Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa
File:                     323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa (raw, json)
Hash identifier:          ZhJ8ix1gn2tHsn0inFme4JTqXJknd92WExtR9y1kWVY=
Subject key identifier:   20:5F:A7:C7:0C:98:9A:7E:9C:E8:E2:E4:13:D6:92:6B:89:A1:27:0E
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       5E0292A16838B101E0764917BDF99AAE15C7F751
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa
Signing time:             Wed 16 Oct 2024 12:45:22 +0000
ROA not before:           Wed 16 Oct 2024 12:40:22 +0000
ROA not after:            Wed 15 Oct 2025 12:45:22 +0000
asID:                     202952
IP address blocks:        2602:fafd:f06::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 06:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:02:92:a1:68:38:b1:01:e0:76:49:17:bd:f9:9a:ae:15:c7:f7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 12:40:22 2024 GMT
            Not After : Oct 15 12:45:22 2025 GMT
        Subject: CN=205FA7C70C989A7E9CE8E2E413D6926B89A1270E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9e:fd:8e:1d:76:62:ec:10:7d:01:1f:2d:f8:
                    9b:97:5f:61:8c:c2:82:9e:fd:fd:90:6b:05:e0:b3:
                    f5:11:0b:34:6a:d4:a9:46:f6:71:48:43:cd:a8:fc:
                    ed:6f:9d:40:40:b7:65:6e:8b:bf:3f:87:ad:25:1e:
                    39:b7:57:00:6f:dd:9a:4b:aa:34:bd:ab:cd:b2:82:
                    6f:6e:1b:d3:85:03:b3:e4:f0:6c:80:75:bf:1d:fc:
                    2f:8c:54:b7:ad:b0:49:ab:2d:33:3b:e4:b5:3d:0b:
                    9d:2f:32:f4:8e:72:83:93:ba:66:33:95:3d:0e:d2:
                    c4:e9:02:0a:0e:b1:8f:6d:b1:ff:d2:a6:e8:9e:f5:
                    0f:22:a0:d6:4a:0e:74:e6:08:c6:ec:45:5d:41:e8:
                    97:3a:be:a4:11:80:40:4c:89:80:2e:e5:64:7f:e0:
                    c7:ab:b1:c5:1a:ac:1c:69:da:ef:40:70:f2:9b:b7:
                    10:38:c5:34:38:02:d4:5d:69:81:4a:f4:88:03:06:
                    20:be:ad:1e:ca:b0:07:68:e4:54:42:88:b2:36:f1:
                    d0:e6:8f:eb:f8:a1:65:83:a9:82:03:3e:8f:d6:79:
                    d1:bb:2a:b6:c8:07:7f:94:b8:0f:55:e9:97:7a:92:
                    5b:06:76:e2:3a:45:37:93:51:7b:98:b6:e8:93:a1:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:A7:C7:0C:98:9A:7E:9C:E8:E2:E4:13:D6:92:6B:89:A1:27:0E
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f06::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:d8:7c:34:7d:96:e5:7d:ff:a3:f1:c2:24:53:52:84:97:d7:
         06:9c:f3:a7:40:7e:97:5d:6e:ab:b5:98:b3:ee:47:94:6a:7e:
         8e:8e:e0:ce:34:35:88:85:60:35:c3:f3:23:3e:97:88:53:ac:
         fa:b0:1e:c3:35:91:3b:4e:8f:e2:a9:80:ec:08:b2:56:53:a1:
         da:18:b5:9f:ce:64:51:20:0b:cb:36:d2:30:26:04:bf:cf:b2:
         4f:0d:a5:fe:58:22:c4:6b:e9:b5:7a:58:8f:b9:31:25:31:b6:
         8e:16:36:d9:3d:71:59:7a:54:3f:0d:e3:58:63:7b:82:e9:df:
         55:b4:62:70:d5:ad:ce:48:23:ba:50:c3:8d:c4:b7:dc:1d:64:
         2c:f0:d7:28:c5:06:00:5b:e1:d8:05:29:30:54:20:7b:eb:79:
         bd:63:fd:87:1e:97:e6:29:82:da:12:17:6a:e3:bf:db:7c:c7:
         63:46:a9:bb:f3:c5:50:42:7d:4c:ec:78:c8:cf:17:2c:54:0f:
         bc:8e:75:56:9c:25:fd:6d:11:00:71:65:06:20:6d:5b:64:20:
         38:d6:94:c9:3d:8b:2c:04:33:e9:21:05:15:0e:28:94:de:68:
         58:fd:46:95:87:22:82:fb:2d:18:54:42:ed:3e:be:67:a2:90:
         4d:e8:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:41 2025 by rpki-client