Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630623a3a2f34382d3438203d3e20323133303435.roa
File:                     323630323a666166643a6630623a3a2f34382d3438203d3e20323133303435.roa (raw, json)
Hash identifier:          BBIkJwv45I/cFyxOjGVD72TEw7jDcm1OeM99uASA7h8=
Subject key identifier:   3B:C9:89:C7:14:87:33:19:5C:4E:3F:53:DC:27:02:84:93:E0:CE:4C
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       71AD9AD36EB323F4507DFD9571FF6D60AF42E871
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630623a3a2f34382d3438203d3e20323133303435.roa
Signing time:             Wed 15 Nov 2023 12:11:39 +0000
ROA not before:           Wed 15 Nov 2023 12:06:39 +0000
ROA not after:            Wed 13 Nov 2024 12:11:39 +0000
asID:                     213045
IP address blocks:        2602:fafd:f0b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ad:9a:d3:6e:b3:23:f4:50:7d:fd:95:71:ff:6d:60:af:42:e8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:39 2023 GMT
            Not After : Nov 13 12:11:39 2024 GMT
        Subject: CN=3BC989C7148733195C4E3F53DC27028493E0CE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2d:aa:fa:65:51:28:96:17:2c:18:2c:8b:dc:
                    f9:4b:71:30:eb:6a:c1:1e:a2:79:45:4a:ff:ae:50:
                    95:6c:f2:bf:9b:7a:11:52:3b:d7:c0:f9:69:93:92:
                    5b:46:4a:51:3e:97:a0:63:dc:d5:0b:92:6c:fa:f7:
                    3e:27:48:cd:09:de:6f:30:ed:be:96:b1:1b:e8:39:
                    13:2e:18:16:58:3e:3e:f3:d6:47:0b:d1:59:e5:a1:
                    73:ca:68:cb:a8:da:63:5e:04:05:9b:31:f8:c0:e1:
                    a3:fd:4e:ae:ca:4a:e5:dc:69:b7:00:fd:c9:b0:f0:
                    96:4c:59:ce:dd:9d:69:cf:da:19:e0:62:9f:6b:b4:
                    48:03:07:7b:af:6e:67:5d:4d:c4:2a:a4:f9:e3:5e:
                    dc:09:00:27:02:a2:49:5e:c6:56:f5:b4:cc:17:62:
                    2c:88:01:de:2a:d3:48:d0:6f:99:c6:31:19:9e:76:
                    4e:3c:dd:9d:ba:e6:93:ea:37:f9:e2:c1:ff:b4:57:
                    3c:e2:c2:d1:ab:5a:90:21:3c:97:1d:51:b9:e3:b0:
                    65:86:1c:b3:11:e5:f6:2b:e5:d8:8c:93:74:b4:8c:
                    3e:ca:05:42:8d:4a:cb:ce:fb:eb:07:4f:b4:b8:fd:
                    62:37:26:ac:a8:dd:49:ea:76:43:6d:77:29:c7:82:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:89:C7:14:87:33:19:5C:4E:3F:53:DC:27:02:84:93:E0:CE:4C
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630623a3a2f34382d3438203d3e20323133303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:e0:fc:3c:9b:af:97:e6:19:a9:cd:51:92:c1:d3:31:a5:
         7c:e8:4b:0e:64:0e:3c:fa:a3:0a:65:7b:55:0d:d1:47:d2:e6:
         ec:c1:f4:c6:51:12:0c:dd:15:fc:b3:73:78:0c:5a:87:a7:7e:
         db:d3:56:b7:cd:10:4d:a3:b0:67:a5:a0:5f:52:27:db:56:13:
         4c:fd:73:f9:83:c2:ba:c1:55:52:e1:92:bc:42:a4:4e:0e:74:
         6f:ef:1e:21:81:a1:ae:bf:75:f6:42:f3:08:24:f0:e2:eb:fa:
         81:a7:ba:f3:b2:f0:f6:5c:a3:55:5f:cf:c6:cc:d8:36:3f:f2:
         48:cd:3e:14:4c:88:09:9a:f5:33:5f:93:82:4c:93:f0:52:d0:
         d4:b8:91:b8:8b:3c:aa:f5:4e:a7:04:15:b8:78:bf:1f:bf:d5:
         79:aa:d2:75:62:66:a5:8b:62:73:95:81:eb:a2:b9:5b:b6:a7:
         9c:fb:12:63:1e:b5:65:08:d7:37:50:9e:04:3b:b0:5b:5a:58:
         c6:7d:d3:b4:a8:d2:9e:bc:78:33:54:05:5a:07:31:0a:6e:8e:
         ca:4e:ea:a3:70:78:93:02:a3:1b:40:92:b7:10:b9:2d:92:7b:
         6c:49:25:43:52:c8:57:df:e8:89:46:22:5c:28:2d:5c:17:81:
         41:89:de:a4
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUca2a026zI/RQff2Vcf9tYK9C6HEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjMxMTE1MTIwNjM5WhcNMjQxMTEzMTIxMTM5
WjAzMTEwLwYDVQQDEygzQkM5ODlDNzE0ODczMzE5NUM0RTNGNTNEQzI3MDI4NDkz
RTBDRTRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S2q+mVRKJYX
LBgsi9z5S3Ew62rBHqJ5RUr/rlCVbPK/m3oRUjvXwPlpk5JbRkpRPpegY9zVC5Js
+vc+J0jNCd5vMO2+lrEb6DkTLhgWWD4+89ZHC9FZ5aFzymjLqNpjXgQFmzH4wOGj
/U6uykrl3Gm3AP3JsPCWTFnO3Z1pz9oZ4GKfa7RIAwd7r25nXU3EKqT5417cCQAn
AqJJXsZW9bTMF2IsiAHeKtNI0G+ZxjEZnnZOPN2duuaT6jf54sH/tFc84sLRq1qQ
ITyXHVG547BlhhyzEeX2K+XYjJN0tIw+ygVCjUrLzvvrB0+0uP1iNyasqN1J6nZD
bXcpx4I55QIDAQABo4ICjzCCAoswHQYDVR0OBBYEFDvJiccUhzMZXE4/U9wnAoST
4M5MMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMwNjIzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMxMzMzMDM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9Dwsw
DQYJKoZIhvcNAQELBQADggEBACty4Pw8m6+X5hmpzVGSwdMxpXzoSw5kDjz6owpl
e1UN0UfS5uzB9MZREgzdFfyzc3gMWoenftvTVrfNEE2jsGeloF9SJ9tWE0z9c/mD
wrrBVVLhkrxCpE4OdG/vHiGBoa6/dfZC8wgk8OLr+oGnuvOy8PZco1Vfz8bM2DY/
8kjNPhRMiAma9TNfk4JMk/BS0NS4kbiLPKr1TqcEFbh4vx+/1Xmq0nViZqWLYnOV
geuiuVu2p5z7EmMetWUI1zdQngQ7sFtaWMZ907So0p68eDNUBVoHMQpujspO6qNw
eJMCoxtAkrcQuS2Se2xJJUNSyFff6IlGIlwoLVwXgUGJ3qQ=
-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org