Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234392e302f32342d3234203d3e203334393237.roa
File:                     32332e3134302e3234392e302f32342d3234203d3e203334393237.roa (raw, json)
Hash identifier:          y8rq1BwX2go1dm1GVnR2Teprls8hmQB49ozeiotvZDY=
Subject key identifier:   03:02:4B:06:E8:7E:EF:D8:BB:1D:27:39:82:97:54:55:3A:C0:1E:60
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       336B8E5500CD77F6B864ED5E094E0152CC0CB829
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234392e302f32342d3234203d3e203334393237.roa
Signing time:             Fri 07 Jul 2023 14:09:45 +0000
ROA not before:           Fri 07 Jul 2023 14:04:45 +0000
ROA not after:            Fri 05 Jul 2024 14:09:45 +0000
asID:                     34927
IP address blocks:        23.140.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6b:8e:55:00:cd:77:f6:b8:64:ed:5e:09:4e:01:52:cc:0c:b8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jul  7 14:04:45 2023 GMT
            Not After : Jul  5 14:09:45 2024 GMT
        Subject: CN=03024B06E87EEFD8BB1D2739829754553AC01E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:e2:cb:92:2b:ec:2c:b2:b7:d6:79:5c:7a:
                    d4:c8:98:dd:e2:4e:67:4c:ef:f1:fc:28:3a:af:1b:
                    30:e1:aa:e4:00:63:85:bc:64:e7:fe:b4:8e:85:73:
                    3f:10:d9:86:e6:e3:3b:6a:3e:a2:bf:dc:ee:85:cd:
                    ce:a3:9c:f1:2e:e5:63:89:f3:f6:77:cd:11:2f:0b:
                    30:ba:f5:2a:05:66:c8:b1:4a:6e:cf:a9:81:f5:57:
                    d5:fa:5a:09:73:8f:84:eb:fa:1a:ba:77:97:0a:5b:
                    66:3b:34:0a:d2:03:09:02:3c:89:e8:b3:11:69:de:
                    cc:11:28:28:8c:51:87:b9:ee:ec:6f:11:8d:3d:90:
                    33:5d:ee:0c:8c:c2:a5:6b:d2:9b:d2:c5:af:3f:f8:
                    08:f7:b0:60:95:ee:c1:dd:f5:65:60:5b:16:af:de:
                    f0:59:5f:7d:d6:26:bf:f2:22:63:22:69:8c:c6:04:
                    ca:f0:2c:33:6d:ad:e8:68:ab:df:2f:8a:26:bc:82:
                    d0:6c:80:39:be:87:a3:0b:b6:4b:78:dd:fd:30:01:
                    23:85:de:37:4a:6c:a4:a6:28:9b:ec:93:f5:ee:60:
                    9b:a5:95:c9:52:70:38:b5:74:32:62:e2:44:23:09:
                    00:d0:51:7d:ce:98:7b:5d:5b:15:e9:7b:21:96:2e:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:02:4B:06:E8:7E:EF:D8:BB:1D:27:39:82:97:54:55:3A:C0:1E:60
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234392e302f32342d3234203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:ae:e7:1d:ae:a8:30:a6:9e:50:c2:88:e5:a7:48:a1:76:
         d7:ed:44:92:a7:1e:aa:2d:c4:6c:d8:64:7c:64:3b:97:4e:17:
         92:6f:b4:52:9f:a9:68:f4:9a:64:1c:cb:8d:2e:7f:34:82:ab:
         d3:8f:47:5f:12:85:79:cb:6b:af:33:21:dd:f4:d9:3a:f9:aa:
         8c:c9:0f:fb:6f:bd:9f:bd:7d:63:4c:8f:d3:0d:c0:9e:6b:8c:
         96:40:ac:f4:9e:00:1f:aa:0b:85:44:ee:c8:7f:24:b9:fa:b0:
         38:52:1d:62:de:2c:88:cd:48:dc:d1:6a:07:58:4f:c9:dd:f0:
         1a:3f:78:81:d2:5d:c7:93:66:98:20:44:63:08:55:a9:8c:ec:
         33:08:08:fd:04:2b:2d:de:38:67:93:82:58:69:b5:48:24:49:
         c2:16:34:b2:a3:41:2b:bb:e5:4b:ca:7a:15:9c:29:a1:c8:f9:
         e3:52:2a:02:51:83:b9:76:11:41:9b:8a:f8:e9:ee:63:33:65:
         86:45:de:9b:56:1c:c2:08:24:99:06:e2:b8:9b:de:7c:e0:51:
         f4:9f:41:4e:6a:91:2d:b5:9f:4d:c7:3a:db:65:4d:c0:f6:6b:
         0d:2a:44:25:6f:e0:c3:8c:30:54:bd:8a:50:77:24:c8:da:3c:
         da:55:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:28 2024 by rpki-client on console-ams.rpki-client.org