Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          kBx8gKDLSw2wueKuTSO5/APybna59Fbaanc9rufUzOk=
Subject key identifier:   4B:BF:B8:F7:57:1A:67:03:E9:04:EB:63:54:44:09:52:69:D6:33:2D
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       3ABA803B93F73D2309106AA20318F4A8A49EC504
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f34342d3438203d3e203334393237.roa
Signing time:             Fri 07 Jul 2023 14:10:18 +0000
ROA not before:           Fri 07 Jul 2023 14:05:18 +0000
ROA not after:            Fri 05 Jul 2024 14:10:18 +0000
asID:                     34927
IP address blocks:        2602:fafd::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ba:80:3b:93:f7:3d:23:09:10:6a:a2:03:18:f4:a8:a4:9e:c5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jul  7 14:05:18 2023 GMT
            Not After : Jul  5 14:10:18 2024 GMT
        Subject: CN=4BBFB8F7571A6703E904EB635444095269D6332D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:7f:fd:13:ab:29:29:05:60:1a:4d:30:15:
                    ea:54:84:75:10:1a:eb:84:90:c0:12:d3:4d:db:c7:
                    f8:39:54:36:29:a9:80:b1:e5:a3:91:3f:08:05:04:
                    db:a8:73:4c:bd:b6:12:bb:01:10:e9:1d:2f:8e:e5:
                    b6:fb:d3:06:47:27:35:d8:00:2f:70:1d:62:b1:cd:
                    2c:57:5c:bc:b3:6c:e3:15:f6:96:48:1d:58:dd:07:
                    63:1f:d5:d3:a2:76:53:f6:7d:19:cb:95:d8:4a:7d:
                    f6:ac:96:8a:77:17:5c:f3:57:65:3e:c9:45:8d:32:
                    af:3c:d3:b3:c1:db:20:7b:ae:e2:f2:6c:42:a3:4c:
                    a8:e2:7f:53:97:39:3a:d3:5c:7d:f1:32:7d:e3:44:
                    26:c0:33:6e:fa:18:2d:c6:2e:91:b7:bd:fa:78:55:
                    38:3d:fd:21:b9:70:1f:dd:3b:63:8d:eb:4a:56:90:
                    d6:0b:cd:49:ca:1a:06:27:6c:e0:70:73:92:8e:2a:
                    1b:5b:98:d3:5a:51:c5:d3:be:21:22:de:6b:ae:5a:
                    63:8b:04:cc:c9:52:63:4c:ca:c8:63:5e:9e:2d:df:
                    e1:0a:64:5e:1d:ba:4a:ab:b9:27:53:8c:11:08:f6:
                    18:3d:17:94:2b:55:1f:f1:20:5a:28:c1:8e:df:c8:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BF:B8:F7:57:1A:67:03:E9:04:EB:63:54:44:09:52:69:D6:33:2D
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:05:0a:41:54:20:25:dc:52:06:b6:46:38:94:81:dd:53:cc:
         9d:23:d3:c3:48:8e:11:fb:1c:cb:44:6b:44:66:7c:61:71:8e:
         2c:b8:4b:7f:0f:03:62:8d:e5:d8:1d:f6:01:49:57:19:4f:4e:
         20:65:50:ae:a9:ad:7d:ad:3e:38:02:32:f4:74:31:8b:0c:a8:
         ef:a8:e5:3d:9b:ad:f8:05:5e:63:33:25:78:d9:11:27:1c:17:
         f0:a9:b6:1b:f0:96:54:e6:01:d4:7e:9c:eb:d1:a5:d0:cf:65:
         b8:87:e9:11:c6:bc:60:fe:5a:5c:05:a4:5f:c0:31:60:fd:eb:
         af:31:35:64:89:68:f0:7f:c6:2e:e6:65:a5:62:ac:cb:11:e8:
         f2:2c:be:d9:1a:c1:1a:76:54:be:63:ef:4a:26:19:5f:4d:38:
         c5:a8:39:61:eb:c3:6a:50:79:dc:fa:e4:72:e5:2e:25:47:ae:
         1a:11:f2:13:78:bc:3f:79:c9:40:8a:24:f9:a7:f0:68:2f:28:
         42:0e:ab:c2:60:57:95:ab:60:30:26:7b:0e:cc:93:b3:e2:ea:
         8e:87:81:3b:2b:f9:a8:3d:f5:46:4c:f3:1d:bf:09:19:c4:ae:
         61:a4:f8:c5:aa:17:10:8f:ec:dd:55:30:1c:36:9a:dd:8e:05:
         50:30:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:28 2024 by rpki-client on console-ams.rpki-client.org