Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa
File:                     323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa (raw, json)
Hash identifier:          ZJT29KiWMIaHPkNPcBXOg6A06yZYerRU5vJDu/2bRFY=
Subject key identifier:   55:64:C5:98:7C:9C:C0:EA:9E:9A:69:6A:CA:AA:EA:8D:F7:E0:C2:E2
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       030685AE3CCCB7F36FD079210758B228A64B7165
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa
Signing time:             Thu 15 Aug 2024 12:49:45 +0000
ROA not before:           Thu 15 Aug 2024 12:44:45 +0000
ROA not after:            Thu 14 Aug 2025 12:49:45 +0000
asID:                     216401
IP address blocks:        2602:fafd:f60::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:06:85:ae:3c:cc:b7:f3:6f:d0:79:21:07:58:b2:28:a6:4b:71:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 15 12:44:45 2024 GMT
            Not After : Aug 14 12:49:45 2025 GMT
        Subject: CN=5564C5987C9CC0EA9E9A696ACAAAEA8DF7E0C2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:da:a9:22:14:60:b5:af:e8:98:63:cf:d9:
                    d9:51:43:66:27:1d:1b:87:1e:64:68:9f:e7:5e:fd:
                    c1:7a:d8:c3:c0:13:ad:09:29:98:81:74:e8:c3:09:
                    0b:09:98:89:34:9f:60:82:a9:e8:29:51:eb:81:09:
                    19:56:66:7f:8d:49:2f:da:17:b4:b2:6b:69:43:80:
                    d0:8a:7f:93:d1:01:d7:ea:4f:00:fa:89:8a:e0:2a:
                    a0:da:07:cc:d0:4f:2e:2e:47:04:73:52:6c:11:db:
                    3f:e8:84:25:e5:e7:5c:45:2b:ef:ac:cc:fa:d0:7b:
                    4d:ab:b7:02:41:88:05:35:cc:61:7a:7d:fa:0b:48:
                    4f:bb:32:40:f2:f2:e8:f4:5e:19:97:89:91:91:7d:
                    f7:0b:8c:d2:ab:70:86:f0:62:00:21:73:0f:fa:8b:
                    75:46:66:03:1c:fb:bb:7c:f7:c3:b8:92:e1:f5:c5:
                    c7:70:02:ca:cc:5b:0f:d4:a2:ae:03:ba:15:b5:40:
                    ff:d3:99:18:e1:4f:6c:bf:d2:a3:c4:a3:c0:dc:df:
                    c0:73:a4:17:ae:c2:9f:80:21:54:99:bf:5e:17:93:
                    da:72:80:71:61:3f:f8:89:a8:1d:53:15:0f:6a:3c:
                    16:d4:05:89:4d:97:23:e5:65:1a:cd:13:ec:f0:e0:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:64:C5:98:7C:9C:C0:EA:9E:9A:69:6A:CA:AA:EA:8D:F7:E0:C2:E2
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f60::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:be:7e:91:9b:70:9d:97:68:90:ae:e9:bc:07:7e:d2:70:40:
         5d:c5:ef:a1:3a:06:a4:d8:60:7a:81:61:4e:b4:57:ae:c8:d0:
         c4:a9:a2:d8:60:8f:8e:56:56:cf:7c:28:5c:a7:4e:dd:83:26:
         08:13:e3:17:82:23:0d:2d:a6:70:24:07:16:82:29:e1:51:84:
         e9:68:39:34:ba:74:9a:9a:9b:bb:1e:bd:a4:5e:42:fb:76:03:
         59:5e:b8:0c:8e:b2:0c:8c:16:34:b5:f8:10:95:1d:1f:3b:d6:
         f4:40:94:2b:a3:96:fe:7e:81:49:79:af:1f:ba:10:a7:c6:f9:
         58:e3:99:36:22:6e:ca:d1:1b:b0:cb:77:18:5b:63:3e:8d:6b:
         6b:fc:29:8b:0b:da:47:39:2d:80:3f:a1:e7:73:50:a6:59:e5:
         4d:35:b7:3c:b4:9f:58:e2:c9:f9:88:c3:6c:27:5e:a5:26:5c:
         c3:f6:bb:6e:a0:a9:e5:a5:35:50:98:2a:51:41:f1:6e:f1:17:
         ec:c3:3a:c7:9f:04:ab:d2:eb:8c:6a:a6:70:6f:17:3f:89:2a:
         25:65:3a:5f:55:65:ea:ae:51:41:ef:f2:35:6b:3d:6e:38:46:
         6c:38:0a:c6:44:b9:ff:2f:59:7f:b9:6e:df:72:03:19:8f:ab:
         3e:42:8d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:03:03 2024 by rpki-client on console-fra.rpki-client.org