Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          d6Cxk5rYZ3NaBV2kMgUssrG/ewwSbI+o4vWspcZS4Lg=
Subject key identifier:   BE:74:86:70:55:DD:6F:EC:09:8D:F4:71:32:8A:5A:87:D7:AC:74:96
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       5A27DC49C696D43D0A3BF92D474DFDCFB9CD6D29
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa
Signing time:             Wed 27 Dec 2023 05:56:00 +0000
ROA not before:           Wed 27 Dec 2023 05:51:00 +0000
ROA not after:            Wed 25 Dec 2024 05:56:00 +0000
asID:                     23470
IP address blocks:        2602:fafd:902::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:27:dc:49:c6:96:d4:3d:0a:3b:f9:2d:47:4d:fd:cf:b9:cd:6d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Dec 27 05:51:00 2023 GMT
            Not After : Dec 25 05:56:00 2024 GMT
        Subject: CN=BE74867055DD6FEC098DF471328A5A87D7AC7496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:c1:ca:83:09:fc:fd:df:db:4a:3c:79:17:
                    9d:b8:51:44:54:57:8c:2f:78:cf:5f:27:f8:f0:66:
                    d0:e6:4f:27:90:9a:1f:2f:f1:be:c7:56:75:0f:ac:
                    ad:95:62:61:c4:bc:2f:c1:55:34:d0:84:cf:69:a8:
                    30:6a:49:61:12:87:07:93:59:b0:47:75:72:85:61:
                    4a:8c:c8:dd:90:eb:ff:8a:48:04:8e:ac:3c:f4:fb:
                    95:ba:3c:e8:da:ce:d0:f8:2e:9d:f4:a8:47:37:59:
                    9c:c5:c8:ce:83:3c:09:14:74:08:e9:dc:9f:70:5a:
                    3d:73:9e:52:66:85:c0:8a:21:ca:c4:4a:b8:88:75:
                    b6:de:83:12:c6:72:80:9f:5c:fd:1d:18:a2:0d:d5:
                    db:fd:e5:82:3c:ac:7a:d1:f2:44:5d:8b:b7:92:ea:
                    dc:d2:a8:7a:b1:b0:3b:0f:ba:60:ed:46:0c:72:ff:
                    85:fb:66:0b:9e:b6:c4:a6:19:54:04:2e:c6:cd:0e:
                    43:cd:04:6a:eb:37:61:ca:e9:d0:65:d2:37:23:f4:
                    2c:37:c1:22:58:e1:15:6a:b1:58:19:2d:db:62:b4:
                    dd:8c:92:65:b2:7d:77:63:7c:04:db:84:c3:4a:6c:
                    70:99:0a:f9:b1:ff:21:21:9d:71:99:92:4d:49:b6:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:74:86:70:55:DD:6F:EC:09:8D:F4:71:32:8A:5A:87:D7:AC:74:96
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:902::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:81:71:0c:dc:01:6d:01:64:64:77:6f:dd:c5:b5:5a:d2:50:
         dc:2b:fb:a8:51:69:0e:3a:e8:6e:24:cc:b4:eb:53:90:88:fe:
         d7:84:bd:ee:54:76:00:d7:0b:fa:ec:44:a5:34:ec:8e:0b:8e:
         c7:cd:77:90:f2:68:ab:d9:5d:d8:3f:7d:2c:d8:1a:7e:c1:c1:
         6a:60:42:2e:6e:ce:a2:af:e0:50:93:a9:e3:1a:2a:42:7d:98:
         95:57:97:60:1a:98:77:31:32:a4:ee:f4:58:0a:9d:62:8e:6b:
         0c:a2:34:69:43:0b:db:0a:49:13:b5:5c:d5:22:e8:12:cf:55:
         9f:c2:f5:d8:15:18:13:80:c5:c5:62:cc:de:5c:aa:dd:3a:fb:
         ff:8b:a3:3c:7a:91:e3:6e:30:72:21:ef:44:d7:e6:c6:fc:0a:
         7f:3b:b7:f9:bc:6a:e9:f3:e7:df:4c:b4:9e:5b:4d:5e:77:62:
         50:08:49:eb:98:5e:df:bc:c0:eb:6e:d2:bc:27:aa:4b:cf:94:
         86:a0:6e:bb:e4:05:66:a3:8a:3b:9a:2e:92:50:8a:34:c4:43:
         3c:c9:52:c9:64:8d:d0:63:86:fc:de:66:ba:af:14:34:f9:c4:
         69:4f:0a:2b:62:41:b7:aa:3b:84:8e:26:21:97:7d:26:d5:cc:
         90:15:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 06:49:19 2024 by rpki-client on console-fra.rpki-client.org