Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a32303a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a32303a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          cICDZC75sQbX3hP2WBzMMjEkRIqCDmjnTW7TwBawmbE=
Subject key identifier:   BC:33:B4:B0:B6:1A:C9:8A:4F:A3:C9:92:9D:83:83:C7:3B:8B:66:FF
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       7BFDE8E846BE158CBDC56965A72DEAA893AE9BDF
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a32303a3a2f34342d3438203d3e203334393237.roa
Signing time:             Thu 30 Jan 2025 22:45:44 +0000
ROA not before:           Thu 30 Jan 2025 22:40:44 +0000
ROA not after:            Thu 29 Jan 2026 22:45:44 +0000
asID:                     34927
IP address blocks:        2602:fafd:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 08:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fd:e8:e8:46:be:15:8c:bd:c5:69:65:a7:2d:ea:a8:93:ae:9b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jan 30 22:40:44 2025 GMT
            Not After : Jan 29 22:45:44 2026 GMT
        Subject: CN=BC33B4B0B61AC98A4FA3C9929D8383C73B8B66FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:e0:93:24:01:63:21:4f:2e:e6:bc:85:81:
                    93:2e:7a:06:c6:4f:af:89:96:38:15:dd:48:82:24:
                    8c:70:10:07:5e:ea:9f:bb:4e:e1:47:30:0c:c6:9f:
                    af:0c:d6:52:69:63:8e:28:8b:89:b5:ac:a8:ff:ba:
                    6d:be:db:c8:c9:a0:28:ab:6f:67:fb:4a:c0:45:03:
                    86:88:94:07:26:a3:3f:24:e4:a2:7f:a6:00:4b:8b:
                    db:8a:f4:a2:0c:11:6d:fd:16:1a:f4:69:55:75:d6:
                    e8:ee:38:3f:18:5a:50:d3:30:c5:52:69:27:ad:da:
                    5d:8e:4a:14:e3:ae:40:e2:74:27:65:13:40:c3:a8:
                    49:4f:8c:7d:7a:8c:ef:61:a0:d0:94:ea:4d:6e:2c:
                    21:22:40:82:eb:b6:dd:8a:b1:11:10:2c:d2:89:e3:
                    91:bc:99:55:6d:b5:a5:bd:c9:26:c4:ee:21:5c:ab:
                    54:bb:e8:0b:85:4b:5e:46:f2:91:84:15:9e:70:15:
                    de:e9:37:d8:69:cf:fe:11:3a:40:4a:4b:63:04:8a:
                    28:f2:21:6e:6e:12:ba:ee:e3:54:77:61:0d:00:88:
                    79:a6:cc:f3:21:0c:63:de:af:ce:b9:8d:e4:62:62:
                    7c:c9:9f:26:ef:af:72:13:e1:f9:18:22:2f:97:ee:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:33:B4:B0:B6:1A:C9:8A:4F:A3:C9:92:9D:83:83:C7:3B:8B:66:FF
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a32303a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:6e:6b:82:55:ca:24:a9:58:cd:bf:29:67:37:71:c3:af:c5:
         80:b0:88:fa:23:92:0b:11:4f:48:24:40:97:e2:18:5b:4f:3d:
         06:03:1a:f8:8c:b1:ec:51:c5:51:5d:0b:36:1e:b7:c9:72:b6:
         12:bc:75:20:0b:83:5b:70:c0:4c:1d:5f:cc:d6:3d:16:73:1e:
         89:43:11:76:ca:96:80:52:f3:33:77:af:6f:8b:1e:5f:a3:7f:
         79:e7:b4:54:78:99:bc:c1:f8:a5:7d:56:0e:7a:4b:14:2b:9e:
         58:0b:92:e0:8b:6e:cf:c9:ee:0b:54:93:78:42:38:26:7d:9e:
         84:08:e2:bf:fb:28:9b:16:00:66:90:c0:7b:51:f3:fb:b9:dd:
         a1:a5:b9:a0:cc:65:af:e0:1d:d0:94:23:9a:12:0a:83:47:a2:
         53:17:6d:54:36:6a:47:8c:10:3c:90:92:26:a5:0c:9b:5a:94:
         65:9a:a2:65:2f:0e:29:0f:4c:a3:91:a5:18:2c:41:b4:58:15:
         cf:8b:4b:c7:2b:81:0a:02:b1:25:f1:a8:44:c2:81:12:f4:5e:
         f4:97:73:68:73:15:99:14:2f:a8:07:05:4c:b4:f6:2f:c5:0e:
         9b:9f:ef:fc:7e:07:5b:0c:1e:70:e5:20:03:df:b3:5a:e8:17:
         36:44:e7:cf
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUe/3o6Ea+FYy9xWllpy3qqJOum98wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjUwMTMwMjI0MDQ0WhcNMjYwMTI5MjI0NTQ0
WjAzMTEwLwYDVQQDEyhCQzMzQjRCMEI2MUFDOThBNEZBM0M5OTI5RDgzODNDNzNC
OEI2NkZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ungkyQBYyFP
Lua8hYGTLnoGxk+viZY4Fd1IgiSMcBAHXuqfu07hRzAMxp+vDNZSaWOOKIuJtayo
/7ptvtvIyaAoq29n+0rARQOGiJQHJqM/JOSif6YAS4vbivSiDBFt/RYa9GlVddbo
7jg/GFpQ0zDFUmknrdpdjkoU465A4nQnZRNAw6hJT4x9eozvYaDQlOpNbiwhIkCC
67bdirERECzSieORvJlVbbWlvckmxO4hXKtUu+gLhUteRvKRhBWecBXe6TfYac/+
ETpASktjBIoo8iFubhK67uNUd2ENAIh5pszzIQxj3q/OuY3kYmJ8yZ8m769yE+H5
GCIvl+5JaQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFLwztLC2GsmKT6PJkp2Dg8c7
i2b/MB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGNBggrBgEFBQcBCwSBgDB+MHwG
CCsGAQUFBzALhnByc3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NM
T1VESUUtUlBLSS8xLzMyMzYzMDMyM2E2NjYxNjY2NDNhMzIzMDNhM2EyZjM0MzQy
ZDM0MzgyMDNkM2UyMDMzMzQzOTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvr9ACAwDQYJKoZI
hvcNAQELBQADggEBAJlua4JVyiSpWM2/KWc3ccOvxYCwiPojkgsRT0gkQJfiGFtP
PQYDGviMsexRxVFdCzYet8lythK8dSALg1twwEwdX8zWPRZzHolDEXbKloBS8zN3
r2+LHl+jf3nntFR4mbzB+KV9Vg56SxQrnlgLkuCLbs/J7gtUk3hCOCZ9noQI4r/7
KJsWAGaQwHtR8/u53aGluaDMZa/gHdCUI5oSCoNHolMXbVQ2akeMEDyQkialDJta
lGWaomUvDikPTKORpRgsQbRYFc+LS8crgQoCsSXxqETCgRL0XvSXc2hzFZkUL6gH
BUy09i/FDpuf7/x+B1sMHnDlIAPfs1roFzZE588=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:30 2025 by rpki-client