Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          UIzeB8DXpGYn9og429jHrjalreyUOqR1ijGsjv1qakE=
Subject key identifier:   BB:57:C4:60:40:8A:43:A5:7A:A7:AF:AA:0A:F5:24:D3:1C:A7:65:6C
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       0771ED09EAD4A4B3F63336FC9EB64F42EC732D62
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa
Signing time:             Wed 27 Nov 2024 06:45:32 +0000
ROA not before:           Wed 27 Nov 2024 06:40:32 +0000
ROA not after:            Wed 26 Nov 2025 06:45:32 +0000
asID:                     23470
IP address blocks:        2602:fafd:902::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 15:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:71:ed:09:ea:d4:a4:b3:f6:33:36:fc:9e:b6:4f:42:ec:73:2d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 27 06:40:32 2024 GMT
            Not After : Nov 26 06:45:32 2025 GMT
        Subject: CN=BB57C460408A43A57AA7AFAA0AF524D31CA7656C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9a:cb:e1:19:d3:52:32:bf:de:c0:09:bc:6c:
                    76:97:38:ee:83:f5:68:14:97:ed:f1:36:e3:7a:7a:
                    aa:bd:73:24:14:ee:11:af:f1:2d:6f:5c:06:04:ca:
                    56:28:7a:2e:42:f7:a9:59:c4:96:4b:7d:51:25:38:
                    48:a7:a0:5a:82:0f:53:39:25:65:1b:ee:fb:15:e0:
                    03:8b:71:33:fb:29:89:f8:99:c2:77:2f:ee:5e:c3:
                    59:f1:c2:02:09:48:e0:4b:a7:a3:a4:dd:b4:a5:bc:
                    97:4e:81:c1:40:9b:96:cb:80:f9:44:f1:77:05:eb:
                    ef:b1:82:5b:87:a7:33:c1:c6:52:b2:b0:78:45:e5:
                    09:87:dd:e0:d2:06:39:9d:6a:82:3c:00:0b:dd:ac:
                    d7:78:4a:2d:56:01:71:8d:cc:64:75:e4:9c:49:38:
                    70:e6:5c:b4:6c:51:f3:51:ef:d0:af:7e:0b:54:6a:
                    c8:e5:7c:3b:f9:4f:d3:32:e7:d5:b9:21:dc:9b:ee:
                    c7:11:6e:40:0b:f4:a7:f1:db:22:eb:35:7e:23:e4:
                    68:db:00:e1:c4:93:f0:f8:b1:f7:da:81:f1:11:9f:
                    e0:b1:fb:ac:75:eb:38:cf:ef:9f:43:ce:e9:ba:aa:
                    39:01:aa:be:1d:55:19:f8:23:66:e4:88:c3:20:cc:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:57:C4:60:40:8A:43:A5:7A:A7:AF:AA:0A:F5:24:D3:1C:A7:65:6C
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:902::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:78:af:8e:96:ce:14:e6:e8:87:8d:b1:95:34:4b:2c:b9:
         50:56:df:ba:6e:c6:70:92:60:c7:92:4d:3f:d9:7a:54:70:03:
         8b:f2:02:f0:f6:83:db:be:8f:f8:0f:c1:49:82:ca:dd:33:df:
         06:a4:ed:8a:fd:23:04:ed:49:fc:d5:38:05:a1:c9:58:9f:56:
         59:99:84:6d:43:16:7c:eb:bd:b6:9e:90:46:4b:af:87:6c:b2:
         9f:b2:16:fc:84:36:fe:83:1c:ef:2f:e8:50:45:22:72:70:0f:
         13:9e:78:08:e3:ec:38:ba:96:4b:7e:9b:c9:81:9b:52:86:8c:
         52:5a:45:6d:36:4f:47:0f:15:ab:32:d5:33:17:b7:76:3c:ac:
         54:13:7c:3b:bf:e9:fb:42:54:48:99:07:37:aa:ac:d3:2a:97:
         86:72:4b:fc:47:dc:ad:eb:57:07:3e:37:53:63:f7:8d:fa:7a:
         e2:35:a5:e3:16:66:fc:b1:fe:82:98:3d:a9:da:c4:cb:26:11:
         16:56:6f:7b:58:01:30:ac:44:90:98:4a:9b:e5:6d:27:c4:30:
         ba:b4:20:90:76:50:8e:e6:26:4a:0a:1a:8b:7e:45:e2:12:da:
         ae:ac:a3:8e:86:c7:d8:6d:da:db:6c:54:6c:bb:16:1c:d3:10:
         d9:05:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:17:31 2025 by rpki-client