Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa
File:                     323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa (raw, json)
Hash identifier:          LwTQ2xYj6HPTwBZRsetjgYumiakVcQpODJRKfwXUkj4=
Subject key identifier:   97:36:C8:62:EC:4D:9F:01:5C:0B:83:F6:06:88:92:72:DE:52:2F:E6
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       2D930BED7AE15FCFAC594ECC58B5D88523B6F515
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa
Signing time:             Wed 13 Dec 2023 15:23:01 +0000
ROA not before:           Wed 13 Dec 2023 15:18:01 +0000
ROA not after:            Wed 11 Dec 2024 15:23:01 +0000
asID:                     200226
IP address blocks:        2602:fafd:fb5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:93:0b:ed:7a:e1:5f:cf:ac:59:4e:cc:58:b5:d8:85:23:b6:f5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Dec 13 15:18:01 2023 GMT
            Not After : Dec 11 15:23:01 2024 GMT
        Subject: CN=9736C862EC4D9F015C0B83F606889272DE522FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:d8:c7:bf:31:f2:f6:e5:6c:a6:5f:f8:ee:
                    81:84:95:13:74:20:f0:3a:d9:fc:67:c1:11:eb:04:
                    89:b7:15:f5:fa:11:84:d1:15:e6:68:24:30:fc:bc:
                    11:88:19:15:3f:8b:ce:a1:ad:d3:7a:f7:18:f2:13:
                    97:17:12:3a:7d:00:5a:b3:e2:3f:37:33:33:6b:a9:
                    e8:4f:df:fc:8a:3c:dd:45:65:4d:c4:36:ac:12:f1:
                    47:9e:54:f4:73:f4:a9:71:0b:1c:67:78:fd:f1:e4:
                    06:55:b1:46:1a:4a:1b:85:ce:69:f0:31:be:0a:27:
                    a4:2a:38:1e:d6:17:3c:60:8d:17:b5:98:20:3a:b3:
                    b5:99:38:e2:22:89:f2:c0:d6:72:f1:c4:82:8a:6e:
                    ce:f3:8d:c6:66:83:f0:30:7c:06:35:97:1c:f0:6e:
                    66:03:b9:56:3f:44:55:54:db:33:15:ef:8d:32:8b:
                    2f:2c:7f:c1:06:e2:26:2a:87:23:a5:e8:d8:b0:47:
                    af:b4:8a:80:d1:c7:db:f2:0f:bb:df:a8:5f:37:81:
                    8a:50:09:cc:a8:19:50:91:f9:e0:b9:12:86:92:6b:
                    1a:17:61:c8:0c:34:56:e6:e5:e1:26:f6:92:89:65:
                    b0:7f:52:8d:4c:b5:3b:97:09:d3:b5:97:03:19:0a:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:36:C8:62:EC:4D:9F:01:5C:0B:83:F6:06:88:92:72:DE:52:2F:E6
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb5::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:86:cb:3a:da:0a:f8:f6:16:60:38:40:d7:8d:d1:37:f1:73:
         6c:aa:cd:1c:9b:05:23:6c:f5:1b:b6:19:78:d9:c6:97:63:11:
         2a:ed:f4:64:80:2c:81:8f:da:51:f5:83:06:cb:38:a3:a9:d8:
         5c:2b:a2:73:d2:38:00:f6:82:bb:67:dc:41:cc:3a:0d:76:02:
         29:d0:9b:ab:4a:66:3d:06:d8:e4:38:1c:aa:4d:72:61:6a:86:
         be:a5:e4:81:6c:1a:b5:83:5e:6f:31:53:8d:c0:bf:21:8d:a6:
         57:20:14:60:be:4c:82:8c:92:f7:5a:0b:d3:7f:76:3c:7c:07:
         8c:46:40:e7:01:59:72:05:54:14:96:d3:73:fc:50:73:5f:d1:
         c4:d8:fd:be:cd:59:e1:2a:0c:36:f1:9a:45:23:4c:cd:b1:57:
         db:5f:c6:76:17:f5:0f:9c:1f:fe:74:52:c1:27:9f:9e:5c:8a:
         81:bb:9d:d6:e8:7c:ef:e4:f3:b9:cd:7e:28:32:fa:65:a3:ef:
         e3:12:12:ad:34:f4:c5:ce:7d:dc:2f:40:29:8d:bc:20:18:67:
         f8:cb:fb:4d:1d:77:99:33:3a:e6:ca:1e:4a:a0:62:b1:6d:94:
         42:3d:e1:52:64:86:59:a2:06:00:aa:cb:ef:36:4f:8a:ab:6a:
         41:77:4e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org