Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          W2qAjejEECD3ftduO9fW6tbzLr4gtpHsIR4mYMteSi4=
Subject key identifier:   92:0E:A1:6B:08:AB:7A:CC:B7:D4:64:1E:61:E0:E3:2C:26:F1:18:98
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       6565485CBE4BD019EB8C264455EDB4AF1A33C1E4
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa
Signing time:             Thu 27 Jun 2024 08:47:05 +0000
ROA not before:           Thu 27 Jun 2024 08:42:05 +0000
ROA not after:            Thu 26 Jun 2025 08:47:05 +0000
asID:                     34927
IP address blocks:        2602:fafd:f40::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:65:48:5c:be:4b:d0:19:eb:8c:26:44:55:ed:b4:af:1a:33:c1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jun 27 08:42:05 2024 GMT
            Not After : Jun 26 08:47:05 2025 GMT
        Subject: CN=920EA16B08AB7ACCB7D4641E61E0E32C26F11898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:4c:4f:46:ac:e7:63:b4:68:11:70:d3:7c:
                    05:49:4a:90:35:ef:2e:f3:9b:c6:5c:b7:cb:cb:31:
                    ce:75:3f:31:a1:94:33:e7:85:21:f8:0b:66:38:fb:
                    51:8e:bd:2d:24:d7:a1:e9:f8:b4:af:e6:cd:58:e4:
                    b2:2a:ba:4b:75:4f:e2:7b:33:79:46:04:01:84:71:
                    ec:c4:f4:c1:bd:90:73:4d:e4:cd:38:da:cd:31:af:
                    5b:74:b0:2d:21:af:9a:d7:4b:aa:2e:be:98:19:c2:
                    26:e3:bb:4b:e3:46:29:df:b3:24:0b:0f:a7:a6:8d:
                    b3:f5:44:79:13:65:d6:e4:dc:85:e5:0b:2f:38:6e:
                    e1:54:34:1e:c4:7a:07:c9:47:19:87:5b:1e:47:fe:
                    fe:99:c6:d3:ea:4c:c3:21:94:d6:ff:4e:87:e3:38:
                    f9:0a:be:1b:a3:7b:4b:71:9f:8d:44:64:27:40:19:
                    d9:23:2b:8b:87:62:47:65:dc:40:69:9f:7b:1e:90:
                    80:3d:43:3f:9c:82:8a:93:37:75:56:e7:42:7b:74:
                    ad:64:72:bc:9e:b9:67:2d:d7:f5:c9:c8:78:3c:ea:
                    30:df:9e:4a:18:b3:9b:78:f0:ce:d2:fd:8b:0f:a3:
                    36:47:42:37:e4:8d:10:ad:01:22:4c:7d:60:dc:ee:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0E:A1:6B:08:AB:7A:CC:B7:D4:64:1E:61:E0:E3:2C:26:F1:18:98
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f40::/44

    Signature Algorithm: sha256WithRSAEncryption
         a9:88:ca:25:41:4f:e0:e1:15:d4:63:e3:4e:2d:f3:fc:1b:b6:
         89:98:bb:10:9b:1a:bc:42:24:6e:0a:6c:73:0b:65:d6:8d:4d:
         f9:d3:d5:93:2f:4b:97:19:c0:5d:22:eb:92:4c:48:b2:58:28:
         a3:b7:6b:38:db:27:c0:f1:65:65:e6:8f:1e:46:4e:f5:76:7e:
         cc:b9:83:1b:e9:52:85:2c:8f:9a:43:7d:6a:e9:7b:be:48:bf:
         6c:0d:87:c2:fa:0a:b3:35:94:b1:a0:7a:f5:6c:bf:10:ea:18:
         56:69:3a:ca:a2:3d:49:4d:bb:cd:30:4f:2a:bd:33:50:e6:ff:
         25:6b:99:37:0d:dd:37:a0:57:70:f8:b0:72:1f:bd:81:98:41:
         cc:88:64:fc:ef:3a:e2:6d:e9:db:70:bc:fd:49:97:07:ba:8f:
         66:60:17:57:35:1c:6f:42:fe:2a:eb:db:11:42:a5:db:9d:a7:
         3c:a6:97:c3:f4:be:77:48:06:f5:ba:09:f4:16:57:3e:c3:38:
         7a:e2:a9:98:1b:6b:d2:5a:b8:40:c3:d0:a5:ea:02:a4:c4:87:
         81:1a:9c:32:95:61:54:e0:bc:76:9e:2d:b9:41:56:a6:03:b5:
         a7:fe:51:db:16:43:fc:32:e2:34:c9:e8:b8:8f:4f:b0:f5:8c:
         03:83:5c:cd
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIUZWVIXL5L0BnrjCZEVe20rxozweQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQwNjI3MDg0MjA1WhcNMjUwNjI2MDg0NzA1
WjAzMTEwLwYDVQQDEyg5MjBFQTE2QjA4QUI3QUNDQjdENDY0MUU2MUUwRTMyQzI2
RjExODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3JMT0as52O0
aBFw03wFSUqQNe8u85vGXLfLyzHOdT8xoZQz54Uh+AtmOPtRjr0tJNeh6fi0r+bN
WOSyKrpLdU/iezN5RgQBhHHsxPTBvZBzTeTNONrNMa9bdLAtIa+a10uqLr6YGcIm
47tL40Yp37MkCw+npo2z9UR5E2XW5NyF5QsvOG7hVDQexHoHyUcZh1seR/7+mcbT
6kzDIZTW/06H4zj5Cr4bo3tLcZ+NRGQnQBnZIyuLh2JHZdxAaZ97HpCAPUM/nIKK
kzd1VudCe3StZHK8nrlnLdf1ych4POow355KGLObePDO0v2LD6M2R0I35I0QrQEi
TH1g3O72qQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFJIOoWsIq3rMt9RkHmHg4ywm
8RiYMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGQBggrBgEFBQcBCwSBgzCBgDB+
BggrBgEFBQcwC4ZycnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9D
TE9VRElFLVJQS0kvMS8zMjM2MzAzMjNhNjY2MTY2NjQzYTY2MzQzMDNhM2EyZjM0
MzQyZDM0MzgyMDNkM2UyMDMzMzQzOTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvr9D0AwDQYJ
KoZIhvcNAQELBQADggEBAKmIyiVBT+DhFdRj404t8/wbtomYuxCbGrxCJG4KbHML
ZdaNTfnT1ZMvS5cZwF0i65JMSLJYKKO3azjbJ8DxZWXmjx5GTvV2fsy5gxvpUoUs
j5pDfWrpe75Iv2wNh8L6CrM1lLGgevVsvxDqGFZpOsqiPUlNu80wTyq9M1Dm/yVr
mTcN3TegV3D4sHIfvYGYQcyIZPzvOuJt6dtwvP1Jlwe6j2ZgF1c1HG9C/irr2xFC
pdudpzyml8P0vndIBvW6CfQWVz7DOHriqZgba9JauEDD0KXqAqTEh4EanDKVYVTg
vHaeLblBVqYDtaf+UdsWQ/wy4jTJ6LiPT7D1jAODXM0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org