Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6632303a3a2f34342d3438203d3e20313939393732.roa
File:                     323630323a666166643a6632303a3a2f34342d3438203d3e20313939393732.roa (raw, json)
Hash identifier:          C7lyUTVwKw9hxxOU428Entpkg7GNbpORR6MZdYzGASs=
Subject key identifier:   3F:71:CE:BF:90:B0:42:F1:BF:AF:A2:97:8F:99:BA:F6:3D:30:6E:D9
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       606DAB12B727A937DC302750A6B0A386EB5B856D
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6632303a3a2f34342d3438203d3e20313939393732.roa
Signing time:             Thu 11 Jan 2024 11:37:31 +0000
ROA not before:           Thu 11 Jan 2024 11:32:31 +0000
ROA not after:            Thu 09 Jan 2025 11:37:31 +0000
asID:                     199972
IP address blocks:        2602:fafd:f20::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6d:ab:12:b7:27:a9:37:dc:30:27:50:a6:b0:a3:86:eb:5b:85:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jan 11 11:32:31 2024 GMT
            Not After : Jan  9 11:37:31 2025 GMT
        Subject: CN=3F71CEBF90B042F1BFAFA2978F99BAF63D306ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:a3:96:44:66:8d:3e:41:41:27:31:f3:b5:
                    dc:50:74:2f:f3:40:2b:4b:b1:5c:9c:b1:a4:b5:42:
                    ca:fe:fb:41:8f:a6:69:55:eb:92:76:dd:2f:ff:6a:
                    da:f0:97:b0:ba:d2:b6:27:48:ce:9c:6f:f8:cd:ad:
                    56:e3:5b:c8:78:4a:24:a0:77:30:d7:9b:03:97:63:
                    e4:9a:84:38:f1:42:16:4a:0e:16:66:81:8b:75:a3:
                    62:d2:0a:24:6b:6d:55:38:fe:4d:4c:cc:4a:a7:df:
                    6e:9d:3e:77:52:a5:2f:30:df:6d:4a:ec:20:55:02:
                    ae:65:1a:5b:5c:cd:99:3f:50:36:b1:81:8c:86:b3:
                    19:04:66:e7:c2:7a:e0:bd:45:e5:64:23:78:91:ab:
                    38:ba:1c:8d:03:7b:76:80:2f:52:a1:d6:24:e8:cb:
                    9e:47:69:a3:20:81:be:aa:d8:7e:ac:d0:77:f9:eb:
                    26:36:d1:b6:76:2f:22:37:2e:e4:35:2f:68:c1:e4:
                    e6:f0:0b:e9:c4:24:11:d8:72:a4:e4:b4:ef:df:11:
                    6f:dc:a2:26:ec:4d:dc:63:22:47:82:d9:77:b2:38:
                    52:af:ce:fd:11:05:45:9c:ce:1f:15:00:ee:94:f3:
                    7e:71:29:3b:8e:ba:51:c3:61:16:d5:c2:4a:0d:d6:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:71:CE:BF:90:B0:42:F1:BF:AF:A2:97:8F:99:BA:F6:3D:30:6E:D9
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6632303a3a2f34342d3438203d3e20313939393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f20::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:37:d7:90:34:5f:7b:72:48:aa:18:fd:56:2f:63:39:23:
         c8:10:20:a4:13:27:7d:1d:c7:f3:79:b0:c4:a3:89:63:36:68:
         37:be:03:48:cf:a5:dd:07:7a:fd:e5:6a:34:1c:55:7b:55:de:
         85:dd:31:12:0b:02:1a:85:78:00:0c:be:ce:f0:38:a7:1b:87:
         31:b7:c9:b2:61:31:9f:dc:c8:fc:63:4b:29:b9:c3:54:75:d2:
         19:4d:8d:19:5e:bc:86:0b:e8:dd:91:b4:c9:2e:8c:82:69:97:
         bb:c9:23:22:bc:1a:53:0f:7c:71:bf:0a:34:25:8c:d8:da:79:
         56:06:5a:db:2f:6e:f0:86:1c:ca:52:4f:34:a2:7b:2c:f9:cb:
         20:8a:5a:13:6b:c8:16:3e:1e:dd:d0:43:7e:3f:81:57:ed:29:
         5f:00:45:8b:d8:f9:6d:70:6f:f7:4b:87:fc:d1:93:70:03:51:
         08:0a:68:15:7c:37:e9:0d:c6:f5:68:a6:26:db:14:ea:e6:14:
         b1:7c:ea:7c:01:04:54:79:4e:19:1d:1f:73:99:5f:0c:e2:dd:
         13:d6:ac:88:b3:63:2d:f8:a6:32:6e:ed:55:7b:39:74:4d:51:
         0f:f6:92:0e:c4:10:62:3d:28:7a:7b:36:7e:b6:b8:43:9b:f9:
         36:81:a7:5a
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUYG2rErcnqTfcMCdQprCjhutbhW0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQwMTExMTEzMjMxWhcNMjUwMTA5MTEzNzMx
WjAzMTEwLwYDVQQDEygzRjcxQ0VCRjkwQjA0MkYxQkZBRkEyOTc4Rjk5QkFGNjNE
MzA2RUQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxKjlkRmjT5B
QScx87XcUHQv80ArS7FcnLGktULK/vtBj6ZpVeuSdt0v/2ra8JewutK2J0jOnG/4
za1W41vIeEokoHcw15sDl2PkmoQ48UIWSg4WZoGLdaNi0goka21VOP5NTMxKp99u
nT53UqUvMN9tSuwgVQKuZRpbXM2ZP1A2sYGMhrMZBGbnwnrgvUXlZCN4kas4uhyN
A3t2gC9SodYk6MueR2mjIIG+qth+rNB3+esmNtG2di8iNy7kNS9oweTm8AvpxCQR
2HKk5LTv3xFv3KIm7E3cYyJHgtl3sjhSr879EQVFnM4fFQDulPN+cSk7jrpRw2EW
1cJKDdZW2QIDAQABo4ICjzCCAoswHQYDVR0OBBYEFD9xzr+QsELxv6+il4+ZuvY9
MG7ZMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMyMzAzYTNhMmYz
NDM0MmQzNDM4MjAzZDNlMjAzMTM5MzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvr9DyAw
DQYJKoZIhvcNAQELBQADggEBAF8ZN9eQNF97ckiqGP1WL2M5I8gQIKQTJ30dx/N5
sMSjiWM2aDe+A0jPpd0Hev3lajQcVXtV3oXdMRILAhqFeAAMvs7wOKcbhzG3ybJh
MZ/cyPxjSym5w1R10hlNjRlevIYL6N2RtMkujIJpl7vJIyK8GlMPfHG/CjQljNja
eVYGWtsvbvCGHMpSTzSieyz5yyCKWhNryBY+Ht3QQ34/gVftKV8ARYvY+W1wb/dL
h/zRk3ADUQgKaBV8N+kNxvVopibbFOrmFLF86nwBBFR5ThkdH3OZXwzi3RPWrIiz
Yy34pjJu7VV7OXRNUQ/2kg7EEGI9KHp7Nn62uEOb+TaBp1o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org