Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662383a3a2f34382d3438203d3e203235383632.roa
File:                     323630323a666166643a6662383a3a2f34382d3438203d3e203235383632.roa (raw, json)
Hash identifier:          ucYfIiMRbab9jJjSP1nms318cCgHGpzlFFBECvv3LTY=
Subject key identifier:   AE:4F:AE:C6:0E:33:1A:5A:27:D0:06:CB:51:2C:F1:DF:E4:76:C5:11
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       7BBCAE23B92E4998538F7C55A5B1B5CC6793F43A
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662383a3a2f34382d3438203d3e203235383632.roa
Signing time:             Mon 26 Feb 2024 10:58:05 +0000
ROA not before:           Mon 26 Feb 2024 10:53:05 +0000
ROA not after:            Mon 24 Feb 2025 10:58:05 +0000
asID:                     25862
IP address blocks:        2602:fafd:fb8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 14:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bc:ae:23:b9:2e:49:98:53:8f:7c:55:a5:b1:b5:cc:67:93:f4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Feb 26 10:53:05 2024 GMT
            Not After : Feb 24 10:58:05 2025 GMT
        Subject: CN=AE4FAEC60E331A5A27D006CB512CF1DFE476C511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c1:54:6f:86:c2:e9:af:85:42:19:12:5a:fa:
                    be:ca:c0:11:43:ec:22:c3:5d:78:d1:32:2b:37:c4:
                    85:e0:8c:c8:25:01:fd:55:ba:58:67:08:80:54:81:
                    34:46:6c:45:88:0f:a6:92:fe:8c:f7:ec:e3:44:62:
                    4e:7d:65:41:82:b5:ab:a8:04:fb:00:8c:8f:ee:40:
                    e3:ec:d2:42:24:05:eb:46:f3:c6:78:09:03:d5:f6:
                    e6:32:92:a5:5b:ef:58:bc:50:fd:0a:64:c3:51:80:
                    4b:2d:ff:93:8a:9d:17:2d:7e:f8:75:b7:4f:dc:52:
                    5e:26:f5:e3:6a:33:42:c4:de:c3:d7:b0:c4:18:17:
                    6e:10:d5:0b:bf:06:54:ad:7d:8d:18:94:0b:7e:a3:
                    5a:21:96:37:f0:01:e9:7d:a1:e7:dc:b3:7b:63:5f:
                    d9:da:aa:d1:4a:a9:01:64:88:8f:a4:6a:9d:70:0f:
                    d3:98:af:00:b3:1e:52:bc:db:58:d9:55:5b:e1:a8:
                    dd:1d:71:84:90:94:38:be:bd:85:f1:27:b6:21:fc:
                    4c:c9:ee:20:1d:7d:eb:fb:b3:7c:43:cd:52:3e:90:
                    b0:dd:13:81:6f:38:8d:7b:53:7f:9e:80:71:31:7a:
                    f7:a9:9f:05:49:22:87:a7:df:58:40:af:30:24:3d:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4F:AE:C6:0E:33:1A:5A:27:D0:06:CB:51:2C:F1:DF:E4:76:C5:11
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662383a3a2f34382d3438203d3e203235383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb8::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:93:85:01:06:00:98:be:7f:cb:fb:76:26:2a:2a:c7:3e:3a:
         32:07:b9:b5:ba:24:08:6d:9b:1e:ce:38:2e:b7:16:7a:d1:23:
         3e:f3:04:c3:7f:ac:02:31:b8:d1:49:60:63:7e:b2:a3:2f:0a:
         11:4b:23:4b:ac:d2:df:8e:f8:59:a1:e1:9b:36:18:d4:35:4f:
         fa:a4:ee:c6:49:3e:33:59:f8:88:ac:83:31:79:3b:29:e5:c6:
         7a:68:42:03:9d:66:0b:73:54:2e:e3:f4:19:4f:e2:ea:f2:9a:
         2c:99:4d:55:4d:47:9f:2b:f9:84:77:1d:33:3a:03:90:50:a5:
         36:fd:5f:23:36:39:cc:53:24:d9:7f:66:80:0e:f5:d0:c2:fb:
         0a:a6:a2:20:23:b1:73:73:11:36:55:7c:18:ae:d3:e7:3b:9d:
         f9:56:96:50:12:f9:63:c1:c5:c6:2c:92:7a:78:cd:35:d6:10:
         e1:48:be:d9:0b:60:d7:63:b1:e0:47:7a:9a:a4:27:e6:6c:47:
         99:7b:2a:62:7a:ed:df:6d:24:fe:8e:66:09:f4:b7:96:aa:30:
         d2:78:f6:76:3a:d3:fe:51:42:2e:34:d0:6a:98:2e:4d:cd:27:
         f1:07:da:42:0e:89:f0:a8:25:ef:d8:5e:f6:a6:30:ca:4b:59:
         18:32:f6:d3
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIUe7yuI7kuSZhTj3xVpbG1zGeT9DowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjQwMjI2MTA1MzA1WhcNMjUwMjI0MTA1ODA1
WjAzMTEwLwYDVQQDEyhBRTRGQUVDNjBFMzMxQTVBMjdEMDA2Q0I1MTJDRjFERkU0
NzZDNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sFUb4bC6a+F
QhkSWvq+ysARQ+wiw1140TIrN8SF4IzIJQH9VbpYZwiAVIE0RmxFiA+mkv6M9+zj
RGJOfWVBgrWrqAT7AIyP7kDj7NJCJAXrRvPGeAkD1fbmMpKlW+9YvFD9CmTDUYBL
Lf+Tip0XLX74dbdP3FJeJvXjajNCxN7D17DEGBduENULvwZUrX2NGJQLfqNaIZY3
8AHpfaHn3LN7Y1/Z2qrRSqkBZIiPpGqdcA/TmK8Asx5SvNtY2VVb4ajdHXGEkJQ4
vr2F8Se2IfxMye4gHX3r+7N8Q81SPpCw3ROBbziNe1N/noBxMXr3qZ8FSSKHp99Y
QK8wJD21TQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFK5PrsYOMxpaJ9AGy1Es8d/k
dsURMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGQBggrBgEFBQcBCwSBgzCBgDB+
BggrBgEFBQcwC4ZycnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9D
TE9VRElFLVJQS0kvMS8zMjM2MzAzMjNhNjY2MTY2NjQzYTY2NjIzODNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMyMzUzODM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9D7gwDQYJ
KoZIhvcNAQELBQADggEBAGKThQEGAJi+f8v7diYqKsc+OjIHubW6JAhtmx7OOC63
FnrRIz7zBMN/rAIxuNFJYGN+sqMvChFLI0us0t+O+Fmh4Zs2GNQ1T/qk7sZJPjNZ
+IisgzF5OynlxnpoQgOdZgtzVC7j9BlP4urymiyZTVVNR58r+YR3HTM6A5BQpTb9
XyM2OcxTJNl/ZoAO9dDC+wqmoiAjsXNzETZVfBiu0+c7nflWllAS+WPBxcYsknp4
zTXWEOFIvtkLYNdjseBHepqkJ+ZsR5l7KmJ67d9tJP6OZgn0t5aqMNJ49nY60/5R
Qi400GqYLk3NJ/EH2kIOifCoJe/YXvamMMpLWRgy9tM=
-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org