Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          QPKcUA6u7Bj65XdC1EHD4/4nNlQQEFsOzTpi9B/dgjA=
Subject key identifier:   B0:C5:71:59:AB:87:8B:E6:93:09:D9:36:FB:EE:57:F0:29:E4:46:E2
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       68AF6AC318C1E2E189B2E639D854A36745FD1539
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa
Signing time:             Mon 20 Nov 2023 23:13:52 +0000
ROA not before:           Mon 20 Nov 2023 23:08:52 +0000
ROA not after:            Mon 18 Nov 2024 23:13:52 +0000
asID:                     23470
IP address blocks:        2602:fafd:fb2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:af:6a:c3:18:c1:e2:e1:89:b2:e6:39:d8:54:a3:67:45:fd:15:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 20 23:08:52 2023 GMT
            Not After : Nov 18 23:13:52 2024 GMT
        Subject: CN=B0C57159AB878BE69309D936FBEE57F029E446E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:26:a7:0a:cc:fc:48:f4:c3:c9:8c:a2:2a:
                    e3:20:f5:7a:b6:b4:e5:53:d3:58:e5:0d:4b:e7:12:
                    a7:2c:af:54:41:ed:8d:22:d3:c8:69:44:9b:33:ce:
                    64:04:0f:c9:22:05:82:46:5a:db:08:f1:f1:8e:f2:
                    27:84:70:bd:a1:56:9b:07:a2:73:6c:d7:d9:58:7c:
                    9f:89:47:7d:38:08:75:42:bc:6c:ae:42:18:e2:67:
                    64:34:0b:b0:7c:fe:7d:42:24:76:43:69:71:4a:3c:
                    af:20:16:73:b5:0b:d0:61:2a:11:43:ac:22:70:13:
                    d2:74:8b:94:42:28:ae:e6:08:04:ef:b9:61:0a:69:
                    fb:2b:a7:0b:71:fe:16:25:57:15:41:5d:b8:1a:28:
                    da:f9:fa:ea:fa:72:d2:86:30:1a:c7:0b:a0:b9:9b:
                    46:c1:e5:df:d8:02:85:a8:16:f0:f3:a5:fd:98:20:
                    11:ea:ba:6a:f0:4d:97:6c:00:71:5c:93:90:07:37:
                    e6:5c:28:cd:f4:24:08:2e:b9:f0:f8:89:8e:c8:5c:
                    ee:c1:a8:85:7c:c7:73:e1:86:23:f6:1e:aa:40:42:
                    26:0d:4a:a7:a8:74:9d:c1:e5:38:4d:0d:9e:89:c2:
                    f8:9f:37:78:f4:02:ad:bb:66:87:f3:84:42:a0:d0:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C5:71:59:AB:87:8B:E6:93:09:D9:36:FB:EE:57:F0:29:E4:46:E2
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:19:d0:8b:bd:db:a0:74:25:3d:17:a6:7b:2b:84:4a:de:
         7f:96:82:55:d6:ef:84:10:19:cf:8a:36:e6:10:03:9c:8f:fa:
         59:06:6e:aa:77:aa:d3:8a:a5:88:4a:5e:47:e8:98:6c:1b:fe:
         ee:95:07:79:40:ee:ed:cb:a4:fc:c1:29:41:a9:3a:7d:8a:61:
         19:b6:a3:64:16:df:44:3f:36:b2:1c:41:15:b6:5f:5b:29:15:
         34:1a:65:f7:ba:c5:7b:ff:42:a4:a1:86:76:fa:2e:85:25:d3:
         a1:c6:56:d9:4f:f3:0f:96:3e:50:1d:64:09:54:f1:8f:ae:c0:
         1c:81:41:11:23:89:df:49:04:56:52:e5:02:d4:fc:1e:55:82:
         86:79:0c:03:e7:4b:be:65:f0:56:b6:ab:6b:c0:5c:2c:ed:72:
         fb:04:67:02:42:96:d2:26:2f:42:6f:69:44:1c:57:43:3f:a8:
         f0:5e:6c:d8:7b:eb:1e:12:55:89:fe:2b:7d:1f:2b:15:b1:36:
         d0:e9:45:2d:53:f0:d2:97:7d:f2:63:94:fe:57:eb:fc:db:91:
         bc:7f:36:f5:d1:ff:7c:d7:06:9a:98:66:9f:bc:3b:28:e6:f9:
         c1:55:37:d7:2c:46:d9:db:f5:10:4c:ac:b3:d9:01:ab:c9:31:
         2e:de:af:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:55:04 2024 by rpki-client on console-ams.rpki-client.org