Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa
File:                     323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa (raw, json)
Hash identifier:          v7ibvO++pwy3EoXh9aNyB1X9J5Sq/IUFtU8QrSVhEGg=
Subject key identifier:   3B:C9:E9:B4:82:00:3D:B7:7A:D1:5A:45:67:6D:24:96:42:45:58:42
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       7DB91A2FD5A8F94F6BDC23652F803C3B0ECAF7AB
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa
Signing time:             Wed 15 Nov 2023 12:11:39 +0000
ROA not before:           Wed 15 Nov 2023 12:06:39 +0000
ROA not after:            Wed 13 Nov 2024 12:11:39 +0000
asID:                     202952
IP address blocks:        2602:fafd:f06::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b9:1a:2f:d5:a8:f9:4f:6b:dc:23:65:2f:80:3c:3b:0e:ca:f7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:39 2023 GMT
            Not After : Nov 13 12:11:39 2024 GMT
        Subject: CN=3BC9E9B482003DB77AD15A45676D249642455842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b5:1f:88:b6:4f:a8:9a:be:29:22:37:87:9e:
                    25:2a:42:8f:4b:7a:a0:e4:68:81:da:28:fb:2f:a9:
                    ab:a3:9b:0b:51:7d:d9:4c:5c:e1:43:00:75:d6:d1:
                    c1:a0:9a:e3:7b:2c:05:94:79:b2:50:ab:39:38:d2:
                    14:97:d8:41:c4:d8:cf:44:ca:a8:c9:24:8d:e6:e4:
                    bb:07:47:77:c5:4f:11:ee:d0:50:8d:00:5a:a4:b0:
                    76:9a:bd:dc:cc:01:39:13:97:2b:6f:0b:c0:2f:5d:
                    89:93:db:e2:dd:8f:37:9d:5f:ed:4e:34:1e:ba:e4:
                    dd:32:b2:8f:85:30:5a:ef:27:b4:ef:ca:36:54:cb:
                    ce:d5:70:7f:a3:a6:5f:be:dc:11:19:e0:57:19:8b:
                    58:9a:4c:be:19:05:df:f6:24:fb:e7:88:7c:87:e8:
                    7e:6b:b5:ad:ce:40:1c:94:1d:60:9d:97:fd:bb:5a:
                    f4:01:e9:d8:fd:8b:c9:44:4a:fc:cf:06:56:17:bc:
                    e8:dc:ef:6c:fd:dc:67:2d:3b:c4:7c:c6:83:f0:11:
                    95:1d:13:c1:3c:f2:79:b4:e7:42:27:c7:9c:9f:7d:
                    53:2e:5d:45:fe:9d:e4:a2:e6:5c:c3:fd:74:d8:1f:
                    d7:42:b6:d0:28:2e:07:e5:ec:e0:9f:dc:6a:b9:98:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:E9:B4:82:00:3D:B7:7A:D1:5A:45:67:6D:24:96:42:45:58:42
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f06::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:84:e0:e2:85:15:77:6d:a2:53:03:71:b2:6d:af:77:83:73:
         2d:10:0c:92:d4:0b:67:80:53:be:56:ce:c1:22:40:b3:77:ad:
         9f:7a:de:6d:f3:2d:3e:37:b5:b2:f8:7a:0e:ba:5d:21:73:e4:
         10:28:e7:f9:20:42:f2:c0:c5:bd:df:cd:8c:ae:84:a0:25:d4:
         7c:5e:07:9d:2f:ee:96:75:25:42:bf:8f:12:e8:97:f9:b4:70:
         3c:2d:2b:1e:5c:76:af:5a:dc:74:1b:c1:6d:2a:f9:03:3c:27:
         52:22:13:ae:14:42:90:36:fd:63:d3:89:4d:2a:c5:ba:d6:5b:
         47:56:06:fb:73:97:e0:8f:59:84:98:1d:38:09:5d:b3:1f:e7:
         99:df:37:f5:79:b2:d9:d1:2f:8d:13:d8:15:7b:de:11:98:09:
         7c:03:e9:c0:73:2f:ff:08:9c:06:4a:f6:76:a9:b8:44:5c:1d:
         ac:96:3e:31:1f:a7:c6:06:ce:33:4c:e3:2e:a5:10:db:2f:25:
         5c:2a:48:69:e7:e9:b8:f8:75:04:37:72:1a:ae:80:7c:7f:68:
         c6:3c:3f:0a:d1:aa:6a:e6:11:2d:6b:9d:14:2b:5d:70:6f:b8:
         3e:66:7f:40:9e:84:9b:a7:78:39:ad:73:a8:2a:26:92:c3:d1:
         37:17:2a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org