Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa
File:                     323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa (raw, json)
Hash identifier:          EYRh6nt1nv8jqyHuqwA+OlXq5TacmEtIP7m9OOsgFoI=
Subject key identifier:   D4:50:45:BD:73:99:AA:7D:A4:0D:18:FB:CC:11:E9:81:95:9B:F1:8A
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       63130174EAC395101B0DD9CFD313BF5BCCAD0AA4
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa
Signing time:             Wed 15 Nov 2023 12:11:39 +0000
ROA not before:           Wed 15 Nov 2023 12:06:39 +0000
ROA not after:            Wed 13 Nov 2024 12:11:39 +0000
asID:                     204789
IP address blocks:        2602:fafd:f04::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:13:01:74:ea:c3:95:10:1b:0d:d9:cf:d3:13:bf:5b:cc:ad:0a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:39 2023 GMT
            Not After : Nov 13 12:11:39 2024 GMT
        Subject: CN=D45045BD7399AA7DA40D18FBCC11E981959BF18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4f:65:36:ae:a5:19:76:7a:78:df:ed:9b:13:
                    b2:76:46:98:35:c3:2c:f5:9f:85:88:1b:c0:34:bc:
                    dd:ee:07:cc:d1:dc:a8:14:78:b0:a0:7d:4d:ff:46:
                    dc:b9:ba:dc:66:ac:bc:7e:c3:77:65:99:54:22:33:
                    4e:0e:98:05:29:e4:e2:f8:56:0d:50:5a:96:0f:d1:
                    5d:a8:aa:f6:cd:ef:68:67:88:13:59:fa:82:fc:87:
                    4f:d4:88:75:ff:77:42:fc:48:63:6f:20:b3:f1:2b:
                    a9:ad:dd:42:00:a4:73:5a:6c:cd:c2:c4:82:b6:dc:
                    d5:dc:9c:fc:d9:91:15:ab:87:60:44:40:2d:81:0c:
                    38:34:08:4a:9b:ae:76:d7:d3:42:38:a2:4f:1a:2b:
                    43:e2:2c:38:54:86:8c:de:ad:28:77:b7:91:a4:05:
                    e4:85:6d:a5:5f:4c:b2:9f:c4:40:7f:1f:7f:7c:e5:
                    11:de:b0:93:c0:b4:1d:c6:ef:c1:2f:9c:2c:fb:9d:
                    76:96:6c:25:0e:fa:62:29:ac:38:0d:53:e3:9c:1d:
                    e7:49:ff:eb:48:af:29:9b:22:e9:08:94:f8:21:47:
                    13:63:c8:b5:b3:8d:4a:53:d1:62:2f:aa:08:8b:87:
                    93:4a:bc:a7:50:7e:61:71:26:81:b7:10:0b:b3:77:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:50:45:BD:73:99:AA:7D:A4:0D:18:FB:CC:11:E9:81:95:9B:F1:8A
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f04::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:95:98:63:19:58:14:76:16:8b:7c:10:dc:37:dd:e0:94:b7:
         ce:60:26:60:dd:0d:ff:0c:a7:91:05:3e:4e:08:1d:f7:d6:c5:
         b1:dc:e4:fb:20:1c:10:18:94:08:60:a6:c4:d8:38:9f:74:98:
         aa:62:cd:91:76:a3:29:a3:6b:9f:f4:9d:27:a7:ab:6a:74:87:
         73:2a:b6:25:62:74:97:65:02:94:ca:e8:1f:4f:29:e0:42:bc:
         8c:61:fe:6e:a0:6e:c0:62:11:18:38:da:21:d8:b4:c7:14:f1:
         5f:44:24:12:f6:f4:be:cb:7d:9b:08:99:44:77:9f:52:3e:95:
         ef:c1:c3:5e:30:f4:9f:c6:52:82:1d:7a:34:92:91:84:dc:e1:
         6f:6c:56:d5:48:b6:0a:f3:b6:c9:d3:44:38:3f:7b:3f:ee:77:
         a1:10:4d:f4:73:3f:71:14:6a:db:62:03:b8:d3:8b:fe:02:bd:
         41:d1:1e:d1:cb:d2:37:f9:c7:f3:d5:9d:3b:08:e9:cd:d4:22:
         fb:f6:64:c4:c2:62:f5:3e:45:cb:4d:4d:5f:27:91:ce:8d:14:
         b1:7f:ee:14:7f:26:c3:1a:df:0b:b1:8b:94:49:a5:37:3a:c1:
         5c:1b:52:8c:38:98:26:95:aa:c3:16:27:cf:97:fd:c8:a1:ce:
         aa:d9:d6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org