Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa
File:                     323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa (raw, json)
Hash identifier:          cNj8SPQ19hwDo6QA4Xm4sFmmt4XwUvEboZYAsafMM2A=
Subject key identifier:   10:2D:37:2D:78:B6:F4:49:AF:90:0A:4F:2E:03:61:C0:AD:3D:DC:0E
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       093DF16E9B67BF2612F8BED3B934F4C385B9D1A8
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa
Signing time:             Wed 16 Oct 2024 12:45:22 +0000
ROA not before:           Wed 16 Oct 2024 12:40:22 +0000
ROA not after:            Wed 15 Oct 2025 12:45:22 +0000
asID:                     201398
IP address blocks:        2602:fafd:f05::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3d:f1:6e:9b:67:bf:26:12:f8:be:d3:b9:34:f4:c3:85:b9:d1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 12:40:22 2024 GMT
            Not After : Oct 15 12:45:22 2025 GMT
        Subject: CN=102D372D78B6F449AF900A4F2E0361C0AD3DDC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:3e:aa:2f:e3:fc:01:bc:59:a6:f7:e5:de:
                    92:31:8b:60:7f:b7:05:61:ba:ef:0b:8a:ae:1b:94:
                    a4:de:81:f8:c2:cd:62:db:49:ad:87:a0:c4:85:9d:
                    a4:47:0f:01:44:1c:1e:74:70:0c:d6:a2:10:94:11:
                    3f:15:75:3d:3d:1a:94:39:c2:af:09:b4:f9:bb:ee:
                    9c:05:87:f3:cb:d9:1f:08:b9:7b:e6:32:c1:44:86:
                    6a:75:fd:01:ea:4c:04:64:43:d8:a1:1d:cb:1c:c5:
                    0b:08:70:34:5b:12:34:d9:5a:5c:b0:75:ba:9f:cb:
                    e3:0f:34:71:d7:30:ab:2a:1d:4d:79:24:82:59:2a:
                    95:d3:98:61:e1:77:2c:32:7f:12:0b:e9:d7:d0:49:
                    e1:49:49:7a:9a:a7:96:da:e5:55:12:01:a6:d3:85:
                    3c:c5:b1:61:31:70:9b:5b:d2:b2:30:6a:09:4d:85:
                    83:b2:b3:96:55:4a:fb:20:23:e1:ac:f9:39:e2:b6:
                    24:d4:27:7c:bb:d4:d1:87:9e:8a:28:cb:27:60:1f:
                    fe:65:9b:e3:15:36:bc:dd:a3:b4:91:b3:26:33:27:
                    0d:da:a0:8d:48:a3:fb:a2:4b:12:12:2b:6e:c4:18:
                    d3:c1:dc:5d:33:ad:ec:16:95:51:96:30:f3:8f:74:
                    b7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2D:37:2D:78:B6:F4:49:AF:90:0A:4F:2E:03:61:C0:AD:3D:DC:0E
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f05::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:bb:dd:71:34:cc:b7:88:e0:f4:5a:c0:50:ab:f8:66:44:
         b6:c0:8d:05:9d:dc:d2:b1:0d:0b:1e:cc:88:ad:c0:bd:7f:9c:
         0a:2a:33:85:96:8d:cb:a6:cd:07:34:48:de:cc:e6:b5:a9:50:
         56:f1:e8:06:8b:a5:df:a2:9b:6c:7a:36:d3:40:71:8e:59:f7:
         77:50:f8:98:b5:dc:57:da:29:60:9c:ad:ee:13:ac:60:9c:0f:
         67:21:6d:f1:b0:56:f8:03:93:47:42:89:51:b7:a9:8f:48:51:
         75:fd:d0:c2:b9:23:87:98:80:c2:2c:44:00:f4:47:b4:df:21:
         bf:35:57:89:9f:6d:ab:b8:32:01:e7:da:ab:af:e2:41:ce:97:
         2d:a2:24:04:21:be:80:3e:83:1d:bf:f5:de:a4:b2:dd:37:ba:
         5b:42:df:a5:cc:8d:c1:dd:ec:de:bc:3b:68:c0:cc:c7:f6:79:
         b0:27:12:94:f8:9e:26:78:40:df:4f:cd:75:12:41:13:57:09:
         13:f3:04:9f:d8:a6:51:e0:f0:6d:3d:e8:81:a5:15:ce:4e:0b:
         ba:7e:84:f8:e0:cc:b9:4c:0c:c3:f7:bb:c6:d7:0e:e1:fa:ff:
         91:fe:c0:6a:a0:16:f9:a6:b5:08:f1:49:e3:4c:05:dd:a7:f0:
         07:90:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org