Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          037cNRuffVP/m2rInymh7sx2qFLoH/Az4nKYhv7RW+Y=
Subject key identifier:   E1:88:0F:A7:9D:2E:76:63:21:2E:26:43:BF:1A:2F:E4:4E:43:08:D8
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       5D5DA76A35B3BC7C0F5CA0C44C28D2EDB4242132
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Wed 16 Oct 2024 13:45:23 +0000
ROA not before:           Wed 16 Oct 2024 13:40:23 +0000
ROA not after:            Wed 15 Oct 2025 13:45:23 +0000
asID:                     200775
IP address blocks:        2602:fafd:f0c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5d:a7:6a:35:b3:bc:7c:0f:5c:a0:c4:4c:28:d2:ed:b4:24:21:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 13:40:23 2024 GMT
            Not After : Oct 15 13:45:23 2025 GMT
        Subject: CN=E1880FA79D2E7663212E2643BF1A2FE44E4308D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:ac:0c:5a:d4:c5:8a:4d:43:39:9f:fe:a0:
                    2e:ef:0d:1f:36:15:7a:22:e2:25:81:a3:9e:2a:ce:
                    a2:f6:90:44:b2:48:76:bf:fe:96:7b:a2:8f:bb:8d:
                    68:85:44:c4:e6:69:a7:6c:e9:af:77:2d:ff:53:e8:
                    de:a0:a0:e6:b7:aa:db:e9:38:d4:40:ab:26:4b:7b:
                    50:2b:49:16:b3:c4:53:31:7a:e4:e2:4b:ab:a1:8b:
                    0d:28:0d:1c:ba:f2:cc:2f:22:a1:d1:e4:7a:4c:dc:
                    f8:6e:a2:85:90:24:f2:45:52:20:f0:36:50:db:c0:
                    1a:5c:1f:cd:b8:8d:37:bc:b7:c8:fa:08:af:a5:d5:
                    d8:00:fe:04:ab:7f:e9:72:87:4c:ba:b4:27:d5:c1:
                    24:42:22:6b:31:b1:8d:7c:54:8a:3c:d1:c5:97:5d:
                    54:b1:6c:b7:42:fc:45:e9:53:7d:d9:9d:cc:65:48:
                    81:4a:6e:2c:5c:25:47:f4:a7:ca:4f:63:79:b7:9a:
                    22:78:07:6a:f1:59:35:8e:af:66:f2:31:c6:51:ef:
                    77:9e:0c:da:cb:0d:63:da:2f:e6:6a:ae:da:50:0b:
                    0d:c6:21:bf:35:8e:28:75:14:df:ca:94:e4:b8:7e:
                    94:c8:a6:74:92:88:88:75:f5:05:a6:3d:7a:4e:39:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:88:0F:A7:9D:2E:76:63:21:2E:26:43:BF:1A:2F:E4:4E:43:08:D8
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:bd:ff:da:21:de:4a:03:f9:d4:bd:71:a5:36:8d:d3:09:61:
         8b:e5:a1:db:aa:99:a3:1d:ab:cf:f8:1f:46:30:50:0c:59:b1:
         b8:6a:f5:4b:60:43:57:2f:ed:3d:ca:4e:09:39:1f:af:a4:ec:
         4b:40:e6:df:77:a6:bf:78:7e:ea:03:0d:af:ed:85:bd:aa:ac:
         fd:75:67:50:6a:3a:a8:9b:ce:bc:2b:95:a1:79:5d:3d:3d:87:
         2d:a9:8a:e0:8c:2c:7d:8e:64:73:fc:27:0d:d6:f9:6f:30:09:
         ac:28:b0:52:20:c7:76:b3:99:82:96:c5:e5:64:56:d7:0c:a7:
         3f:0b:f9:55:21:80:85:aa:a7:16:97:44:2f:61:c0:26:4f:e6:
         b4:0b:74:c9:36:cf:e8:d6:46:7b:9b:5f:15:56:8e:01:39:48:
         2a:7c:96:a4:e2:1d:02:e5:73:db:07:da:54:15:22:6a:83:a5:
         0e:34:15:6e:b4:c4:d4:df:80:2c:76:45:69:7e:6b:7e:cc:f4:
         c3:62:48:69:bc:b2:aa:c9:21:68:3e:08:51:69:0c:43:70:ae:
         a1:5f:cd:78:fd:56:5e:25:ef:ef:b8:94:5d:55:57:3f:7a:66:
         55:51:59:03:77:f1:64:bf:0d:16:ee:a2:4f:af:de:92:24:ed:
         b8:72:d2:30
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUXV2najWzvHwPXKDETCjS7bQkITIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQxMDE2MTM0MDIzWhcNMjUxMDE1MTM0NTIz
WjAzMTEwLwYDVQQDEyhFMTg4MEZBNzlEMkU3NjYzMjEyRTI2NDNCRjFBMkZFNDRF
NDMwOEQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt6sDFrUxYpN
Qzmf/qAu7w0fNhV6IuIlgaOeKs6i9pBEskh2v/6We6KPu41ohUTE5mmnbOmvdy3/
U+jeoKDmt6rb6TjUQKsmS3tQK0kWs8RTMXrk4kuroYsNKA0cuvLMLyKh0eR6TNz4
bqKFkCTyRVIg8DZQ28AaXB/NuI03vLfI+givpdXYAP4Eq3/pcodMurQn1cEkQiJr
MbGNfFSKPNHFl11UsWy3QvxF6VN92Z3MZUiBSm4sXCVH9KfKT2N5t5oieAdq8Vk1
jq9m8jHGUe93ngzayw1j2i/maq7aUAsNxiG/NY4odRTfypTkuH6UyKZ0koiIdfUF
pj16Tjl8rQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFOGID6edLnZjIS4mQ78aL+RO
QwjYMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMwNjMzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzAzNzM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9Dwww
DQYJKoZIhvcNAQELBQADggEBADi9/9oh3koD+dS9caU2jdMJYYvloduqmaMdq8/4
H0YwUAxZsbhq9UtgQ1cv7T3KTgk5H6+k7EtA5t93pr94fuoDDa/thb2qrP11Z1Bq
OqibzrwrlaF5XT09hy2piuCMLH2OZHP8Jw3W+W8wCawosFIgx3azmYKWxeVkVtcM
pz8L+VUhgIWqpxaXRC9hwCZP5rQLdMk2z+jWRnubXxVWjgE5SCp8lqTiHQLlc9sH
2lQVImqDpQ40FW60xNTfgCx2RWl+a37M9MNiSGm8sqrJIWg+CFFpDENwrqFfzXj9
Vl4l7++4lF1VVz96ZlVRWQN38WS/DRbuok+v3pIk7bhy0jA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org