c:
         c0:d7:7c:9d:9d:5f:31:45:1a:f5:22:be:d6:24:1e:18:9f:94:
         83:70:85:f4:81:6e:a0:9c:44:98:c8:0b:1f:cc:48:c1:9d:5d:
         42:5a:98:9f:c3:5c:7d:e0:0f:7a:9a:da:2d:e3:fc:48:c2:8b:
         92:53:c0:a8:4e:ee:72:79:8b:78:4f:3e:a2:7d:03:94:cb:58:
         84:bc:1e:ed:a0:82:37:5c:bd:15:d3:e4:08:66:81:0f:4c:7c:
         c0:79:5e:5d:f2:95:a3:81:7d:0c:09:c3:42:2b:3f:b0:2e:d0:
         a7:5d:19:fa:d7:93:f3:e3:a5:81:a0:3e:7e:c4:6a:37:22:23:
         95:f8:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org