Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6633303a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a6633303a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          ziX8MT7jCS5XXQ7i7g9QhuH+kFIeP9JqZJQ4K00+nXE=
Subject key identifier:   77:F1:A2:1F:E6:E2:B9:BC:C3:C2:B2:6F:A7:2D:CB:FF:F3:23:90:E2
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       70162E9551A72718AFFEE0D7A527FBA95B800D5F
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6633303a3a2f34382d3438203d3e203233343730.roa
Signing time:             Wed 25 Dec 2024 06:45:37 +0000
ROA not before:           Wed 25 Dec 2024 06:40:37 +0000
ROA not after:            Wed 24 Dec 2025 06:45:37 +0000
asID:                     23470
IP address blocks:        2602:fafd:f30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 15:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:16:2e:95:51:a7:27:18:af:fe:e0:d7:a5:27:fb:a9:5b:80:0d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Dec 25 06:40:37 2024 GMT
            Not After : Dec 24 06:45:37 2025 GMT
        Subject: CN=77F1A21FE6E2B9BCC3C2B26FA72DCBFFF32390E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:77:fd:3a:ee:84:d9:b8:33:76:60:91:1d:
                    a9:35:61:1a:99:78:68:cc:31:81:ee:3e:64:47:bf:
                    9c:e0:2e:ef:51:14:17:60:8c:6c:e0:ac:4a:be:ec:
                    f3:ec:8a:fa:44:e6:c9:e1:b8:e6:1e:13:70:22:cb:
                    01:ac:1d:e2:e3:92:f0:86:e1:ac:0a:63:75:8f:e0:
                    6f:0e:d6:ee:ee:14:cd:a0:78:f3:bc:d6:74:68:f8:
                    5a:cb:89:d8:32:25:0f:d3:34:ba:94:97:95:22:56:
                    92:c4:ab:bf:f2:c5:56:a7:04:cc:b7:c8:6e:fc:3d:
                    59:17:df:ac:01:d4:f2:e3:4d:c9:f8:fa:c1:01:e1:
                    0e:a0:91:ac:21:42:3f:93:cf:fd:18:89:fb:21:31:
                    02:bf:c9:69:aa:68:4f:a7:88:18:ce:c2:1f:03:6e:
                    df:e4:df:9a:a3:3d:c7:fd:32:39:5f:78:b3:71:fb:
                    70:77:74:72:7b:c1:2e:ec:50:a0:20:9d:f2:b2:6c:
                    cd:39:b2:6d:78:b8:f8:cc:b0:b8:62:c5:df:7f:5a:
                    71:fa:f5:1b:08:a1:76:63:93:da:fd:8b:25:d1:f0:
                    c8:d0:49:90:72:44:65:0f:e2:1b:4c:29:d9:b3:3d:
                    5a:a1:9c:4f:11:c0:1f:b0:27:d8:90:e7:60:73:44:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F1:A2:1F:E6:E2:B9:BC:C3:C2:B2:6F:A7:2D:CB:FF:F3:23:90:E2
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6633303a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f30::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:c1:a0:77:fd:0e:5a:af:06:f8:b8:d5:f7:8f:65:cb:6e:40:
         04:c0:c2:39:48:a4:b7:8b:bb:07:e0:4a:b6:65:d7:06:76:5c:
         41:13:2a:3c:15:54:93:e5:f7:38:49:5c:22:43:87:06:1a:a9:
         32:4c:33:cc:ec:6c:41:1e:6d:9f:35:42:18:fd:df:29:95:6a:
         34:aa:b9:30:ac:13:6d:ba:dd:80:9a:12:1a:5f:26:8d:0d:33:
         58:c1:8c:bb:1f:17:00:19:dc:2f:70:2d:fc:db:67:5a:fa:a8:
         dc:2f:7d:dd:2e:34:d9:f8:d8:90:a8:84:97:b2:eb:d5:df:86:
         86:0d:1c:e9:f8:84:db:9e:07:cd:19:a3:63:f4:fd:e1:fe:88:
         4d:4b:b0:3c:79:8c:db:a5:bb:a7:d4:b1:74:a9:0c:63:c2:62:
         f6:26:48:55:9a:00:5f:08:5f:0b:69:dc:a6:e0:72:8e:ed:7d:
         37:fa:13:9a:94:0c:fb:89:3a:0e:a3:cd:60:21:de:d8:90:46:
         a2:71:c1:31:1c:d8:6e:f7:fc:1d:84:41:fe:df:6a:4e:c1:01:
         04:ac:f8:32:e7:21:1b:17:77:f9:7d:85:88:87:9e:5d:63:50:
         24:26:5d:53:77:d4:48:fb:27:84:87:25:49:41:b3:bd:ad:74:
         be:83:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:17:30 2025 by rpki-client