Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa
File:                     323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa (raw, json)
Hash identifier:          7EJJVs97nX2JuyZqtR/g/+sBEvVG51b4eUKswnr3TjQ=
Subject key identifier:   5C:8D:8B:63:F8:A9:5B:DC:9C:0F:61:51:F7:CD:F2:D7:21:D0:5A:F1
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       6B7940C9971D38D5349BDA4FA5AAE18E998C7960
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa
Signing time:             Mon 28 Oct 2024 07:45:29 +0000
ROA not before:           Mon 28 Oct 2024 07:40:29 +0000
ROA not after:            Mon 27 Oct 2025 07:45:29 +0000
asID:                     204340
IP address blocks:        2602:fafd:fb3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:79:40:c9:97:1d:38:d5:34:9b:da:4f:a5:aa:e1:8e:99:8c:79:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 28 07:40:29 2024 GMT
            Not After : Oct 27 07:45:29 2025 GMT
        Subject: CN=5C8D8B63F8A95BDC9C0F6151F7CDF2D721D05AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:6a:ec:d8:d1:7b:bc:cf:dd:c3:af:37:53:
                    67:77:a0:cf:85:26:33:5c:87:49:b3:2d:9c:22:44:
                    ee:0a:15:a2:17:70:6a:48:58:49:a6:3f:09:b1:4b:
                    2d:1b:03:26:75:3b:a9:36:33:ce:de:4d:1a:5e:06:
                    5b:f9:78:4b:78:a2:76:ea:c6:52:a1:ea:e4:29:92:
                    3e:b0:3d:13:74:01:17:45:23:98:29:20:c2:0e:ff:
                    dd:8a:eb:3f:c7:3a:b7:6d:8f:9f:45:dc:6b:d7:5c:
                    73:88:54:17:26:a6:ff:5a:98:44:a4:f5:7d:0a:fa:
                    3d:9a:1f:20:fa:61:63:a9:85:16:5a:58:77:3b:48:
                    58:8a:9c:58:bb:0e:69:c8:e7:c1:6e:02:99:a6:e6:
                    05:22:e8:7b:06:e2:7f:40:d2:4b:1e:1e:6e:e2:b1:
                    2c:ea:06:03:08:8a:b7:f1:f9:24:4e:e4:57:00:db:
                    4d:f3:1e:22:6c:45:f7:39:34:fe:22:c5:4c:e6:87:
                    8f:7e:5e:2a:59:27:d8:5a:9c:ae:77:98:f6:63:c0:
                    26:6c:5e:65:92:0b:43:5d:f0:44:06:6b:1e:15:8a:
                    55:44:e5:dc:dc:d4:92:39:9b:fb:e2:34:83:c6:d7:
                    28:05:35:e3:f5:a1:e3:3f:d7:51:13:ce:2a:0b:b1:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8D:8B:63:F8:A9:5B:DC:9C:0F:61:51:F7:CD:F2:D7:21:D0:5A:F1
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb3::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:c3:9e:52:cc:26:1f:e9:6f:38:9e:fb:7e:a2:af:ff:54:d4:
         9c:22:66:83:2c:19:8e:13:7b:1b:75:e1:32:93:ce:30:33:d7:
         09:e0:11:36:f3:39:e1:e6:f4:19:2a:9a:e5:2a:92:51:ad:ca:
         78:62:af:9e:a4:f8:eb:0a:5f:8b:a4:06:ab:19:22:e7:df:ff:
         3c:96:08:a3:4a:44:00:ee:42:03:aa:df:d4:09:bc:45:5a:36:
         04:d3:d5:9f:8f:4d:a9:70:d1:ed:a6:34:f4:78:6c:99:c4:22:
         16:fb:ac:d4:4e:38:2d:30:79:31:d8:6c:0c:6e:03:fc:bf:1f:
         e0:f6:e5:b1:7b:37:4b:6a:ca:81:bc:70:92:8e:c9:ca:b5:3a:
         14:cc:a7:7b:fe:b3:be:cb:c3:f9:2a:ce:99:99:d8:ff:8c:0a:
         72:62:12:8a:42:16:47:26:19:13:1a:0f:4b:c3:1a:18:67:80:
         2b:22:10:b4:73:68:f8:7b:0e:87:ec:3b:ab:b3:39:73:6f:e4:
         09:bf:dd:6c:48:3a:5a:18:66:c4:fc:4f:48:ab:57:ae:9b:8e:
         18:96:56:b3:75:c8:8e:d0:be:57:f7:69:0b:58:63:a7:61:c2:
         0e:bb:6f:a5:f5:1d:a3:b7:a4:17:9a:2c:8b:4e:0a:a1:5e:19:
         2d:d3:2f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:02:38 2024 by rpki-client on console-ams.rpki-client.org