Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6661663a3a2f34382d3438203d3e203534363831.roa
File:                     323630323a666166643a6661663a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          IagvWs5UskA/+fBSWbER9sdiwlMutbX/YZEOV21qpZo=
Subject key identifier:   5E:C8:81:ED:52:87:78:0D:0B:19:A2:8C:A7:B7:A1:BC:52:36:3F:C6
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       656390F683482B54F3AA91A78C4FACB0506B52C2
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6661663a3a2f34382d3438203d3e203534363831.roa
Signing time:             Wed 15 Nov 2023 12:11:39 +0000
ROA not before:           Wed 15 Nov 2023 12:06:39 +0000
ROA not after:            Wed 13 Nov 2024 12:11:39 +0000
asID:                     54681
IP address blocks:        2602:fafd:faf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:63:90:f6:83:48:2b:54:f3:aa:91:a7:8c:4f:ac:b0:50:6b:52:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:39 2023 GMT
            Not After : Nov 13 12:11:39 2024 GMT
        Subject: CN=5EC881ED5287780D0B19A28CA7B7A1BC52363FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:4e:48:ba:0c:cd:27:63:ea:ac:a5:fe:ce:
                    46:27:ad:57:3d:0b:cc:fd:bb:3e:b8:36:1d:01:c7:
                    bb:00:dc:bd:a5:1b:6f:3b:05:37:91:32:98:0a:e8:
                    7a:0d:0d:92:e9:aa:47:8c:2e:08:8a:ca:a5:ab:e7:
                    58:02:67:f0:ad:4b:03:c5:4d:bc:e5:9f:fd:7d:02:
                    cd:4d:af:75:05:80:b1:96:e3:ff:e2:50:ae:1b:7d:
                    66:1b:f1:a0:9c:60:21:0f:7b:89:c5:7f:51:f2:49:
                    5a:47:36:e8:42:d0:93:cb:81:2f:67:a7:a4:e7:57:
                    60:2e:6e:5b:5a:3d:9e:8c:03:0f:3f:d5:24:ee:f9:
                    ac:c7:a6:1e:45:7e:69:8d:da:36:4a:4a:81:4b:b7:
                    0a:e1:44:10:8a:2a:c4:7b:b8:ca:fb:41:74:03:0a:
                    12:d0:68:c0:ea:4b:a8:17:55:a6:53:13:39:50:92:
                    52:36:85:59:d1:d9:8a:77:91:23:ca:c7:ba:f9:0b:
                    3a:ae:e2:43:26:b4:b5:e2:b9:72:f6:2c:cd:5d:09:
                    1c:9d:54:86:6a:e7:0e:66:b6:08:1c:4d:58:b1:80:
                    c0:df:a0:19:da:6a:11:e5:d2:97:cb:2b:3d:5b:eb:
                    a5:b7:c1:82:d1:90:0f:4d:59:a0:77:36:9d:6c:b3:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C8:81:ED:52:87:78:0D:0B:19:A2:8C:A7:B7:A1:BC:52:36:3F:C6
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6661663a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:faf::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:8a:69:a7:63:1f:a3:83:15:be:dc:9f:55:6b:16:3e:ff:d7:
         56:c6:ef:a6:f3:a7:ca:69:eb:8c:9d:52:bb:6c:37:bf:7c:25:
         fa:31:84:a6:8d:a4:af:9c:87:c0:e2:5f:00:ec:98:17:9e:a4:
         50:f9:8e:f1:50:c6:46:b0:40:f7:04:0a:52:7d:f7:ed:df:28:
         2f:d8:ec:13:47:e5:56:c2:7a:e8:ef:d2:0b:dd:98:86:db:a9:
         c9:e4:33:c0:d9:8c:0e:17:43:e8:bf:d5:96:d4:e4:a3:39:87:
         57:45:78:c9:0f:68:a0:9f:c1:d7:50:75:93:5a:ac:84:23:f9:
         8a:56:2a:23:11:ea:95:6f:d6:b0:55:b2:8c:62:13:cf:da:95:
         13:3d:08:7e:36:95:b0:05:37:86:36:d9:56:66:78:a1:36:59:
         ac:5e:c0:bd:87:7a:ff:02:dd:47:96:c2:0a:46:c4:58:ad:f5:
         81:6f:9b:68:0c:94:3d:85:2b:d9:8a:5f:15:5d:da:0f:42:f4:
         01:c9:0d:b1:a3:43:41:45:1a:32:86:3c:c4:1d:12:73:e1:f1:
         7f:69:8b:23:2e:04:ab:c9:32:b7:37:28:c4:78:46:b4:2e:b1:
         fb:35:59:71:5f:dc:76:07:1e:af:a8:e8:01:93:bd:51:70:37:
         1a:ef:a1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org