Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          miLU+WGs5x9jEuJ53T51f3jskDkVbeBtc8cOff8Hqxs=
Subject key identifier:   19:8F:2F:E8:0B:AA:60:1B:88:3B:EB:1D:5C:02:93:8C:33:01:AF:0A
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       10BBD86B2DD9B30A095BF0524881ED0EB0239413
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Wed 16 Oct 2024 13:45:23 +0000
ROA not before:           Wed 16 Oct 2024 13:40:23 +0000
ROA not after:            Wed 15 Oct 2025 13:45:23 +0000
asID:                     200775
IP address blocks:        2602:fafd:f0d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bb:d8:6b:2d:d9:b3:0a:09:5b:f0:52:48:81:ed:0e:b0:23:94:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 13:40:23 2024 GMT
            Not After : Oct 15 13:45:23 2025 GMT
        Subject: CN=198F2FE80BAA601B883BEB1D5C02938C3301AF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:00:75:29:11:17:04:dd:68:86:d4:55:7c:
                    10:1a:72:d3:1e:bb:83:b0:a1:53:d7:7c:91:a9:45:
                    4c:54:a6:72:62:0f:3a:35:02:c5:53:b8:ee:63:a7:
                    99:3c:b2:82:9a:d6:ef:c9:f0:2e:cb:3f:71:44:f9:
                    e7:b2:6e:38:14:28:0b:8e:eb:df:50:56:ef:6c:b7:
                    06:5f:48:22:eb:a8:95:ee:61:75:cc:4f:80:84:45:
                    f3:7a:3e:01:4e:58:4e:1b:50:13:9b:7c:ef:1f:b9:
                    d1:96:dc:f0:90:18:a7:33:5d:77:4b:5e:1e:f4:e0:
                    46:dd:94:7f:92:de:53:c4:17:34:db:7b:3e:98:a1:
                    9b:87:c1:dc:09:20:40:71:64:e1:c2:58:5f:d8:6c:
                    32:17:7d:ab:f6:39:86:d9:c0:6f:85:07:15:fa:a2:
                    70:9d:11:55:b0:d3:98:20:c7:ec:9f:f7:e3:79:7f:
                    74:7c:f5:bc:8c:43:01:8d:d2:fc:c7:4f:bb:58:81:
                    2b:48:f6:b9:39:f0:3b:61:61:bc:80:c6:b3:38:18:
                    0d:65:e3:9d:ed:de:4c:a5:4b:3b:08:7d:1d:18:d8:
                    6d:98:83:d6:97:3b:6e:8f:5f:5b:08:06:64:fc:85:
                    4f:6f:89:8b:ef:5d:54:8a:ae:2f:af:47:7e:f8:a9:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:2F:E8:0B:AA:60:1B:88:3B:EB:1D:5C:02:93:8C:33:01:AF:0A
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:98:4a:f0:c4:bd:18:ea:39:4d:48:d3:f6:33:3b:51:d3:7d:
         5f:82:36:8a:4f:b5:15:8a:1b:9b:ac:1a:64:a2:6e:ba:36:8c:
         09:f4:7a:ae:8f:5c:2a:4d:24:3f:9d:29:d4:3d:24:1f:9e:6d:
         29:80:c0:88:a6:0d:83:82:cc:b7:42:b5:5d:fe:f8:31:25:90:
         5c:2f:6e:d5:2d:31:fb:94:5d:ea:de:58:b1:45:d1:38:b1:7e:
         48:44:f1:50:a0:68:fd:ef:6d:c1:d9:47:43:f7:7f:8e:e3:4b:
         4c:3e:bd:ba:2a:21:40:31:92:fb:47:19:48:2f:d3:91:ab:2f:
         c5:f4:a0:55:f1:5d:1b:d2:00:9c:56:a8:7c:df:e6:8f:fc:ea:
         f1:c0:5e:23:f7:a6:3c:f7:ce:5a:24:a7:42:af:b5:7b:f5:63:
         85:69:4a:3f:ab:dd:10:a1:a6:94:ed:0e:9a:84:1a:3e:18:9d:
         86:94:3d:c4:c0:7c:53:25:ed:b3:44:55:80:9e:7b:dd:b8:ec:
         ef:72:a1:16:6e:b7:6b:90:1b:d6:89:fd:52:bd:4f:bf:02:e7:
         ad:e2:b2:03:97:8c:e3:1b:bc:23:11:6b:d8:bd:78:2d:ec:ad:
         b8:7a:43:a1:b6:ca:06:a2:f1:41:81:d8:eb:01:bf:6c:68:39:
         4d:13:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org