Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6631323a3a2f34382d3438203d3e20323032383238.roa
File:                     323630323a666166643a6631323a3a2f34382d3438203d3e20323032383238.roa (raw, json)
Hash identifier:          FsyLaeBMd4FbL4yhoZ69gaxaiq3nlkbAER1Hw9Ams6U=
Subject key identifier:   96:E5:FD:59:48:55:5D:5F:7A:6B:30:81:1C:F4:32:95:FF:B0:3B:FD
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       131BD46C0F24E85557D4193FF69F781C49AF349F
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6631323a3a2f34382d3438203d3e20323032383238.roa
Signing time:             Fri 23 Feb 2024 06:58:04 +0000
ROA not before:           Fri 23 Feb 2024 06:53:04 +0000
ROA not after:            Fri 21 Feb 2025 06:58:04 +0000
asID:                     202828
IP address blocks:        2602:fafd:f12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1b:d4:6c:0f:24:e8:55:57:d4:19:3f:f6:9f:78:1c:49:af:34:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Feb 23 06:53:04 2024 GMT
            Not After : Feb 21 06:58:04 2025 GMT
        Subject: CN=96E5FD5948555D5F7A6B30811CF43295FFB03BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:e6:df:17:fc:50:72:92:7c:c4:78:f2:74:
                    47:d7:43:e2:f7:85:05:3e:23:c7:48:de:66:b6:ed:
                    c0:f4:52:db:ba:b0:5e:d2:09:26:11:55:ee:21:a2:
                    63:35:6b:85:a0:f0:c3:2d:e1:d6:62:3b:f4:f9:d9:
                    a5:6b:9c:d6:7a:f7:3d:c5:ec:37:62:97:a1:30:a3:
                    85:a4:e1:49:f6:6a:08:98:02:ef:6d:74:fd:d5:3f:
                    64:01:3e:03:59:71:6e:e7:45:7a:77:27:71:01:36:
                    54:9d:c4:3d:7a:21:21:b6:f9:9a:a2:71:19:71:a8:
                    fd:2f:92:02:7f:d4:bd:1c:02:d3:0d:d0:06:d4:3f:
                    1f:ac:35:d2:17:05:52:8c:9f:40:f4:0f:eb:d9:55:
                    65:97:e0:1a:89:02:cb:f3:5b:b9:50:76:e6:48:9c:
                    91:df:29:f5:02:a8:fc:7a:b4:b7:a1:ee:40:cd:9a:
                    23:56:48:59:07:60:bc:d2:ab:41:91:03:42:4a:3a:
                    43:38:f8:7b:d8:71:42:42:ba:ae:6b:f0:d7:51:47:
                    b2:72:7e:4a:f2:35:8e:4f:aa:c5:29:34:40:b4:74:
                    89:4b:b0:07:e6:8b:ff:29:e7:e8:b1:d3:9e:04:09:
                    10:00:94:81:29:88:cd:e9:fc:7f:92:e0:b6:f4:22:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E5:FD:59:48:55:5D:5F:7A:6B:30:81:1C:F4:32:95:FF:B0:3B:FD
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6631323a3a2f34382d3438203d3e20323032383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f12::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:d6:97:bf:c3:d9:40:3b:fa:1d:14:a1:84:f1:36:8a:9e:
         42:f9:87:66:32:8b:a9:a7:84:81:f5:f4:f6:59:a5:43:a6:95:
         3d:02:25:2e:da:63:86:9e:a4:a3:03:ec:85:cc:1f:80:a9:24:
         ec:55:71:8f:27:82:1e:06:f8:92:ad:ab:f7:49:41:ae:a4:90:
         5e:fc:16:0a:3f:8e:e0:1d:8d:3a:b2:71:e7:bd:8b:55:41:22:
         30:e4:e7:5b:5a:4c:db:57:10:82:43:7f:2d:3d:01:e3:a8:a3:
         d8:34:72:1c:69:63:36:30:c2:24:57:8f:89:92:19:aa:b1:56:
         63:27:b8:87:93:e1:84:59:0d:d6:47:8e:22:61:dd:fa:45:ac:
         25:cb:0f:74:2a:96:31:71:e1:d8:ac:1f:90:26:cf:44:67:9e:
         9f:ee:50:19:f0:82:e4:a6:98:9a:f7:50:3b:0e:3e:da:48:00:
         0c:8d:1a:a3:45:29:99:a4:1e:7b:cc:34:8e:bb:88:23:9b:3e:
         c4:a5:45:68:4f:a8:ee:6f:6e:2a:f6:b1:3e:84:16:96:3b:b4:
         30:e5:bc:a5:5d:32:ba:e4:3c:e7:14:92:d9:ff:98:35:8c:0b:
         45:13:e3:9a:a5:d8:a0:36:e1:7d:da:cc:f5:e6:87:18:72:d6:
         97:94:4b:f1
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUExvUbA8k6FVX1Bk/9p94HEmvNJ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQwMjIzMDY1MzA0WhcNMjUwMjIxMDY1ODA0
WjAzMTEwLwYDVQQDEyg5NkU1RkQ1OTQ4NTU1RDVGN0E2QjMwODExQ0Y0MzI5NUZG
QjAzQkZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXTm3xf8UHKS
fMR48nRH10Pi94UFPiPHSN5mtu3A9FLburBe0gkmEVXuIaJjNWuFoPDDLeHWYjv0
+dmla5zWevc9xew3YpehMKOFpOFJ9moImALvbXT91T9kAT4DWXFu50V6dydxATZU
ncQ9eiEhtvmaonEZcaj9L5ICf9S9HALTDdAG1D8frDXSFwVSjJ9A9A/r2VVll+Aa
iQLL81u5UHbmSJyR3yn1Aqj8erS3oe5AzZojVkhZB2C80qtBkQNCSjpDOPh72HFC
Qrqua/DXUUeycn5K8jWOT6rFKTRAtHSJS7AH5ov/KefosdOeBAkQAJSBKYjN6fx/
kuC29CL6eQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFJbl/VlIVV1femswgRz0MpX/
sDv9MB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMxMzIzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzIzODMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9DxIw
DQYJKoZIhvcNAQELBQADggEBAA1L1pe/w9lAO/odFKGE8TaKnkL5h2Yyi6mnhIH1
9PZZpUOmlT0CJS7aY4aepKMD7IXMH4CpJOxVcY8ngh4G+JKtq/dJQa6kkF78Fgo/
juAdjTqycee9i1VBIjDk51taTNtXEIJDfy09AeOoo9g0chxpYzYwwiRXj4mSGaqx
VmMnuIeT4YRZDdZHjiJh3fpFrCXLD3QqljFx4disH5Amz0Rnnp/uUBnwguSmmJr3
UDsOPtpIAAyNGqNFKZmkHnvMNI67iCObPsSlRWhPqO5vbir2sT6EFpY7tDDlvKVd
MrrkPOcUktn/mDWMC0UT45ql2KA24X3azPXmhxhy1peUS/E=
-----END CERTIFICATE-----
Generated at Mon Nov 25 06:02:38 2024 by rpki-client on console-ams.rpki-client.org