Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa
File:                     323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa (raw, json)
Hash identifier:          dTKX+t5eMS91CX5RLRNQfNHILLwVRV5SfstET6b1A94=
Subject key identifier:   E7:73:FC:91:2B:DB:7A:5D:CD:AA:1C:9C:C0:03:5C:AB:77:DA:A6:6D
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       550F7299BEEF2DF0450253AEC0D1E5E94F871763
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa
Signing time:             Wed 16 Oct 2024 12:45:22 +0000
ROA not before:           Wed 16 Oct 2024 12:40:22 +0000
ROA not after:            Wed 15 Oct 2025 12:45:22 +0000
asID:                     204268
IP address blocks:        2602:fafd:f09::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0f:72:99:be:ef:2d:f0:45:02:53:ae:c0:d1:e5:e9:4f:87:17:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 12:40:22 2024 GMT
            Not After : Oct 15 12:45:22 2025 GMT
        Subject: CN=E773FC912BDB7A5DCDAA1C9CC0035CAB77DAA66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:4b:ae:0e:d1:bf:88:b7:ed:3f:a7:30:79:
                    f7:7b:24:a2:96:1c:86:25:5a:ee:7a:6a:40:97:cb:
                    1f:ce:fb:91:53:e2:5c:5d:8f:bf:d2:24:1c:df:88:
                    5e:2a:65:85:59:b9:75:2b:8f:d5:97:14:ba:72:53:
                    e5:66:d9:6f:1f:e0:10:20:76:f4:da:54:20:fd:08:
                    57:d3:d8:1c:44:d9:8c:b1:12:10:9b:32:2d:a4:59:
                    2a:52:74:31:e1:00:6c:88:17:c6:20:f1:1c:0c:38:
                    8d:fa:ed:f8:b7:0a:d3:73:98:4a:e0:82:bd:0c:3e:
                    b0:20:26:f3:7c:18:90:e7:04:42:e7:f4:d2:57:cb:
                    66:0e:17:96:2b:49:05:56:d7:ae:5b:4b:1e:be:6d:
                    a0:39:9f:b4:e1:bb:2f:e8:87:7d:72:0a:e5:dc:04:
                    5a:cd:7e:4f:9b:8e:4a:77:63:91:2a:03:75:33:8f:
                    2e:07:c3:69:d8:56:c0:f7:db:5a:7d:ec:c4:56:40:
                    02:57:87:2e:53:d1:aa:1f:3a:c1:86:94:5f:d0:19:
                    f9:b0:2f:7d:5a:e9:a5:c2:db:b1:eb:11:65:08:81:
                    5b:e0:f1:fa:30:60:9f:27:43:6f:d6:b1:c8:df:90:
                    79:f5:de:41:07:41:73:14:04:5b:88:59:24:ab:f4:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:FC:91:2B:DB:7A:5D:CD:AA:1C:9C:C0:03:5C:AB:77:DA:A6:6D
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f09::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:b9:34:d3:11:4d:48:08:9f:26:9e:d5:df:3a:30:8f:5a:
         26:14:04:f7:b2:8f:80:dd:0d:3a:4f:7c:82:f7:b8:2f:1a:14:
         9c:b0:21:ec:1a:d4:e7:3b:92:67:7d:6a:3d:d4:16:2c:0c:06:
         f9:28:7a:f3:de:1f:6d:9c:c6:6b:e9:a7:33:29:f2:50:b3:40:
         bb:a0:5c:93:f6:ea:ee:52:42:b1:42:8c:ac:74:f5:b5:22:00:
         09:78:d5:8b:80:25:f6:69:46:42:4b:dd:bc:0c:aa:a7:7e:82:
         c6:cc:a7:90:30:b8:5a:35:23:82:b8:5d:19:7f:b7:94:b4:f1:
         dc:fc:80:5a:3b:d6:74:26:2b:80:8b:23:0e:93:15:8b:66:ab:
         ae:3b:64:bf:96:ff:7b:1e:ca:28:3f:f9:c7:fa:39:bc:3d:9a:
         3b:e4:36:db:78:b8:12:cb:69:15:cf:d0:c9:d3:5e:05:9a:b0:
         62:9a:fc:98:46:f0:05:9e:0e:28:0e:3b:f9:b7:20:d6:42:c7:
         d8:dc:d3:2c:22:5e:38:1f:d1:73:32:5b:c4:07:94:70:5c:d3:
         8f:55:79:0f:f4:e0:36:51:85:11:16:e6:74:06:92:5a:20:4c:
         fe:a1:59:36:f1:56:14:32:35:ab:cd:e5:3f:80:04:2c:e3:28:
         b8:e5:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org