Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a32303a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a32303a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          Tpin176snNxxwkT3WICdcGfEfk52uqwWiYF33wYsk74=
Subject key identifier:   70:BF:D6:FB:37:7F:B7:CC:D8:F5:58:B3:30:8E:2E:A0:7D:CB:47:BF
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       7136FA5790D7AA72BE6BE9C8905438AFEEDE0F99
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a32303a3a2f34342d3438203d3e203334393237.roa
Signing time:             Thu 29 Feb 2024 22:27:32 +0000
ROA not before:           Thu 29 Feb 2024 22:22:32 +0000
ROA not after:            Thu 27 Feb 2025 22:27:32 +0000
asID:                     34927
IP address blocks:        2602:fafd:20::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:36:fa:57:90:d7:aa:72:be:6b:e9:c8:90:54:38:af:ee:de:0f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Feb 29 22:22:32 2024 GMT
            Not After : Feb 27 22:27:32 2025 GMT
        Subject: CN=70BFD6FB377FB7CCD8F558B3308E2EA07DCB47BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:a8:b0:d4:c3:fd:cd:4f:26:95:b5:bc:0a:
                    b5:af:8d:d0:7c:31:9e:a6:a7:08:a7:ae:95:f7:4e:
                    2f:75:0b:f1:96:72:df:61:df:5e:dc:3c:fa:ad:20:
                    bb:59:63:1e:45:4d:ed:43:34:8c:7d:8b:92:fd:6b:
                    60:6e:4f:2c:e3:a1:6f:af:a4:42:b3:33:26:12:c5:
                    d7:4e:0b:74:bd:c7:8e:c5:f3:ff:e4:98:9b:74:c3:
                    83:18:78:37:04:37:f0:62:a0:37:55:a6:66:bd:08:
                    f6:35:d9:02:ee:f8:aa:08:86:12:20:e2:01:ff:18:
                    84:8d:11:0c:78:21:07:e9:34:d5:3e:95:ca:a0:b4:
                    30:95:2f:c3:61:d4:d5:de:79:5a:0d:12:3c:ed:df:
                    6e:ab:24:35:7c:69:09:e8:87:63:d0:91:b4:de:4a:
                    06:f1:ac:63:72:cc:bc:4e:f0:09:aa:ff:4b:3b:7b:
                    fd:fa:77:27:b7:bb:71:69:d4:2b:06:c7:72:a2:0e:
                    a3:07:00:83:b1:88:cb:ec:80:f0:00:17:db:42:3e:
                    f8:e0:65:67:9b:07:13:99:a0:58:2e:bd:86:cf:b7:
                    7a:67:37:52:ad:81:43:41:14:c1:0c:61:c6:7b:dd:
                    f2:ae:2f:27:10:8f:80:da:c8:96:f8:e3:bc:50:20:
                    8c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BF:D6:FB:37:7F:B7:CC:D8:F5:58:B3:30:8E:2E:A0:7D:CB:47:BF
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a32303a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:87:ac:91:6f:b9:92:dc:cf:0f:fe:0d:18:3d:18:8f:ea:
         ab:1e:a8:38:5a:54:f0:da:17:a5:7f:8d:9e:1a:4b:4d:70:77:
         93:65:36:21:8f:f9:74:af:86:44:e4:9e:0a:77:7e:e5:f0:ac:
         45:23:4a:19:45:09:dc:03:6d:65:10:59:50:63:b1:35:a5:5e:
         e2:f5:17:93:b3:52:cc:c4:a8:37:66:02:c8:07:9b:e8:61:6d:
         37:ad:61:88:99:e3:f0:ef:aa:86:db:6d:f0:60:54:29:0c:28:
         8f:4c:ad:bf:6d:c3:d4:c3:0f:a4:c5:0a:b0:37:13:8b:e1:06:
         84:68:fc:cc:d1:8a:f1:12:62:82:a9:7f:26:6e:cd:4d:38:ac:
         ac:c8:20:74:51:ac:52:1e:e7:08:66:bd:1a:55:13:c9:ed:fb:
         d0:73:35:6f:cc:2c:f8:1c:57:76:73:19:e0:d0:cf:e2:c7:5b:
         56:a4:62:ff:3a:c9:2d:42:17:4f:d2:8f:b4:cf:80:2a:60:73:
         3e:3f:de:8c:0f:e5:97:7c:e6:73:3f:b3:57:d1:c5:eb:00:cd:
         af:da:85:68:70:96:37:d5:4e:67:73:1b:0e:87:c1:fa:f2:dd:
         0f:c0:c4:5a:2e:25:e3:57:69:24:09:16:c0:3c:df:5b:5c:c2:
         ec:8f:53:d0
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUcTb6V5DXqnK+a+nIkFQ4r+7eD5kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQwMjI5MjIyMjMyWhcNMjUwMjI3MjIyNzMy
WjAzMTEwLwYDVQQDEyg3MEJGRDZGQjM3N0ZCN0NDRDhGNTU4QjMzMDhFMkVBMDdE
Q0I0N0JGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFCosNTD/c1P
JpW1vAq1r43QfDGepqcIp66V904vdQvxlnLfYd9e3Dz6rSC7WWMeRU3tQzSMfYuS
/Wtgbk8s46Fvr6RCszMmEsXXTgt0vceOxfP/5JibdMODGHg3BDfwYqA3VaZmvQj2
NdkC7viqCIYSIOIB/xiEjREMeCEH6TTVPpXKoLQwlS/DYdTV3nlaDRI87d9uqyQ1
fGkJ6Idj0JG03koG8axjcsy8TvAJqv9LO3v9+ncnt7txadQrBsdyog6jBwCDsYjL
7IDwABfbQj744GVnmwcTmaBYLr2Gz7d6ZzdSrYFDQRTBDGHGe93yri8nEI+A2siW
+OO8UCCMOwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFHC/1vs3f7fM2PVYszCOLqB9
y0e/MB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGNBggrBgEFBQcBCwSBgDB+MHwG
CCsGAQUFBzALhnByc3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NM
T1VESUUtUlBLSS8xLzMyMzYzMDMyM2E2NjYxNjY2NDNhMzIzMDNhM2EyZjM0MzQy
ZDM0MzgyMDNkM2UyMDMzMzQzOTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvr9ACAwDQYJKoZI
hvcNAQELBQADggEBABCoh6yRb7mS3M8P/g0YPRiP6qseqDhaVPDaF6V/jZ4aS01w
d5NlNiGP+XSvhkTkngp3fuXwrEUjShlFCdwDbWUQWVBjsTWlXuL1F5OzUszEqDdm
AsgHm+hhbTetYYiZ4/DvqobbbfBgVCkMKI9Mrb9tw9TDD6TFCrA3E4vhBoRo/MzR
ivESYoKpfyZuzU04rKzIIHRRrFIe5whmvRpVE8nt+9BzNW/MLPgcV3ZzGeDQz+LH
W1akYv86yS1CF0/Sj7TPgCpgcz4/3owP5Zd85nM/s1fRxesAza/ahWhwljfVTmdz
Gw6Hwfry3Q/AxFouJeNXaSQJFsA831tcwuyPU9A=
-----END CERTIFICATE-----
Generated at Mon Nov 25 06:02:38 2024 by rpki-client on console-ams.rpki-client.org