Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234382e302f32342d3234203d3e20393234.roa
File:                     32332e3134302e3234382e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          p4UnlXGjwkRJoZ0ag8cXUnafD+UUpCZ29s6vOk23MiY=
Subject key identifier:   F6:04:50:9B:24:C9:8A:52:98:E8:68:B7:95:3B:31:4D:E1:AB:6A:D7
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       415EC16C6DFCCF4832998353334FAF0AF47AFA92
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234382e302f32342d3234203d3e20393234.roa
Signing time:             Wed 16 Oct 2024 12:45:22 +0000
ROA not before:           Wed 16 Oct 2024 12:40:22 +0000
ROA not after:            Wed 15 Oct 2025 12:45:22 +0000
asID:                     924
IP address blocks:        23.140.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5e:c1:6c:6d:fc:cf:48:32:99:83:53:33:4f:af:0a:f4:7a:fa:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 12:40:22 2024 GMT
            Not After : Oct 15 12:45:22 2025 GMT
        Subject: CN=F604509B24C98A5298E868B7953B314DE1AB6AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:44:75:b7:90:4e:b5:6c:52:59:0e:10:db:
                    89:ad:78:1f:56:29:a4:7e:9f:93:da:7e:9c:b7:a1:
                    9e:94:92:ad:ca:6c:ed:6a:6f:20:8c:ab:05:a5:f5:
                    f5:24:36:48:34:c3:c6:0d:23:86:af:0d:cb:a9:76:
                    e1:9f:bc:e9:7f:3c:70:e4:14:87:52:2c:4b:a8:71:
                    e4:56:87:88:3f:fd:66:6e:76:e1:89:77:51:4e:6c:
                    d8:c0:bd:0c:49:97:45:98:59:a2:23:f0:a2:46:d4:
                    ed:50:07:3f:f6:14:17:52:09:d9:b5:aa:83:4f:ea:
                    60:2e:e0:2d:79:8f:7c:8f:63:6a:e2:67:e6:56:d8:
                    14:ca:89:d9:9e:1d:95:32:b3:d8:54:ec:aa:99:e1:
                    7a:14:54:af:a4:71:e3:c0:0f:a1:20:3b:62:82:c9:
                    30:4d:4d:e7:ef:89:07:a1:05:71:23:13:b1:10:1b:
                    e9:3b:0c:74:51:65:33:12:1b:97:c9:33:e2:e0:56:
                    4e:b0:a0:65:54:b1:39:bd:e4:a7:c6:8c:ad:30:ad:
                    61:35:be:6b:4d:e2:1d:1d:65:85:46:d1:e4:32:46:
                    6b:52:cc:17:45:76:65:7e:3a:25:9b:81:67:8e:03:
                    d3:ef:6c:5c:ab:29:93:18:9c:31:ea:5c:ab:77:9c:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:50:9B:24:C9:8A:52:98:E8:68:B7:95:3B:31:4D:E1:AB:6A:D7
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234382e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:12:c7:0a:85:df:a5:91:56:bc:f5:bf:27:0b:19:a9:7a:82:
         87:a2:49:7b:47:8b:05:44:ff:05:a5:1b:9e:16:a4:13:d4:0d:
         c4:2d:ad:2e:67:5d:7b:fd:25:b1:0c:fb:72:b0:67:f9:92:0a:
         ca:0f:4d:ca:99:e4:cf:10:df:f4:33:1e:05:b9:45:7d:20:39:
         e1:37:39:a0:aa:c2:06:ce:85:c4:7f:2c:63:33:36:66:4a:7d:
         49:82:1c:c5:3a:b4:fe:a9:4c:d0:f4:a3:28:94:5d:42:81:f0:
         bf:da:e3:d2:35:4e:3d:37:30:89:5b:16:0f:20:1b:a6:dc:39:
         5a:5e:ab:9e:1a:a7:27:b3:67:7b:f6:a2:86:47:0d:8d:2c:cc:
         f3:dd:56:e3:6b:96:dd:d0:58:6c:e1:3d:48:71:ca:35:c0:fc:
         c4:28:34:82:08:13:b3:3c:a9:03:59:1e:d9:65:c2:9e:4a:56:
         69:ec:b1:c8:3d:63:b0:67:24:12:e8:d5:55:ab:27:25:2e:6b:
         24:d2:c9:67:06:a5:f3:8d:1a:0e:44:05:29:8b:37:3d:42:ba:
         f1:99:7e:dc:d0:a9:67:8d:28:07:9d:6d:f3:f9:86:60:6a:95:
         af:ef:82:79:17:c3:d6:13:7b:6b:da:6c:c2:c1:65:13:31:38:
         9a:41:a9:ad
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUQV7BbG38z0gymYNTM0+vCvR6+pIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQxMDE2MTI0MDIyWhcNMjUxMDE1MTI0NTIy
WjAzMTEwLwYDVQQDEyhGNjA0NTA5QjI0Qzk4QTUyOThFODY4Qjc5NTNCMzE0REUx
QUI2QUQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBhEdbeQTrVs
UlkOENuJrXgfVimkfp+T2n6ct6GelJKtymztam8gjKsFpfX1JDZINMPGDSOGrw3L
qXbhn7zpfzxw5BSHUixLqHHkVoeIP/1mbnbhiXdRTmzYwL0MSZdFmFmiI/CiRtTt
UAc/9hQXUgnZtaqDT+pgLuAteY98j2Nq4mfmVtgUyonZnh2VMrPYVOyqmeF6FFSv
pHHjwA+hIDtigskwTU3n74kHoQVxIxOxEBvpOwx0UWUzEhuXyTPi4FZOsKBlVLE5
veSnxoytMK1hNb5rTeIdHWWFRtHkMkZrUswXRXZlfjolm4FnjgPT72xcqymTGJwx
6lyrd5wMjwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFPYEUJskyYpSmOhot5U7MU3h
q2rXMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYI
KwYBBQUHMAuGaHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzEvMzIzMzJlMzEzNDMwMmUzMjM0MzgyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzOTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXjPgwDQYJKoZIhvcNAQELBQADggEB
AIESxwqF36WRVrz1vycLGal6goeiSXtHiwVE/wWlG54WpBPUDcQtrS5nXXv9JbEM
+3KwZ/mSCsoPTcqZ5M8Q3/QzHgW5RX0gOeE3OaCqwgbOhcR/LGMzNmZKfUmCHMU6
tP6pTND0oyiUXUKB8L/a49I1Tj03MIlbFg8gG6bcOVpeq54apyezZ3v2ooZHDY0s
zPPdVuNrlt3QWGzhPUhxyjXA/MQoNIIIE7M8qQNZHtllwp5KVmnsscg9Y7BnJBLo
1VWrJyUuayTSyWcGpfONGg5EBSmLNz1CuvGZftzQqWeNKAedbfP5hmBqla/vgnkX
w9YTe2vabMLBZRMxOJpBqa0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org