Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662313a3a2f34382d3438203d3e20323037313432.roa
File:                     323630323a666166643a6662313a3a2f34382d3438203d3e20323037313432.roa (raw, json)
Hash identifier:          f+2X8CfsLBen1CW8aQVODlP1zJCLudQ6MttUEpBU0B4=
Subject key identifier:   B4:6C:77:EE:79:7E:36:94:30:CA:A8:6D:13:79:38:E9:58:79:D8:28
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       52725FBBA8E070E8B80CB983913BE6A9672E915A
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662313a3a2f34382d3438203d3e20323037313432.roa
Signing time:             Wed 22 Nov 2023 23:14:42 +0000
ROA not before:           Wed 22 Nov 2023 23:09:42 +0000
ROA not after:            Wed 20 Nov 2024 23:14:42 +0000
asID:                     207142
IP address blocks:        2602:fafd:fb1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:72:5f:bb:a8:e0:70:e8:b8:0c:b9:83:91:3b:e6:a9:67:2e:91:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 22 23:09:42 2023 GMT
            Not After : Nov 20 23:14:42 2024 GMT
        Subject: CN=B46C77EE797E369430CAA86D137938E95879D828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:2c:99:ec:ba:c7:db:d8:f8:7a:25:d4:f0:
                    c9:fe:20:83:96:0a:e6:0a:6d:17:1a:83:d6:11:ee:
                    3b:3b:e3:a3:68:8b:7f:12:a6:9d:a4:9f:b6:f1:64:
                    ba:05:c4:06:cf:59:b5:8a:c3:19:6f:0e:03:e2:2d:
                    44:fb:14:6c:00:c5:22:c6:05:ae:d6:4e:71:50:1c:
                    dc:39:ae:37:33:f2:0a:3b:4d:55:5b:9d:8e:2d:ad:
                    50:0b:4d:61:d2:18:f5:ca:5b:b1:30:1e:ac:92:39:
                    a5:77:a5:e4:0f:d0:bc:ac:61:04:13:80:f0:f0:0b:
                    2d:a3:c9:0d:fa:22:ad:4f:d6:bd:fc:a8:76:fb:d4:
                    55:0a:46:99:fa:08:8d:fb:e6:ad:d2:73:ae:5b:80:
                    09:e2:51:b6:54:89:c0:2e:c3:ba:92:c3:3d:dd:55:
                    98:12:b4:03:72:8e:52:ad:eb:8b:c2:0b:aa:a2:3a:
                    f5:6e:46:39:cd:a3:25:28:b0:2c:81:4a:23:a0:75:
                    9f:bf:34:12:03:83:46:7a:ef:d0:3e:aa:89:d0:45:
                    24:eb:2f:1f:dc:a4:96:25:1e:7c:27:55:c3:6e:75:
                    2d:3a:b1:42:b9:65:54:a0:d0:c5:03:73:af:c1:a5:
                    a4:78:23:a5:da:6c:b6:99:64:84:50:88:4f:32:8a:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:77:EE:79:7E:36:94:30:CA:A8:6D:13:79:38:E9:58:79:D8:28
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662313a3a2f34382d3438203d3e20323037313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb1::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:59:15:d2:72:e6:2d:92:e2:4c:ba:1f:97:5a:83:75:96:ef:
         14:9b:8f:8c:57:25:99:ba:2a:2c:0b:37:7a:8b:94:76:da:94:
         a7:4d:b9:b0:60:66:f5:3e:d3:33:df:6f:f2:28:66:fc:a4:3d:
         6d:65:e3:9d:b5:25:01:fb:f9:9a:4d:77:52:09:c1:2a:04:fc:
         40:23:9a:d2:1a:80:cb:a6:96:d2:26:2f:8c:b3:df:63:01:10:
         e5:b8:d7:0e:c1:83:e3:5d:36:e2:20:78:83:72:13:76:5a:19:
         4b:48:b0:f3:49:dd:7d:dd:40:ee:c9:de:e7:e0:04:75:53:59:
         6e:74:52:e3:a1:11:56:68:47:f6:b7:b5:3b:a6:cd:55:52:ff:
         07:a7:be:8d:bf:2b:32:5c:ff:cf:95:5c:be:6e:7b:74:b1:a8:
         db:72:c4:5c:ef:91:ba:ad:12:3a:8a:0c:7b:c7:c6:67:8f:83:
         09:58:33:31:a3:48:f2:c1:0d:82:12:f4:6b:89:f0:7a:53:5e:
         b2:1b:18:4f:44:f5:e8:95:71:af:84:5d:85:44:56:51:c4:19:
         49:dc:58:dd:50:22:9c:ae:02:49:19:68:51:f2:7b:cc:fe:8b:
         4c:f6:82:87:21:16:b7:d9:45:1c:df:d8:89:9d:f1:82:83:49:
         45:7f:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org