Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e203330363434.roa
File:                     3136322e3232322e31362e302f32342d3234203d3e203330363434.roa (raw, json)
Hash identifier:          Ku43YtADusW+C+c9A55aoyBnOl0j+f3aXvWpZzp018Q=
Subject key identifier:   7B:A9:2C:CA:D3:AB:33:50:42:88:20:D5:9C:F9:AD:EA:5E:A2:FD:17
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       775333D8D27949F78AC2D6F4A469275E01AB95B8
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e203330363434.roa
Signing time:             Fri 05 Jan 2024 07:16:52 +0000
ROA not before:           Fri 05 Jan 2024 07:11:52 +0000
ROA not after:            Fri 03 Jan 2025 07:16:52 +0000
asID:                     30644
IP address blocks:        162.222.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:53:33:d8:d2:79:49:f7:8a:c2:d6:f4:a4:69:27:5e:01:ab:95:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jan  5 07:11:52 2024 GMT
            Not After : Jan  3 07:16:52 2025 GMT
        Subject: CN=7BA92CCAD3AB3350428820D59CF9ADEA5EA2FD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:6f:62:10:94:11:bc:b0:39:cf:c4:b4:fb:
                    76:8c:c4:5b:c3:fa:be:e2:39:50:d1:28:ea:65:a8:
                    45:55:cb:7b:83:80:29:f9:b2:31:28:b6:58:80:b2:
                    cf:5b:52:9f:51:8f:01:93:05:f2:00:47:93:f7:18:
                    ed:be:8f:89:69:b8:f5:5c:ba:68:5e:7a:02:c5:1f:
                    dd:1d:20:b5:9c:98:db:50:7f:67:cd:d7:63:bb:99:
                    80:a4:4a:05:b2:e1:2c:62:53:68:ca:5d:f7:26:ef:
                    fb:08:75:ad:8d:8c:6c:48:7c:1c:42:cc:ca:92:66:
                    81:71:0b:51:ca:cd:a5:bb:58:ef:20:2e:24:bb:9e:
                    22:81:0c:a5:25:d4:05:78:13:5a:43:d9:9f:f9:a4:
                    f0:d1:bd:c6:69:2b:9f:b3:c2:56:cb:7c:df:22:73:
                    98:52:f7:af:5a:65:24:be:05:0f:81:84:6a:2b:e7:
                    44:48:f8:02:19:33:9a:35:80:5c:7a:c9:79:fa:53:
                    92:f9:b2:39:b7:5e:fa:36:28:c6:fe:72:39:66:7b:
                    a1:89:bd:79:88:39:44:da:02:25:9a:24:b9:6f:1d:
                    3d:3d:99:8c:0a:8d:5e:bd:15:3d:69:ac:3a:8a:ea:
                    37:63:07:41:82:a6:ed:6a:19:ac:2f:d1:15:ae:6d:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A9:2C:CA:D3:AB:33:50:42:88:20:D5:9C:F9:AD:EA:5E:A2:FD:17
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e203330363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:1c:ca:08:ea:c0:d8:01:2b:a1:83:42:1d:70:dc:a8:a9:21:
         c6:4a:f5:48:eb:17:88:46:7a:45:12:21:71:69:0a:d9:2c:05:
         0e:6f:3a:91:1c:3b:62:65:07:1c:56:ea:cd:99:f0:73:36:1c:
         15:10:4e:b4:32:ab:a8:9d:77:96:6c:1b:17:b3:74:33:f5:45:
         8a:10:fe:07:19:81:9f:7c:bc:20:56:47:5e:55:7d:5e:e0:7a:
         5f:31:b1:75:c2:2a:78:21:2d:de:77:6e:f3:cb:b2:79:34:b5:
         bc:6e:ba:b8:d1:cf:37:24:0e:56:76:8a:20:9d:a8:05:50:c6:
         ea:e0:e1:99:b0:05:c5:a4:2a:f9:c0:a2:ac:92:91:d9:5b:06:
         80:38:1c:d3:08:dd:a0:37:d7:93:0c:c2:45:3c:79:5a:15:0e:
         6a:1a:e6:55:22:e5:70:1d:ea:b3:6e:ad:96:27:7b:f4:40:69:
         cd:c9:12:9f:ce:31:4e:ad:14:9f:92:7a:69:75:cd:32:04:69:
         ab:a3:36:a0:f9:04:d2:32:c7:8a:98:74:2c:cc:cb:45:92:20:
         df:16:48:25:b2:97:4c:92:16:fa:9a:70:d2:fd:3e:2a:2b:26:
         88:e0:5f:5b:6a:14:b5:76:99:89:b4:2e:70:5d:26:aa:27:0c:
         68:b3:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org