Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6666303a3a2f34342d3438203d3e20313734.roa
File:                     323630323a666166643a6666303a3a2f34342d3438203d3e20313734.roa (raw, json)
Hash identifier:          wgFwDc3eUcRAwpcRugg8iiDcEj+bKlH2GtH+qYlD/u0=
Subject key identifier:   9F:2C:51:2E:05:E9:C6:81:1E:9D:D0:0B:D8:5E:62:CE:10:FB:40:2F
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       3C5B4AF7B03FF70911E3FCDA705B5387B19E82E4
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6666303a3a2f34342d3438203d3e20313734.roa
Signing time:             Fri 30 Jun 2023 07:08:18 +0000
ROA not before:           Fri 30 Jun 2023 07:03:18 +0000
ROA not after:            Fri 28 Jun 2024 07:08:18 +0000
asID:                     174
IP address blocks:        2602:fafd:ff0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 16:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5b:4a:f7:b0:3f:f7:09:11:e3:fc:da:70:5b:53:87:b1:9e:82:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jun 30 07:03:18 2023 GMT
            Not After : Jun 28 07:08:18 2024 GMT
        Subject: CN=9F2C512E05E9C6811E9DD00BD85E62CE10FB402F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:0b:6f:df:24:74:c6:1e:c5:7f:bd:c4:f6:
                    1b:27:89:1e:f6:a3:92:0b:bc:4b:82:ba:b5:9b:89:
                    db:e8:98:68:70:a9:1a:4d:63:b3:1d:2b:6b:5a:2e:
                    4c:d5:f6:5c:3d:bf:e0:28:05:9e:e0:74:54:07:ab:
                    9b:28:d8:62:dd:fb:a5:bd:71:8d:ab:1a:07:e0:97:
                    f8:dd:bd:2d:e3:c7:38:72:98:8d:2f:44:ee:c0:38:
                    ab:b3:45:6b:1b:94:96:2e:d6:68:91:25:ed:17:1d:
                    1b:40:3c:a1:4c:28:1f:ea:59:39:09:d0:33:e3:95:
                    6d:21:f3:d3:e1:e2:5e:23:21:c3:08:d2:87:f6:94:
                    35:08:62:f3:01:21:5a:ba:34:be:fd:f7:fc:18:05:
                    b2:10:12:52:43:c2:73:f0:af:e1:76:4e:bd:98:fc:
                    04:f0:88:28:3a:b9:dd:0c:7c:3c:10:93:c5:5a:a9:
                    cc:6b:81:39:83:ce:3f:7d:39:c8:b7:70:d7:96:05:
                    ca:2a:f4:6e:9b:17:20:9a:ac:78:e2:e1:8c:99:ca:
                    c4:f0:4a:f9:f5:ef:11:c0:80:79:30:30:db:f3:cb:
                    a6:2a:55:73:3b:1c:94:ae:71:c1:71:8f:96:67:2b:
                    3a:26:6e:00:ad:61:65:fe:27:e5:52:b8:46:2c:77:
                    6b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2C:51:2E:05:E9:C6:81:1E:9D:D0:0B:D8:5E:62:CE:10:FB:40:2F
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6666303a3a2f34342d3438203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:03:50:25:a1:cd:3b:31:b6:3f:0a:c6:a7:8a:ab:d4:86:
         d5:86:a2:23:7a:d5:cf:f8:26:28:7b:47:45:8a:d1:3b:84:83:
         c9:bd:32:7c:5c:85:bc:ce:24:ca:c0:57:38:e9:51:2a:66:ca:
         f4:4e:ee:fe:ab:ca:e4:72:60:a1:b9:1b:e5:bf:2a:8a:b9:8a:
         f1:ca:f9:19:f4:e2:d2:70:74:79:6a:db:70:6f:b5:e8:d8:d6:
         8a:8a:84:d9:08:d5:7f:5a:e5:14:4f:7c:e5:39:9e:6b:ed:43:
         41:fe:a1:17:89:07:76:3f:46:06:c6:cb:12:0f:41:1d:fb:71:
         be:42:48:48:07:ea:d8:fd:0b:05:c6:b4:bc:36:97:6d:94:7e:
         88:ea:d5:94:00:27:36:85:8e:16:79:fd:74:46:4f:a3:80:99:
         73:f2:03:b1:87:0f:b6:b4:81:93:b8:46:4a:f6:58:d8:c1:e8:
         14:f9:c8:ee:1b:c8:98:62:fa:61:e3:8d:91:99:55:15:56:2a:
         dd:3d:1b:bb:5d:ba:d8:26:25:db:56:30:f4:38:cf:60:c4:70:
         03:01:2a:9f:8c:7c:65:f2:03:fd:d0:92:be:38:7f:09:30:6c:
         dd:2a:e7:dd:74:41:66:04:31:ee:b6:dc:82:57:b9:93:42:4b:
         de:1b:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:43:35 2024 by rpki-client on console-fra.rpki-client.org