Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234382e302f32342d3234203d3e20393234.roa
File:                     32332e3134302e3234382e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          jjk1iTQbDVDNIAt+7mMqVksELO1EjwbJNu7GOsJ+2Kw=
Subject key identifier:   14:61:69:1C:D9:06:CF:4C:FE:C8:75:3C:58:EE:71:20:3A:3B:89:A2
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       2003C89A4BF5F89186931A584E50B39B5A23C0DD
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234382e302f32342d3234203d3e20393234.roa
Signing time:             Wed 15 Nov 2023 12:11:39 +0000
ROA not before:           Wed 15 Nov 2023 12:06:39 +0000
ROA not after:            Wed 13 Nov 2024 12:11:39 +0000
asID:                     924
IP address blocks:        23.140.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 10:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:03:c8:9a:4b:f5:f8:91:86:93:1a:58:4e:50:b3:9b:5a:23:c0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:39 2023 GMT
            Not After : Nov 13 12:11:39 2024 GMT
        Subject: CN=1461691CD906CF4CFEC8753C58EE71203A3B89A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:b7:ca:9f:00:19:f8:0c:b6:8f:f6:66:92:
                    16:8d:a4:cd:4f:dc:6f:0c:03:f1:f4:6d:9e:59:ca:
                    85:d7:2b:41:ad:41:dc:d7:7c:3d:d4:e2:33:18:9b:
                    49:c7:5e:d1:5d:08:d8:45:86:ce:d5:08:03:b6:05:
                    a3:7f:ff:b7:4c:da:20:e9:4c:b7:1c:5a:2c:53:88:
                    83:04:eb:44:de:3b:82:d2:13:80:0f:ab:e0:09:9f:
                    45:47:89:d7:b8:82:df:53:fb:73:05:5a:2d:9a:bf:
                    58:27:29:b0:3a:35:94:66:d3:4d:e9:b1:50:94:7a:
                    ae:e8:81:8e:6e:6a:a5:3d:77:65:d4:53:46:b9:b7:
                    cb:40:29:93:6a:0a:d1:9f:77:59:96:45:fa:84:96:
                    dc:53:f7:cc:06:a9:dd:16:ef:6c:5c:33:19:7e:81:
                    a2:74:81:b8:6a:50:be:a6:8d:9e:d5:8c:97:f7:8e:
                    a3:31:22:37:bd:02:d3:7e:d5:dc:77:d9:e4:42:8d:
                    68:1d:e9:a5:6a:b3:ad:45:8f:80:83:b9:6c:61:fe:
                    37:78:ee:a5:71:f1:52:b6:d1:dd:b8:d5:da:dc:69:
                    03:3f:e3:2a:6b:f2:c9:75:22:18:1d:81:43:3b:60:
                    2c:25:78:18:73:89:4c:e7:ee:59:91:14:e6:ef:36:
                    81:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:61:69:1C:D9:06:CF:4C:FE:C8:75:3C:58:EE:71:20:3A:3B:89:A2
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234382e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:d2:c3:a5:b6:c1:59:43:0c:c4:f2:43:81:28:cf:84:45:
         86:d3:29:1b:98:68:cc:4f:f6:eb:14:d4:3c:28:c5:00:9c:dc:
         1a:3f:0e:3d:9d:ec:1c:2b:96:57:e4:f7:11:1d:0d:35:4c:1c:
         75:a1:b5:49:2b:f6:be:d7:73:e0:93:22:a6:16:db:c6:2e:8d:
         cb:39:92:ea:83:cb:92:50:91:17:e2:c3:a3:2c:d6:fe:47:3f:
         ac:52:43:b0:96:3c:5f:1d:fd:b1:ec:6e:8e:37:5d:9e:ab:6f:
         eb:ce:4c:ae:11:7f:ac:f4:9a:78:1c:59:24:36:81:3c:bc:47:
         a3:6d:db:8d:99:a1:ea:79:43:5e:3e:f3:9a:73:b2:81:0b:b3:
         c6:c8:8d:35:26:1e:cb:3a:12:18:72:48:11:e4:75:94:e8:55:
         13:77:fa:c7:e8:e0:52:cd:1f:bf:ed:7c:a0:75:e4:dc:7a:5f:
         b0:e2:13:bf:8d:9d:78:38:d0:50:fc:2b:92:02:9c:52:f5:59:
         9c:c0:22:3c:4b:97:82:df:46:85:87:25:81:3d:6e:a9:5f:95:
         fc:7b:b5:45:64:79:a5:6d:99:83:78:a1:02:2e:b9:e2:20:9f:
         ec:a3:df:13:e9:a7:1b:f6:47:b4:88:a6:ca:3f:77:d5:32:d6:
         b7:80:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:37:18 2024 by rpki-client on console-fra.rpki-client.org