Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234392e302f32342d3234203d3e203334393237.roa
File:                     32332e3134302e3234392e302f32342d3234203d3e203334393237.roa (raw, json)
Hash identifier:          0+NFZxBTsRxj/cq3RZZCuO+Isy0beqZCfzafAwGMppM=
Subject key identifier:   3D:FD:D8:FD:E5:E7:4D:CA:6B:2E:E3:33:F0:81:42:30:D7:C5:33:92
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       585F1DDA498B407E37DFED86B6ECE696D601BD49
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234392e302f32342d3234203d3e203334393237.roa
Signing time:             Fri 09 May 2025 15:46:20 +0000
ROA not before:           Fri 09 May 2025 15:41:20 +0000
ROA not after:            Fri 08 May 2026 15:46:20 +0000
asID:                     34927
IP address blocks:        23.140.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:1d:da:49:8b:40:7e:37:df:ed:86:b6:ec:e6:96:d6:01:bd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: May  9 15:41:20 2025 GMT
            Not After : May  8 15:46:20 2026 GMT
        Subject: CN=3DFDD8FDE5E74DCA6B2EE333F0814230D7C53392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:87:70:d4:b5:7b:b6:8a:c1:6a:50:d2:ce:
                    84:51:06:a1:d1:23:93:58:00:df:19:40:10:60:df:
                    02:d2:e3:5e:01:78:fe:f6:44:00:45:08:60:ad:fb:
                    11:d3:c5:18:20:85:4e:fe:86:7f:a9:4f:1f:16:a9:
                    07:a7:99:fe:22:8a:c1:e7:cb:e9:83:84:43:8e:32:
                    5e:10:96:ba:3d:05:7e:fb:fc:bc:6b:72:40:43:7c:
                    17:18:83:20:40:ff:e3:b1:f9:2a:7a:e1:e1:7a:0c:
                    2a:12:70:52:53:15:88:8c:46:53:6b:17:b4:b9:6a:
                    b8:4f:31:fd:e0:83:9b:f9:54:e3:20:82:2e:01:e0:
                    f5:cb:fd:35:5e:51:8c:ec:77:7c:fc:86:91:72:3b:
                    05:e1:21:7b:7a:1d:be:e9:60:f0:39:6f:24:9d:bf:
                    73:1c:8d:1b:94:3c:29:fc:b7:40:46:97:d4:e8:31:
                    44:ef:01:f3:7c:64:32:1f:fe:9c:cb:f9:c5:d4:73:
                    a1:3d:38:90:17:b4:36:7b:19:5b:54:8e:c2:7b:e9:
                    89:a5:73:9d:03:4f:92:68:2f:e8:52:72:c1:30:35:
                    5c:49:c5:9e:d6:7e:9a:0c:ed:ff:3d:7b:75:25:7d:
                    73:58:d2:88:d5:93:3a:9e:00:79:72:b8:02:d8:f5:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FD:D8:FD:E5:E7:4D:CA:6B:2E:E3:33:F0:81:42:30:D7:C5:33:92
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234392e302f32342d3234203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:65:ff:39:6f:32:61:fb:3b:44:1e:52:fd:14:5f:9a:b4:a6:
         92:f8:d1:35:08:51:74:c7:d7:d8:74:73:80:1b:45:2a:5a:1d:
         0b:ca:5b:fe:30:fc:87:8f:cd:45:eb:9c:c5:e0:47:99:1a:62:
         66:07:55:d1:10:aa:e0:04:aa:97:4f:82:be:03:b4:8a:12:71:
         6f:2b:7f:26:6e:0e:46:61:e6:ca:e3:a8:a1:a9:b7:25:50:1a:
         e9:a2:b2:d1:57:54:67:fc:60:c2:14:43:54:15:53:a2:a1:1c:
         90:48:8f:6f:ec:f6:65:fc:ca:c8:a4:a6:f3:96:99:10:e1:1a:
         11:fd:60:49:28:f1:e3:6f:f9:54:e7:52:7e:1f:26:11:b1:f0:
         cb:1c:13:c2:af:56:c3:fb:5b:89:ed:e7:88:6c:60:95:75:be:
         f6:23:54:98:b4:5a:01:0a:c7:72:07:d9:9a:bb:b0:6a:32:39:
         69:de:be:d0:66:d7:78:ca:0f:f4:62:1b:58:77:a4:07:ae:cd:
         68:fb:cf:10:f4:c7:b9:14:45:f7:fe:8a:64:01:2f:b0:ff:50:
         55:3d:a1:aa:1b:c2:23:99:52:f8:f0:46:53:b5:9d:ea:23:4c:
         b1:ec:83:fe:8f:64:fa:f6:61:42:d1:67:30:13:cb:f1:a4:71:
         3e:cd:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:30:13 2025 by rpki-client