Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6633303a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a6633303a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          speX4o4WqAXAU55kDkqnEw0T5T9L0CNhhsZlSIbrLmk=
Subject key identifier:   1D:45:BF:45:D0:A4:A1:5F:C4:DD:18:FB:0F:F6:57:98:FF:C1:D8:F6
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       071DD33C18D5D82D69250E266A895ED0CFB73442
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6633303a3a2f34382d3438203d3e203233343730.roa
Signing time:             Wed 24 Jan 2024 05:51:50 +0000
ROA not before:           Wed 24 Jan 2024 05:46:50 +0000
ROA not after:            Wed 22 Jan 2025 05:51:50 +0000
asID:                     23470
IP address blocks:        2602:fafd:f30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1d:d3:3c:18:d5:d8:2d:69:25:0e:26:6a:89:5e:d0:cf:b7:34:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jan 24 05:46:50 2024 GMT
            Not After : Jan 22 05:51:50 2025 GMT
        Subject: CN=1D45BF45D0A4A15FC4DD18FB0FF65798FFC1D8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:91:ad:91:aa:93:0d:f8:3d:27:e3:bf:53:90:
                    65:a6:82:1b:fa:92:33:47:7d:55:91:fc:98:06:12:
                    4f:7e:3e:0c:2a:95:89:0c:22:fa:4b:be:99:1b:4c:
                    d6:b2:5f:13:c1:ed:7b:9a:ff:d5:80:a2:64:b8:a7:
                    a9:61:c0:35:ee:9a:39:4d:f6:6f:e5:92:4d:a8:3e:
                    89:e2:1e:53:f2:21:c9:43:74:0b:b7:3e:01:3c:8f:
                    a2:34:a0:74:43:bc:17:f0:74:76:7f:e3:06:60:9b:
                    6f:5d:94:2a:2b:0f:be:47:72:c3:f3:ff:45:fc:10:
                    fb:dc:48:87:11:0b:62:e2:25:77:b9:53:4f:b3:7d:
                    82:15:35:4e:35:db:9d:01:a6:b0:cb:4f:06:ea:d6:
                    eb:01:e0:90:a0:ff:ab:26:37:5c:bf:de:2c:7f:bd:
                    ca:ea:b4:ee:06:e9:0f:54:ed:e2:b5:da:e6:4b:3d:
                    97:82:b3:0b:8e:8c:7b:b7:c7:d5:8d:fb:1a:46:a6:
                    a8:33:25:2e:86:dc:b4:58:3c:3c:d2:68:fa:3c:8e:
                    e4:70:c7:0e:08:d3:29:8e:02:ab:b6:96:44:b3:0c:
                    a6:6e:b4:6b:2f:16:15:f8:b0:fd:e2:bf:6a:18:09:
                    dc:90:00:45:30:01:91:f7:98:26:03:24:1a:61:fc:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:45:BF:45:D0:A4:A1:5F:C4:DD:18:FB:0F:F6:57:98:FF:C1:D8:F6
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6633303a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f30::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:49:fe:68:5b:c9:e3:93:42:2d:4b:da:3c:6d:38:78:b2:
         81:a5:72:34:8f:0f:aa:33:9f:d1:b0:0c:49:5b:b8:1c:a7:de:
         79:02:7e:2c:22:8a:a1:cb:36:04:ed:86:3f:34:5b:d5:2d:cd:
         b9:5f:ec:01:75:88:60:98:c6:a1:3b:aa:ac:d9:77:67:51:2c:
         30:8a:3b:7c:f0:23:80:2f:a4:3b:ac:e6:c8:12:1b:90:0f:e7:
         c3:8d:02:aa:34:25:2e:08:17:92:25:df:f0:ef:fe:3b:57:94:
         8f:ca:59:29:dd:df:04:f7:19:1a:6d:67:9f:6d:13:05:ac:c8:
         df:aa:cc:6b:08:55:99:64:68:e0:d0:8d:d8:2f:13:d0:05:51:
         fc:1f:03:60:d4:e2:ef:80:d8:7f:44:65:6e:2a:4b:97:61:92:
         a6:7b:e9:30:29:32:38:3c:46:8c:09:79:17:53:31:47:e9:46:
         68:f6:db:2a:39:8d:ae:7b:7c:3e:4e:89:dc:f1:ea:82:05:45:
         ca:34:9d:23:ee:06:e6:b1:61:88:be:eb:06:a5:26:09:bc:8c:
         db:79:bd:0f:f3:a2:15:52:c1:a1:dd:9b:0d:d8:41:2e:6d:fa:
         45:bd:9b:13:7f:26:73:5a:9c:ba:ad:c5:39:f4:db:cb:bd:9f:
         48:65:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:44 2024 by rpki-client on console-ams.rpki-client.org