Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa
File:                     323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa (raw, json)
Hash identifier:          wu058o0HQLFIJOY2o/Zt5C11puMFbNbP9D/3kI9MmEU=
Subject key identifier:   B4:BA:31:F1:D7:29:6A:05:F9:E2:62:D1:52:4F:94:7C:F5:7A:42:1A
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       79BDAF474A498651E621F4736769761D81D972A5
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa
Signing time:             Thu 14 Sep 2023 12:07:50 +0000
ROA not before:           Thu 14 Sep 2023 12:02:50 +0000
ROA not after:            Thu 12 Sep 2024 12:07:50 +0000
asID:                     216401
IP address blocks:        2602:fafd:f60::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bd:af:47:4a:49:86:51:e6:21:f4:73:67:69:76:1d:81:d9:72:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 14 12:02:50 2023 GMT
            Not After : Sep 12 12:07:50 2024 GMT
        Subject: CN=B4BA31F1D7296A05F9E262D1524F947CF57A421A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:a8:e2:b6:cc:37:46:a2:3b:fa:8a:df:98:
                    22:4a:21:8a:dc:e9:6f:44:03:93:0a:d1:74:59:41:
                    10:ea:5d:64:30:08:2b:89:f5:be:39:fd:98:f3:92:
                    a4:fc:30:5e:ff:11:86:9e:25:d2:84:f7:02:56:87:
                    e3:71:75:3b:b6:a3:ac:38:44:11:1f:dc:29:2a:36:
                    5f:15:2c:f4:17:63:61:34:ad:6d:fa:68:b0:45:8a:
                    5d:7c:76:ed:1f:b5:cd:31:b2:d7:50:57:c7:ee:a0:
                    2b:6a:b3:b0:89:8f:23:01:4c:c1:91:8f:97:51:e5:
                    2b:c7:69:3c:af:22:f4:9b:94:bd:75:05:3c:d9:16:
                    99:ee:52:be:1e:c2:65:ac:90:31:da:7d:0e:49:1d:
                    70:61:87:28:9d:cf:04:be:2a:a4:31:ac:32:58:1b:
                    18:35:7a:c0:7f:2b:fd:7f:82:20:ca:35:34:fd:eb:
                    d8:47:e3:9d:96:8f:b2:3b:65:3a:00:ea:9f:aa:c5:
                    ab:ab:90:df:ce:9e:b8:9f:53:45:f4:ed:18:d4:e0:
                    07:54:ee:4c:1b:ab:2b:1b:c4:3c:9f:4b:b3:46:c7:
                    53:82:4d:5f:9f:80:af:39:87:30:79:e3:59:90:c6:
                    52:91:8f:b3:59:25:5f:4d:96:6c:dd:67:ba:b4:6b:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BA:31:F1:D7:29:6A:05:F9:E2:62:D1:52:4F:94:7C:F5:7A:42:1A
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f60::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:3c:ea:b8:2e:56:66:e7:43:f5:b2:d8:2a:ad:6a:ae:e0:15:
         6d:25:2f:f8:1b:49:b6:ae:24:91:4b:d4:00:b0:8c:a9:10:da:
         6f:1e:06:e1:69:40:db:c9:15:85:ea:3d:dc:9c:00:e2:83:52:
         86:54:80:82:89:08:7a:71:da:70:10:ad:aa:6e:3a:68:76:56:
         70:ec:ad:31:20:1b:1d:bb:3a:30:84:88:45:12:a7:3d:79:81:
         dc:37:39:3b:9e:e3:14:99:3b:ce:28:ad:f8:a1:fd:0f:5e:5d:
         05:8c:b5:eb:9d:d1:a4:00:02:d9:4f:07:50:bc:e3:bd:bc:d0:
         14:fa:c1:0b:8f:0c:7d:a3:fd:36:ac:11:d3:c0:95:ea:19:28:
         f6:09:77:3a:7c:14:7b:a1:4a:1a:56:7a:30:26:67:e9:69:fb:
         3a:70:58:e7:42:f5:82:5b:4a:49:14:be:99:5d:8c:b3:67:76:
         19:b8:ca:5d:ea:7a:3f:75:c5:27:04:d6:cf:2e:27:47:62:07:
         c6:f2:aa:72:9a:7e:13:9d:2d:eb:9f:9a:5d:10:83:a8:b3:17:
         9b:a2:2e:1a:46:92:d1:1e:61:1b:f5:9b:ce:32:46:4c:13:88:
         6e:6f:10:93:94:8d:9a:4c:72:d4:b2:db:34:89:59:13:52:c7:
         72:a0:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org