Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323033343538.roa
File:                     323630323a666166643a6630353a3a2f34382d3438203d3e20323033343538.roa (raw, json)
Hash identifier:          oe8j2gz40E/DdcpsEmz7ldMuOSl1OeWqEMMm+rv/Qdo=
Subject key identifier:   41:B0:93:3A:3C:34:33:A5:35:A6:CD:E0:66:EF:39:3F:9F:C6:0A:FC
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       3BA4CE7332793D5A6542977744D0108F6B3A3C02
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323033343538.roa
Signing time:             Wed 15 Nov 2023 12:11:39 +0000
ROA not before:           Wed 15 Nov 2023 12:06:39 +0000
ROA not after:            Wed 13 Nov 2024 12:11:39 +0000
asID:                     203458
IP address blocks:        2602:fafd:f05::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 10:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a4:ce:73:32:79:3d:5a:65:42:97:77:44:d0:10:8f:6b:3a:3c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:39 2023 GMT
            Not After : Nov 13 12:11:39 2024 GMT
        Subject: CN=41B0933A3C3433A535A6CDE066EF393F9FC60AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:f5:db:64:e2:d4:32:69:91:0e:7b:67:09:
                    5c:d2:91:2e:0a:cd:90:65:79:52:8b:63:60:2f:5f:
                    a7:45:ff:ab:f4:07:04:c9:64:7c:c7:58:7a:ef:d2:
                    c0:2a:7d:e0:9e:a2:47:c2:c8:c5:1b:e1:76:e3:53:
                    50:92:c4:0b:b3:e9:a2:33:fa:48:7a:59:f0:09:a1:
                    b3:e5:99:71:1c:29:fb:f4:46:73:f5:88:32:96:47:
                    6d:48:d3:4f:17:19:85:2d:45:d9:72:35:86:34:c7:
                    16:d2:bf:81:40:cb:5c:ea:b5:d1:03:a1:52:e0:15:
                    e2:5b:b8:82:ac:db:0e:73:0f:07:d4:a2:ec:ff:95:
                    68:7e:f4:5e:94:19:38:f4:1a:99:2c:29:74:e4:15:
                    fe:0f:a2:63:17:f8:64:99:72:31:21:c5:2f:a0:d9:
                    b3:25:97:36:6a:79:c1:dc:eb:9b:f6:5b:63:d6:a5:
                    27:5e:26:64:f5:42:a6:cb:78:51:1c:ab:e8:43:9e:
                    6a:25:03:1a:a8:83:ed:f6:f5:ec:63:3f:ea:55:35:
                    e2:a8:bd:b7:7b:75:6b:4f:fc:86:9e:79:aa:5a:1e:
                    53:c6:b6:ce:f5:b1:9c:04:31:fc:e7:f2:e7:fd:8c:
                    09:ed:9c:d4:38:72:12:ff:6c:ae:57:87:7c:c3:af:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B0:93:3A:3C:34:33:A5:35:A6:CD:E0:66:EF:39:3F:9F:C6:0A:FC
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323033343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f05::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:be:d2:d4:02:fb:45:2e:f8:70:89:5d:94:2f:80:d5:61:
         51:f9:ba:c9:67:01:58:87:7e:df:67:b9:45:6d:3d:5d:32:3b:
         0b:dd:87:73:0c:6e:d3:2b:29:33:b6:da:c5:b5:41:b6:db:f3:
         3e:97:4e:08:64:30:ba:10:63:9e:c2:9c:37:de:5b:cb:94:2d:
         f7:dc:e7:0a:1f:f1:30:66:72:ca:27:76:bd:1d:06:55:b2:d1:
         27:0b:ff:26:16:b0:2c:9d:84:f4:38:10:8f:7c:d1:6f:13:cb:
         8f:e8:6a:6e:14:3e:4a:33:bd:58:81:67:74:7f:1a:dc:c1:39:
         7c:31:86:ac:8a:8c:eb:77:c5:df:f8:16:20:24:f9:f6:a7:be:
         15:e3:8c:3f:a3:43:23:87:af:09:94:a7:ab:de:5b:75:45:1a:
         6d:41:25:1d:57:df:61:ef:56:ee:7f:a0:6c:3a:fe:5f:a0:aa:
         9b:69:3e:62:96:bc:08:82:3b:4e:5f:eb:69:11:50:40:c4:9f:
         1c:7e:8c:b2:8d:da:93:c7:03:61:ff:97:8a:92:07:6c:ce:be:
         ee:16:e5:7f:6f:e5:ad:7c:9a:a1:1b:08:a5:a3:81:21:5f:c1:
         05:be:ec:9d:52:67:6c:1a:a3:cb:96:85:a8:26:2a:af:d7:12:
         ca:32:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 07:15:46 2024 by rpki-client on console-ams.rpki-client.org