Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630623a3a2f34382d3438203d3e20323133303435.roa
File:                     323630323a666166643a6630623a3a2f34382d3438203d3e20323133303435.roa (raw, json)
Hash identifier:          Gc/JYVNW62qCjjfq9mHf4xsd53G1ZqV8ktezVB+wvL4=
Subject key identifier:   EE:A3:CA:66:95:45:C3:F3:27:99:CE:E1:5D:72:48:9D:F2:F0:A0:B3
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       2608AAE43365CE8FD2FF061620850C86BFA6DCD2
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630623a3a2f34382d3438203d3e20323133303435.roa
Signing time:             Wed 16 Oct 2024 12:45:22 +0000
ROA not before:           Wed 16 Oct 2024 12:40:22 +0000
ROA not after:            Wed 15 Oct 2025 12:45:22 +0000
asID:                     213045
IP address blocks:        2602:fafd:f0b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:08:aa:e4:33:65:ce:8f:d2:ff:06:16:20:85:0c:86:bf:a6:dc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 12:40:22 2024 GMT
            Not After : Oct 15 12:45:22 2025 GMT
        Subject: CN=EEA3CA669545C3F32799CEE15D72489DF2F0A0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:05:ef:5c:22:b7:4b:4b:85:0e:7e:50:41:18:
                    ee:98:fc:f5:5e:18:7e:79:39:a5:31:34:32:95:b3:
                    65:f6:f1:c5:61:dc:9b:7e:46:e3:46:db:da:80:96:
                    fd:a2:23:c9:50:8f:b9:53:20:d4:f5:04:b3:18:5b:
                    0f:75:54:06:63:00:7c:a8:0b:63:df:f0:07:35:5d:
                    9e:65:88:9a:70:49:4d:93:99:46:51:36:7c:5d:9b:
                    f6:51:6a:4f:75:64:d5:89:71:f9:55:a5:df:38:55:
                    11:b5:f7:12:2e:a0:93:88:3a:cd:fe:73:92:24:1e:
                    d7:48:14:0c:a2:20:08:f8:10:21:81:1a:df:e7:9f:
                    58:7e:d9:62:2b:13:eb:9b:e8:73:e0:07:65:4d:c5:
                    33:b8:08:35:24:29:00:bc:cd:7f:fa:cf:b3:af:3e:
                    27:91:2e:e2:05:bd:74:3e:c6:78:fe:37:e4:3c:55:
                    3d:5e:ca:ff:4a:bb:7d:34:d4:93:7b:ff:c3:9a:62:
                    27:b2:ce:6e:f6:01:5b:49:f0:4b:32:89:7c:15:20:
                    54:63:ab:ad:ee:42:36:57:87:01:b1:42:13:de:a1:
                    af:f6:74:ab:a2:07:77:ab:ec:97:e2:b2:2f:73:bc:
                    88:e2:0b:69:18:ea:fa:e6:96:c5:d1:8d:6e:04:39:
                    2a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A3:CA:66:95:45:C3:F3:27:99:CE:E1:5D:72:48:9D:F2:F0:A0:B3
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630623a3a2f34382d3438203d3e20323133303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:08:67:91:06:a7:08:6f:d7:e9:81:52:6f:ed:c2:27:78:a1:
         ab:34:19:be:5f:69:59:6c:f0:c0:d8:df:70:16:de:78:8b:e6:
         58:e5:2e:ec:90:bf:de:6d:3f:3a:ab:7a:8f:d5:9c:aa:e5:4e:
         73:58:c7:78:51:89:15:9b:0c:b1:63:59:0f:fb:e8:4f:84:49:
         9e:d2:95:85:1b:48:d3:c6:f7:66:5b:3a:a9:65:50:ec:bc:77:
         25:ec:ba:82:a4:aa:5d:1e:4d:01:c3:a2:48:42:ec:b0:3c:4c:
         b2:94:93:29:da:22:f1:c7:f5:a6:33:05:ba:4c:5b:a4:5f:2f:
         91:72:3b:29:7e:30:b2:14:9a:75:e1:c4:53:90:c5:4d:82:ff:
         e7:f2:d3:a3:3b:61:77:ad:5c:ea:c0:e0:cc:54:cd:a6:eb:93:
         90:13:ec:21:61:5d:f4:8f:03:dc:52:51:20:a6:d5:be:76:77:
         f7:cd:6a:df:db:d1:d5:86:88:cc:71:2a:34:ee:ec:a3:f8:b2:
         6d:6c:d7:4d:bd:d5:2d:f6:ea:cf:ff:22:ab:eb:57:4b:76:e1:
         b4:0e:45:ec:a3:34:57:b4:46:a8:47:f5:e1:4a:ac:80:51:9c:
         87:d0:f8:70:6e:e8:cb:85:d2:85:b2:45:a7:f9:b6:cf:78:51:
         91:ac:13:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:00 2024 by rpki-client on console-fra.rpki-client.org