Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa
File:                     323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa (raw, json)
Hash identifier:          OK1lO2KTMv9Die6RToDX7jtmTTXKegaVFqWoGz7XwbI=
Subject key identifier:   78:41:D9:F1:8E:00:74:BF:EB:E3:E3:8D:CD:B2:68:6D:4C:6C:68:2B
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       0C0A4E5F2CACA01FA6A4DCD9CDB4362CCB5F01AC
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa
Signing time:             Wed 15 Nov 2023 12:11:40 +0000
ROA not before:           Wed 15 Nov 2023 12:06:40 +0000
ROA not after:            Wed 13 Nov 2024 12:11:40 +0000
asID:                     204268
IP address blocks:        2602:fafd:f09::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0a:4e:5f:2c:ac:a0:1f:a6:a4:dc:d9:cd:b4:36:2c:cb:5f:01:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:40 2023 GMT
            Not After : Nov 13 12:11:40 2024 GMT
        Subject: CN=7841D9F18E0074BFEBE3E38DCDB2686D4C6C682B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:9a:86:14:f2:6b:2b:64:5e:4b:f8:d0:52:
                    7f:48:d2:d5:81:a4:f1:db:9e:d6:d9:27:1a:c8:d5:
                    83:e8:bd:97:09:63:23:6f:c7:b6:4b:4a:35:c8:da:
                    1f:d2:f7:86:61:2e:57:c6:64:38:eb:29:96:6a:26:
                    9a:eb:56:15:58:f7:fe:b5:63:ba:0c:a6:24:98:5e:
                    00:0e:9e:f3:3c:7a:2a:a7:7c:c4:34:35:58:5b:a2:
                    ff:e9:2b:73:48:b7:57:6f:29:b7:76:26:59:1a:8f:
                    71:83:16:e7:8d:8d:a4:b3:4a:a4:2e:97:d3:2c:30:
                    31:7a:2c:ef:1e:ae:4f:29:49:de:b4:22:cc:eb:5d:
                    bd:d2:60:a0:d3:8d:3d:5d:79:10:8e:b4:d8:1e:52:
                    a0:a9:ed:54:14:ff:80:0d:c1:69:e5:32:ad:23:7a:
                    79:a3:11:6d:8e:38:0c:52:c6:66:b0:42:ec:5f:20:
                    2f:d3:55:04:11:ba:54:92:a8:05:78:b5:01:c8:8e:
                    f1:fb:a5:58:48:44:2f:78:f4:e1:7e:fc:ac:db:50:
                    45:c1:81:43:2a:c4:fb:09:71:79:9d:1c:df:dd:40:
                    67:14:86:af:27:e7:a3:01:34:1c:50:60:c8:97:7c:
                    98:7b:60:8c:e2:87:11:a1:ae:8c:82:e6:a9:d1:5f:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:41:D9:F1:8E:00:74:BF:EB:E3:E3:8D:CD:B2:68:6D:4C:6C:68:2B
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f09::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:88:e4:3f:d3:6e:1f:46:e8:c0:a9:05:39:38:54:f5:da:9e:
         d2:df:d2:47:f8:aa:b2:c7:16:13:5d:24:f4:a0:94:b7:f0:b4:
         94:dc:4b:60:cc:50:58:78:52:43:48:fd:16:4a:9a:0c:45:16:
         ce:8d:41:05:db:64:39:13:1a:cb:0f:46:2f:57:a8:5b:18:ba:
         d5:73:45:7d:a6:81:ca:8a:44:6f:2c:b4:b4:24:b4:d3:8c:ed:
         c1:11:91:54:29:1d:b0:6b:a2:d2:ff:e1:d3:b2:7d:c9:9a:7a:
         f0:6e:be:8a:e9:b2:f6:c7:d8:d3:0a:8f:5d:86:29:42:32:70:
         fc:5a:da:61:1b:dc:68:de:69:ce:80:cc:95:12:1d:5b:f2:c7:
         26:e5:31:21:98:9c:cc:53:77:d9:ce:8b:0e:2b:71:2c:f8:64:
         7a:19:26:5d:96:fd:b4:54:c9:28:34:fc:b6:c5:8a:fc:af:a4:
         35:bd:12:5c:52:87:5c:eb:22:bc:52:98:56:a0:22:1f:37:9c:
         95:ac:82:3c:0c:d1:e7:b4:1b:b4:93:15:c9:c9:f3:fc:d0:ac:
         66:57:6d:00:5a:ce:45:19:d5:4b:5b:ed:73:22:bb:04:03:1a:
         68:4f:8d:35:8c:5e:a3:14:b5:46:83:0a:8a:7f:f5:83:4f:bb:
         bf:88:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org