Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630333a3a2f34382d3438203d3e20323039383631.roa
File:                     323630323a666166643a6630333a3a2f34382d3438203d3e20323039383631.roa (raw, json)
Hash identifier:          PzO0nGeLgQYb+4n/h+k1eyHztR3J1CBE/IPeGhsJDFc=
Subject key identifier:   C8:44:73:55:8C:FF:B0:F9:D6:DB:DD:C6:FD:63:B9:39:52:AC:7A:4D
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       29710013B16FC6D3CDC589D24F78D990F9F55799
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630333a3a2f34382d3438203d3e20323039383631.roa
Signing time:             Wed 16 Oct 2024 12:45:22 +0000
ROA not before:           Wed 16 Oct 2024 12:40:22 +0000
ROA not after:            Wed 15 Oct 2025 12:45:22 +0000
asID:                     209861
IP address blocks:        2602:fafd:f03::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:71:00:13:b1:6f:c6:d3:cd:c5:89:d2:4f:78:d9:90:f9:f5:57:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 12:40:22 2024 GMT
            Not After : Oct 15 12:45:22 2025 GMT
        Subject: CN=C84473558CFFB0F9D6DBDDC6FD63B93952AC7A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8a:1f:67:ca:db:2a:02:2b:fd:8d:fc:20:5c:
                    45:85:c5:1d:52:1d:45:25:5b:ec:0d:2c:2f:c6:52:
                    42:28:f0:50:4a:f6:e9:13:f8:7f:e6:9b:1f:9c:51:
                    1f:1c:05:3c:04:ea:74:59:03:af:c5:57:f9:c7:e0:
                    07:4b:f0:08:f4:96:22:01:6c:bf:65:34:f0:5b:b1:
                    b0:66:d6:72:8b:22:40:61:4e:f0:8e:da:06:02:7b:
                    84:c9:cc:cc:66:01:1c:16:1f:db:5c:25:80:ab:de:
                    4c:2c:5d:f8:cd:a3:c2:dc:e7:dd:da:18:80:4e:bb:
                    88:4a:d0:61:bb:ae:f9:0e:33:8c:c2:c3:ea:bc:e9:
                    bb:f5:f8:de:73:41:10:7f:df:d0:1f:d1:13:03:ce:
                    c5:1c:e9:c4:48:fc:57:2c:24:db:35:6d:e4:6a:2b:
                    bd:69:e8:1a:3c:ec:8c:ca:a0:ef:0a:50:18:28:9a:
                    d8:1c:5d:9b:08:1f:3b:35:9e:6d:d4:32:5d:82:a6:
                    0a:db:5e:30:5a:2b:ae:d3:ad:16:3e:89:b9:f7:33:
                    4f:a4:9d:6b:99:6a:38:f6:0f:aa:ad:b1:92:b3:80:
                    36:7a:80:cc:98:a4:22:a2:91:d8:4a:1c:37:9d:df:
                    00:b0:33:d1:71:6c:7b:d8:c2:28:17:24:1b:6b:87:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:44:73:55:8C:FF:B0:F9:D6:DB:DD:C6:FD:63:B9:39:52:AC:7A:4D
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630333a3a2f34382d3438203d3e20323039383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f03::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:eb:49:ae:6c:64:86:74:2a:fd:1d:42:cb:b2:82:6c:b5:2f:
         cf:d0:9f:d2:be:78:77:02:c9:5c:d2:ae:62:14:84:f7:97:7f:
         7d:a6:c6:47:fc:a3:b7:e7:54:7b:fb:5d:6c:d7:11:84:06:56:
         10:6b:60:6a:2e:6d:c3:99:c8:6c:10:42:24:9f:5a:b3:47:de:
         03:e9:71:97:66:93:92:7e:1f:31:c4:e8:0c:33:fc:87:9f:d7:
         54:e5:90:ff:ab:79:e6:00:9b:c7:d3:d1:1e:2f:b8:fe:51:8f:
         f4:ba:90:bc:77:fe:41:af:95:de:c3:24:69:08:96:8a:b2:aa:
         4b:5c:20:51:04:b0:a7:10:af:a5:b8:ec:20:0a:20:03:40:05:
         e8:8f:13:62:89:2c:bc:59:fa:f6:b3:fd:75:f3:66:4b:ed:86:
         96:77:18:e0:c4:29:3a:1f:36:49:e4:0c:b0:4b:18:95:28:78:
         ce:0b:12:0b:96:b6:10:23:1d:fc:36:fa:b4:97:b4:c0:fe:03:
         d3:d8:2e:8c:94:64:97:04:3f:6c:56:82:67:fb:2c:57:11:15:
         b9:b1:33:09:98:b1:c1:b0:71:3e:a1:69:e8:3d:1b:c3:db:68:
         14:20:d7:f9:d9:8b:7e:11:c4:de:64:ff:41:0f:f0:24:08:51:
         a3:b6:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org