Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a31303a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a31303a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          frx94meQHc2bcgi4AO95oMhjffzZeXLKB0tdwHpkCpU=
Subject key identifier:   3F:4F:A8:3C:FC:67:C5:F5:BF:D0:E5:01:7E:8A:9B:1A:36:37:4E:F7
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       617256A17FE15A6D5DF4FDE6ADC513BC1E145BF6
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a31303a3a2f34342d3438203d3e203334393237.roa
Signing time:             Thu 29 Feb 2024 22:08:39 +0000
ROA not before:           Thu 29 Feb 2024 22:03:39 +0000
ROA not after:            Thu 27 Feb 2025 22:08:39 +0000
asID:                     34927
IP address blocks:        2602:fafd:10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:72:56:a1:7f:e1:5a:6d:5d:f4:fd:e6:ad:c5:13:bc:1e:14:5b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Feb 29 22:03:39 2024 GMT
            Not After : Feb 27 22:08:39 2025 GMT
        Subject: CN=3F4FA83CFC67C5F5BFD0E5017E8A9B1A36374EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:b9:71:4b:51:d6:5f:06:9c:8b:34:10:91:
                    c3:49:59:fc:4f:3a:f4:d0:97:81:47:ed:37:e0:a8:
                    93:ca:9f:34:51:1e:19:2b:09:e8:51:3b:a8:98:c8:
                    6b:c1:96:5a:b0:70:2b:9e:67:71:01:91:b8:07:bc:
                    80:5f:27:4b:9b:fa:07:c1:93:24:42:13:df:19:a3:
                    08:24:37:26:68:5b:c8:cd:8c:15:b0:89:64:69:37:
                    9b:ab:1a:c8:aa:c4:04:35:19:56:33:58:72:db:ed:
                    38:79:6d:a8:25:02:2f:43:ef:c3:f5:00:eb:8c:21:
                    e2:0d:9b:96:c7:4e:e6:3c:3c:f6:13:2d:c9:4b:19:
                    2a:cb:69:e8:7f:19:5d:7e:c7:29:8a:0e:54:42:92:
                    de:83:3b:ea:57:d2:58:5a:51:d0:56:1b:b5:57:1a:
                    1a:f6:ed:c0:c8:9f:63:ad:ca:72:0d:0f:a8:c8:79:
                    74:47:b6:b9:a0:55:79:9a:d7:69:bc:84:76:38:a2:
                    70:55:26:ac:a8:13:f0:fe:72:8b:72:4e:6c:47:83:
                    ca:9c:e4:0d:de:7b:01:ec:f2:a5:83:5d:b9:44:4a:
                    75:0f:e2:97:22:63:53:73:33:b7:ae:f8:c0:8b:74:
                    80:c9:f5:05:2f:d1:6f:fa:f4:32:2a:68:a7:00:26:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4F:A8:3C:FC:67:C5:F5:BF:D0:E5:01:7E:8A:9B:1A:36:37:4E:F7
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a31303a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:78:51:29:5f:ca:4d:0b:25:7a:06:3c:cc:4b:74:96:21:7b:
         4d:ab:dd:00:98:02:19:0d:76:20:32:dc:ae:9c:f6:1c:c8:f5:
         9d:25:1b:ac:7b:20:8a:84:30:bf:12:7a:0a:e8:8c:ac:7c:eb:
         2c:25:62:6e:5e:80:44:b4:9b:ce:de:fc:82:5c:b3:87:e0:d8:
         77:0e:21:71:bf:8f:85:e5:cb:ec:84:a5:9f:aa:00:12:54:b1:
         b1:99:5b:d7:85:56:8c:26:2b:ee:05:1e:ef:17:96:b8:18:f9:
         45:3d:c6:ee:aa:11:43:fe:b1:25:58:7b:8c:cc:e1:9e:4e:31:
         d2:5e:f3:01:cd:0f:98:b5:f0:f2:f8:f5:32:c4:89:8d:09:39:
         3e:dc:d3:bb:2c:d3:a3:88:54:ce:7a:9b:fe:08:b8:62:c5:37:
         a6:f8:11:61:ae:02:7e:6e:58:c6:19:94:bd:2d:dc:a6:d3:8c:
         6b:3b:ab:60:ee:d9:2f:30:2d:a7:82:cd:e2:28:ac:10:96:c1:
         05:c0:90:f8:2b:65:8f:56:ef:d1:2b:77:84:8c:cd:83:1d:9f:
         f2:6b:72:fd:be:7e:b8:95:85:1e:03:e3:59:0b:6c:61:a3:ed:
         7a:78:64:89:8f:6d:70:27:95:5b:97:2b:c4:8b:8c:c1:98:5b:
         80:54:04:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org