Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          j0aPhIoLr97GBmJPKr+jNd8cJUO+SUuD6QgiGcX7u0g=
Subject key identifier:   40:63:42:34:C6:4C:63:51:8C:3A:CB:21:31:55:28:84:F6:ED:15:7D
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       76BB98BB64CE4648923141DF38732C13B07E6644
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa
Signing time:             Mon 21 Oct 2024 23:45:24 +0000
ROA not before:           Mon 21 Oct 2024 23:40:24 +0000
ROA not after:            Mon 20 Oct 2025 23:45:24 +0000
asID:                     23470
IP address blocks:        2602:fafd:fb2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bb:98:bb:64:ce:46:48:92:31:41:df:38:73:2c:13:b0:7e:66:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 21 23:40:24 2024 GMT
            Not After : Oct 20 23:45:24 2025 GMT
        Subject: CN=40634234C64C63518C3ACB2131552884F6ED157D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:da:19:ca:76:1f:09:1b:89:3f:ab:6a:51:4d:
                    37:59:bc:47:e4:19:2a:e9:5a:b8:9e:5d:23:96:47:
                    59:87:5f:df:ac:22:34:d5:96:d9:65:39:94:c6:36:
                    b1:83:03:6d:db:e1:cc:5b:6c:0c:ac:67:26:0e:2e:
                    40:68:2f:e1:cd:6f:20:74:27:5d:c3:33:fd:43:da:
                    d6:a4:61:f5:62:f0:5f:59:0d:e6:7c:bc:e8:47:49:
                    60:9a:94:20:d8:1d:05:8a:78:a8:ac:7c:15:24:a5:
                    c9:29:18:6a:5f:2f:b4:17:8a:9f:75:e7:ef:1c:1d:
                    da:cd:f0:a0:20:74:1f:72:17:92:3d:1d:64:a9:c7:
                    24:ff:d9:f0:20:d1:81:e6:6f:b7:25:19:b6:d3:52:
                    b3:88:6a:74:2a:44:f8:42:af:79:6c:f6:f9:79:c3:
                    08:cf:16:de:f1:dd:02:61:c3:44:03:ab:22:67:04:
                    61:1a:04:27:30:ab:4a:41:d1:b1:75:5d:12:f9:44:
                    35:c7:ce:45:45:5c:92:ae:6f:d3:55:b6:29:d4:c7:
                    85:44:a0:88:70:fe:a5:2b:32:24:09:15:1f:a0:55:
                    58:3a:dd:e3:60:7b:f9:91:26:06:45:2d:1e:66:3b:
                    ff:b6:3c:99:b2:be:6e:da:ce:83:cd:6c:bf:11:52:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:63:42:34:C6:4C:63:51:8C:3A:CB:21:31:55:28:84:F6:ED:15:7D
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb2::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:2a:f4:6c:08:10:06:fa:9c:90:64:3e:54:c3:0e:e4:a4:
         b8:ac:21:9d:64:f9:92:2f:b8:89:6e:91:2e:5f:f5:32:27:85:
         8b:dc:05:6b:ce:c6:70:66:d0:21:ec:c7:dc:40:4f:c1:51:99:
         82:d3:6f:c1:2b:2f:b7:f8:6f:b9:bd:b3:ec:58:e0:37:01:82:
         c2:35:a3:ea:35:1c:e4:4d:b4:ac:7d:bd:c0:c0:4a:7d:be:31:
         d7:55:17:56:de:90:21:12:c3:74:0c:4e:1d:de:80:25:e4:62:
         87:a9:49:02:c5:d5:00:27:80:9b:1b:4a:45:1e:a3:db:a4:92:
         63:2c:c4:ea:83:94:f7:5e:75:d1:60:4d:39:01:7f:f8:32:19:
         61:00:9e:fc:3e:bc:99:10:bd:f0:7e:79:cf:30:74:fc:e6:3f:
         e0:dd:c5:3d:4f:e5:c1:8c:b4:b6:66:41:71:08:7b:13:98:dc:
         f0:fa:98:27:36:fd:fa:40:8c:ae:03:b7:b7:04:0c:bb:96:1a:
         f7:d7:51:ff:3f:0d:14:4c:50:6e:d1:b4:0c:65:49:f1:bd:ba:
         f0:1a:f3:e0:a5:92:17:7b:4f:a3:8f:26:36:60:b6:85:3c:ba:
         b5:0a:74:81:f3:2a:06:c9:f6:36:f0:46:e4:9b:43:4a:21:7f:
         e0:51:d6:c7
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIUdruYu2TORkiSMUHfOHMsE7B+ZkQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQxMDIxMjM0MDI0WhcNMjUxMDIwMjM0NTI0
WjAzMTEwLwYDVQQDEyg0MDYzNDIzNEM2NEM2MzUxOEMzQUNCMjEzMTU1Mjg4NEY2
RUQxNTdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9oZynYfCRuJ
P6tqUU03WbxH5Bkq6Vq4nl0jlkdZh1/frCI01ZbZZTmUxjaxgwNt2+HMW2wMrGcm
Di5AaC/hzW8gdCddwzP9Q9rWpGH1YvBfWQ3mfLzoR0lgmpQg2B0FiniorHwVJKXJ
KRhqXy+0F4qfdefvHB3azfCgIHQfcheSPR1kqcck/9nwINGB5m+3JRm201KziGp0
KkT4Qq95bPb5ecMIzxbe8d0CYcNEA6siZwRhGgQnMKtKQdGxdV0S+UQ1x85FRVyS
rm/TVbYp1MeFRKCIcP6lKzIkCRUfoFVYOt3jYHv5kSYGRS0eZjv/tjyZsr5u2s6D
zWy/EVLsHQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFEBjQjTGTGNRjDrLITFVKIT2
7RV9MB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGQBggrBgEFBQcBCwSBgzCBgDB+
BggrBgEFBQcwC4ZycnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9D
TE9VRElFLVJQS0kvMS8zMjM2MzAzMjNhNjY2MTY2NjQzYTY2NjIzMjNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMyMzMzNDM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9D7IwDQYJ
KoZIhvcNAQELBQADggEBADWMKvRsCBAG+pyQZD5Uww7kpLisIZ1k+ZIvuIlukS5f
9TInhYvcBWvOxnBm0CHsx9xAT8FRmYLTb8ErL7f4b7m9s+xY4DcBgsI1o+o1HORN
tKx9vcDASn2+MddVF1bekCESw3QMTh3egCXkYoepSQLF1QAngJsbSkUeo9ukkmMs
xOqDlPdeddFgTTkBf/gyGWEAnvw+vJkQvfB+ec8wdPzmP+DdxT1P5cGMtLZmQXEI
exOY3PD6mCc2/fpAjK4Dt7cEDLuWGvfXUf8/DRRMUG7RtAxlSfG9uvAa8+Clkhd7
T6OPJjZgtoU8urUKdIHzKgbJ9jbwRuSbQ0ohf+BR1sc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:00 2024 by rpki-client on console-fra.rpki-client.org