Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa
File:                     3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier:          4+0LiMy2kZEuibgpS1BtBDnDfixcVw5eBE6hWdsLSu4=
Subject key identifier:   01:BD:8B:10:FB:66:76:3F:57:A3:5B:12:FD:A7:05:4A:37:A7:AD:63
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       6F198608B64AFB77639CC254A2C79EE5949DC2A4
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa
Signing time:             Fri 05 Jan 2024 07:16:42 +0000
ROA not before:           Fri 05 Jan 2024 07:11:42 +0000
ROA not after:            Fri 03 Jan 2025 07:16:42 +0000
asID:                     396998
IP address blocks:        162.222.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 12:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:19:86:08:b6:4a:fb:77:63:9c:c2:54:a2:c7:9e:e5:94:9d:c2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jan  5 07:11:42 2024 GMT
            Not After : Jan  3 07:16:42 2025 GMT
        Subject: CN=01BD8B10FB66763F57A35B12FDA7054A37A7AD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:54:c2:8d:8a:0d:0d:4e:64:b9:1d:e7:8b:d0:
                    8f:9c:68:05:cb:db:97:cd:5d:62:a3:84:6a:95:f4:
                    64:db:ea:ca:05:11:fc:6d:ca:1b:d2:13:c1:e1:37:
                    76:67:9a:ef:b9:e9:18:d3:bc:f9:b0:03:3b:39:fd:
                    70:71:c3:7a:2c:64:72:0e:04:10:1c:4f:7c:44:a4:
                    f5:44:d9:ee:97:48:f9:99:90:70:a4:f5:af:19:48:
                    5a:7e:a4:f1:8c:87:01:32:66:1c:77:fe:a4:f2:fb:
                    b5:16:5a:ef:bb:d1:27:85:f0:8c:5f:ed:bf:81:1b:
                    47:1d:ad:f6:1d:b3:b0:77:75:30:71:31:bc:3d:0b:
                    46:76:56:25:2d:dd:d0:24:26:72:f7:6a:3b:fe:72:
                    3c:81:37:47:fb:67:14:4d:fd:aa:95:65:71:d5:db:
                    b4:11:30:9e:cf:37:6f:58:9f:2f:36:79:03:99:5a:
                    c6:fa:21:41:d6:05:e0:98:66:43:cc:42:88:d5:b3:
                    8e:8b:f5:54:12:d0:e8:bf:a6:ae:ca:19:9c:2c:63:
                    5b:07:31:2c:7f:d3:dd:0b:1c:96:c0:10:e0:6e:cb:
                    7a:dd:14:d0:85:8a:99:35:eb:98:3c:04:8f:a2:24:
                    7d:5e:da:29:eb:16:b4:2b:75:73:c8:5d:e1:a2:b9:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BD:8B:10:FB:66:76:3F:57:A3:5B:12:FD:A7:05:4A:37:A7:AD:63
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:09:25:8c:29:f0:77:31:13:05:f6:73:17:bb:f0:45:34:43:
         9f:70:f8:2e:2f:66:c7:6e:1f:fc:da:8a:60:69:c4:f2:d8:00:
         b8:a1:b7:71:ea:fd:e8:98:f7:f5:1c:a1:27:70:6f:f6:32:7e:
         c3:a5:85:f3:97:cf:b9:35:1f:3b:6e:fb:ba:fe:6f:b1:90:e2:
         5b:39:d3:b4:40:76:60:6d:3b:e8:94:e9:b2:50:c6:d1:b9:c0:
         69:57:b8:0c:55:e2:b7:75:7e:9f:ba:18:d5:15:98:94:70:f7:
         97:aa:34:30:c0:37:3d:68:80:54:b6:4a:22:94:03:bd:83:c3:
         d0:0c:96:60:0d:0e:e0:34:ef:73:ce:e4:6d:8a:0f:2d:32:9a:
         26:3d:8a:4d:8d:3c:7b:be:6d:02:52:9a:8c:de:77:c1:81:30:
         ec:38:49:7c:1c:2a:51:64:e0:00:06:6d:bf:65:fc:d9:59:f9:
         9d:df:51:ba:88:50:a1:63:34:88:fe:79:12:ad:dd:c3:c0:d2:
         4f:3a:a7:c3:47:f4:b8:7d:db:4f:90:8b:7f:33:58:83:9e:a6:
         fb:8c:b9:ea:9a:1c:9c:59:3e:33:5c:51:41:27:7c:71:8b:af:
         13:73:dd:8e:22:44:84:ba:c3:72:43:48:72:1d:01:12:05:9a:
         4d:84:0c:35
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUbxmGCLZK+3djnMJUosee5ZSdwqQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTExYWU5MjEz
YjUwNmI3OGJmOTkyNGFkNDIwHhcNMjQwMTA1MDcxMTQyWhcNMjUwMTAzMDcxNjQy
WjAzMTEwLwYDVQQDEygwMUJEOEIxMEZCNjY3NjNGNTdBMzVCMTJGREE3MDU0QTM3
QTdBRDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VTCjYoNDU5k
uR3ni9CPnGgFy9uXzV1io4RqlfRk2+rKBRH8bcob0hPB4Td2Z5rvuekY07z5sAM7
Of1wccN6LGRyDgQQHE98RKT1RNnul0j5mZBwpPWvGUhafqTxjIcBMmYcd/6k8vu1
Flrvu9EnhfCMX+2/gRtHHa32HbOwd3UwcTG8PQtGdlYlLd3QJCZy92o7/nI8gTdH
+2cUTf2qlWVx1du0ETCezzdvWJ8vNnkDmVrG+iFB1gXgmGZDzEKI1bOOi/VUEtDo
v6auyhmcLGNbBzEsf9PdCxyWwBDgbst63RTQhYqZNeuYPASPoiR9Xtop6xa0K3Vz
yF3horkg+wIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFAG9ixD7ZnY/V6NbEv2nBUo3
p61jMB8GA1UdIwQYMBaAFGvsGu1lCLsHURsBsXdVF5La6yyQMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8yLzZCRUMxQUVENjUwOEJCMDc1MTFCMDFC
MTc3NTUxNzkyREFFQjJDOTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTMwMzVjZC1jNDZkLTQy
MWMtYjllMC1lNmQ0ZGQzMzZkMjEvY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTEx
YWU5MjEzYjUwNmI3OGJmOTkyNGFkNDIuY2VyMIGKBggrBgEFBQcBCwR+MHwwegYI
KwYBBQUHMAuGbnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzIvMzEzNjMyMmUzMjMyMzIyZTMxMzYyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMzM5MzYzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACi3hAwDQYJKoZIhvcNAQEL
BQADggEBAMsJJYwp8HcxEwX2cxe78EU0Q59w+C4vZsduH/zaimBpxPLYALiht3Hq
/eiY9/UcoSdwb/YyfsOlhfOXz7k1Hztu+7r+b7GQ4ls507RAdmBtO+iU6bJQxtG5
wGlXuAxV4rd1fp+6GNUVmJRw95eqNDDANz1ogFS2SiKUA72Dw9AMlmANDuA073PO
5G2KDy0ymiY9ik2NPHu+bQJSmozed8GBMOw4SXwcKlFk4AAGbb9l/NlZ+Z3fUbqI
UKFjNIj+eRKt3cPA0k86p8NH9Lh920+Qi38zWIOepvuMueqaHJxZPjNcUUEnfHGL
rxNz3Y4iRIS6w3JDSHIdARIFmk2EDDU=
-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:44 2024 by rpki-client on console-fra.rpki-client.org