Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          OMf+mH31BSDCBG4aGEL2RxtGczrFUCpKnW6cAvZIa44=
Subject key identifier:   C9:2D:D4:75:E9:91:CF:7C:47:1A:0E:F7:59:60:C8:C1:25:29:16:CD
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       2CF6BEB9DBC3057C22D09D622B413B8609DCB39E
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f34342d3438203d3e203334393237.roa
Signing time:             Fri 07 Jun 2024 14:59:53 +0000
ROA not before:           Fri 07 Jun 2024 14:54:53 +0000
ROA not after:            Fri 06 Jun 2025 14:59:53 +0000
asID:                     34927
IP address blocks:        2602:fafd::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f6:be:b9:db:c3:05:7c:22:d0:9d:62:2b:41:3b:86:09:dc:b3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jun  7 14:54:53 2024 GMT
            Not After : Jun  6 14:59:53 2025 GMT
        Subject: CN=C92DD475E991CF7C471A0EF75960C8C1252916CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:7f:e5:74:c4:a2:61:27:fb:e7:b9:ba:5d:
                    b3:fe:2f:8d:58:62:fe:61:24:8a:68:43:e6:17:bd:
                    75:0d:a5:c1:2a:e4:22:d1:47:2e:f5:9f:7c:15:4e:
                    ea:50:23:e6:43:7c:e0:76:6b:64:e7:ff:8f:d3:79:
                    bc:d8:ae:ae:db:47:ac:ee:5a:41:fa:5b:c4:79:e1:
                    c9:f4:cf:bb:55:d3:49:03:8d:59:22:ec:5a:09:42:
                    da:f9:06:35:5d:d1:d0:ef:00:b9:92:7b:7a:cc:5d:
                    0e:ee:f4:b9:aa:61:88:3e:1f:43:83:9f:12:d8:63:
                    73:f3:56:93:be:fb:a7:4b:21:93:29:ca:3a:a8:9a:
                    e4:12:73:3b:1a:23:1d:9a:50:54:67:1f:e6:c1:df:
                    c8:7d:26:f2:72:06:ca:32:b0:03:2c:2e:da:ac:e9:
                    56:2d:40:99:b1:cd:78:ff:0b:a0:d9:a7:5a:1f:81:
                    11:d1:69:a9:f2:67:2f:f3:9f:30:ae:c3:7f:b6:bd:
                    42:e5:5a:91:53:33:67:e5:bf:9f:cc:4a:2c:48:04:
                    8f:69:6e:59:a6:46:ac:d2:21:42:24:48:68:73:56:
                    78:8d:a7:a8:22:05:31:08:df:7f:10:db:56:71:37:
                    42:a8:d1:b1:05:c5:3c:ca:17:e7:3d:42:5e:8e:7c:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2D:D4:75:E9:91:CF:7C:47:1A:0E:F7:59:60:C8:C1:25:29:16:CD
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:e4:7b:59:12:48:65:c9:59:43:ab:85:4e:0f:99:ad:d9:
         45:76:17:01:fa:70:9f:d6:31:9f:59:b3:cd:d2:1d:b0:4d:2b:
         3a:ef:eb:bc:de:9d:1c:c4:b7:20:29:33:3c:89:4e:0b:8d:26:
         fc:27:ea:c5:8e:b8:b0:37:68:e7:03:15:7e:83:02:95:aa:a8:
         90:c9:d3:eb:c4:10:39:bb:e0:61:cf:5b:f2:b9:ca:ad:fe:76:
         67:88:5e:5d:e0:2d:5b:47:02:77:e2:8e:f3:a9:cb:a0:11:fe:
         98:61:3d:56:de:48:d7:37:c8:e7:22:c0:43:f7:8d:0f:f4:69:
         27:bb:ba:77:1c:85:87:e3:68:cf:38:f9:f8:f2:a4:e5:6b:e8:
         af:b5:26:e3:c3:33:72:64:ae:c8:60:c0:fc:a3:9a:d0:63:23:
         22:49:bf:69:ed:46:d7:b1:29:6f:e4:ea:5e:e5:61:d2:47:5a:
         d7:b7:69:f2:14:f7:50:b9:be:54:1d:d0:0c:e6:6c:81:53:6d:
         62:3b:28:c2:8c:0f:32:8c:3c:ab:78:e8:06:b6:db:7e:66:5b:
         e0:0f:3e:1e:81:d4:86:aa:f7:c4:6a:fb:58:a5:8f:4b:51:ca:
         2a:4d:33:18:e7:24:77:0c:76:f6:a6:a4:eb:5b:d4:95:96:0e:
         4a:36:0f:70
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIULPa+udvDBXwi0J1iK0E7hgncs54wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQwNjA3MTQ1NDUzWhcNMjUwNjA2MTQ1OTUz
WjAzMTEwLwYDVQQDEyhDOTJERDQ3NUU5OTFDRjdDNDcxQTBFRjc1OTYwQzhDMTI1
MjkxNkNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA5/5XTEomEn
++e5ul2z/i+NWGL+YSSKaEPmF711DaXBKuQi0Ucu9Z98FU7qUCPmQ3zgdmtk5/+P
03m82K6u20es7lpB+lvEeeHJ9M+7VdNJA41ZIuxaCULa+QY1XdHQ7wC5knt6zF0O
7vS5qmGIPh9Dg58S2GNz81aTvvunSyGTKco6qJrkEnM7GiMdmlBUZx/mwd/IfSby
cgbKMrADLC7arOlWLUCZsc14/wug2adaH4ER0Wmp8mcv858wrsN/tr1C5VqRUzNn
5b+fzEosSASPaW5Zpkas0iFCJEhoc1Z4jaeoIgUxCN9/ENtWcTdCqNGxBcU8yhfn
PUJejnwr3wIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFMkt1HXpkc98RxoO91lgyMEl
KRbNMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYI
KwYBBQUHMAuGanJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2EzYTJmMzQzNDJkMzQzODIw
M2QzZTIwMzMzNDM5MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC+v0AADANBgkqhkiG9w0BAQsF
AAOCAQEAeWvke1kSSGXJWUOrhU4Pma3ZRXYXAfpwn9Yxn1mzzdIdsE0rOu/rvN6d
HMS3ICkzPIlOC40m/CfqxY64sDdo5wMVfoMClaqokMnT68QQObvgYc9b8rnKrf52
Z4heXeAtW0cCd+KO86nLoBH+mGE9Vt5I1zfI5yLAQ/eND/RpJ7u6dxyFh+Nozzj5
+PKk5Wvor7Um48MzcmSuyGDA/KOa0GMjIkm/ae1G17Epb+TqXuVh0kda17dp8hT3
ULm+VB3QDOZsgVNtYjsowowPMow8q3joBrbbfmZb4A8+HoHUhqr3xGr7WKWPS1HK
Kk0zGOckdwx29qak61vUlZYOSjYPcA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org