Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665313a3a2f34382d3438203d3e20323033313639.roa
File:                     323630323a666166643a6665313a3a2f34382d3438203d3e20323033313639.roa (raw, json)
Hash identifier:          tKIDC1H+jOWlCdd0PJQhcujIWtzKTyGia775bL3kTsg=
Subject key identifier:   C6:E9:12:12:8D:C2:B8:1E:81:59:38:80:69:A0:2E:46:4F:B7:83:C2
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       4ADF904224342BA23381B60B00C7A07277CF5ED8
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665313a3a2f34382d3438203d3e20323033313639.roa
Signing time:             Thu 15 Aug 2024 12:49:45 +0000
ROA not before:           Thu 15 Aug 2024 12:44:45 +0000
ROA not after:            Thu 14 Aug 2025 12:49:45 +0000
asID:                     203169
IP address blocks:        2602:fafd:fe1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:90:42:24:34:2b:a2:33:81:b6:0b:00:c7:a0:72:77:cf:5e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 15 12:44:45 2024 GMT
            Not After : Aug 14 12:49:45 2025 GMT
        Subject: CN=C6E912128DC2B81E8159388069A02E464FB783C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:e5:10:b0:0c:01:58:c3:b1:ef:71:dd:cc:
                    1a:92:c8:39:23:6d:94:95:35:46:e7:2e:6a:c1:fb:
                    ee:1d:a9:91:34:6d:aa:ad:ea:ff:25:57:69:ef:b8:
                    91:72:4f:24:49:e3:dc:22:4b:7c:b5:79:32:03:5f:
                    49:c9:03:85:48:8a:05:1d:3c:36:df:63:1b:fd:6e:
                    95:5c:65:78:cd:9b:4f:9c:8c:b4:30:35:31:54:c1:
                    53:8a:33:25:0b:d1:cc:cb:6a:2d:11:6e:f8:1f:4a:
                    d1:87:c0:b9:63:5f:05:39:a4:49:65:c2:5b:4b:3e:
                    13:bf:10:2d:8c:e4:31:2a:1b:54:6e:b1:ba:fd:2f:
                    e9:43:30:60:8f:29:de:9b:f7:83:f6:44:07:9e:88:
                    c6:02:84:f5:26:71:e3:b5:fb:10:13:0c:aa:90:01:
                    1a:cd:cc:d8:d1:ac:f6:bc:9f:df:23:65:ed:ef:cd:
                    00:2b:64:8f:7c:b2:3e:a2:9a:bb:14:ef:e4:9c:b0:
                    e5:b2:bc:20:f5:c3:3d:b4:ce:e9:a2:6e:75:59:f2:
                    4c:2d:4b:4a:7e:66:73:40:89:d7:c4:a4:74:55:60:
                    4c:17:b0:b1:ae:29:05:d8:27:c3:73:7f:b5:49:0c:
                    d1:d2:cb:3f:9b:55:0d:d2:b9:a0:56:f5:f9:55:8b:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E9:12:12:8D:C2:B8:1E:81:59:38:80:69:A0:2E:46:4F:B7:83:C2
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665313a3a2f34382d3438203d3e20323033313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fe1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:f5:c1:34:e9:a2:27:a2:ed:e8:85:b4:f1:20:f7:83:ed:
         e2:59:02:07:f1:1c:24:a8:88:1c:be:78:f2:e5:6e:75:5d:a6:
         6e:04:20:eb:bc:74:c7:02:99:4b:f6:e9:fd:ff:37:b1:b4:89:
         bd:60:9d:1c:94:e8:a5:67:3f:90:07:5c:5e:c2:a0:aa:da:4a:
         59:3f:b1:2f:41:6d:70:59:ae:4a:1b:5c:a2:35:0f:ff:fa:c6:
         09:ba:10:42:fc:c9:97:50:7e:f9:88:59:69:35:6f:69:9e:18:
         1b:4a:78:1b:3a:13:8b:80:c5:98:aa:00:0b:7e:59:14:5b:96:
         44:4d:fe:cb:9a:52:59:b2:27:6d:ab:67:53:10:61:9a:f8:cc:
         cb:80:ab:58:5b:0c:ae:3c:f2:d5:d6:e1:d8:63:08:8e:b0:85:
         df:27:9f:b5:53:f8:c6:fc:45:04:56:56:01:cf:6b:f6:4f:38:
         5d:4b:16:df:10:a8:b7:f7:dc:90:1b:73:57:85:cc:b1:39:51:
         f1:96:77:5d:be:73:59:0b:52:e1:dd:19:8f:90:e0:6e:a1:4e:
         6d:cc:d1:e3:7b:59:16:59:09:ec:ec:60:47:aa:0a:73:66:cc:
         a8:76:d5:2e:6b:50:fd:e3:82:ef:9e:a2:0a:d7:e5:0d:61:a0:
         06:47:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org