Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31372e302f32342d3234203d3e203438393235.roa
File:                     3136322e3232322e31372e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier:          6b/enn7LahEfdM9TZv5WmSesvN4WytiKLagtGBVNmzE=
Subject key identifier:   8B:61:C5:F7:C6:EC:C1:12:A2:D1:AF:35:02:9D:ED:BF:17:6D:18:FC
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       72E5A55B92F609EDE491864E66419A0FCD6D0AEF
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31372e302f32342d3234203d3e203438393235.roa
Signing time:             Wed 05 Jun 2024 23:01:10 +0000
ROA not before:           Wed 05 Jun 2024 22:56:10 +0000
ROA not after:            Wed 04 Jun 2025 23:01:10 +0000
asID:                     48925
IP address blocks:        162.222.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e5:a5:5b:92:f6:09:ed:e4:91:86:4e:66:41:9a:0f:cd:6d:0a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jun  5 22:56:10 2024 GMT
            Not After : Jun  4 23:01:10 2025 GMT
        Subject: CN=8B61C5F7C6ECC112A2D1AF35029DEDBF176D18FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:2f:72:24:80:94:07:43:7c:0c:8e:6b:ec:
                    39:66:2c:d6:30:9c:34:ee:49:ec:51:bb:92:09:ca:
                    f9:d5:79:9e:13:c2:fe:16:1a:a7:0d:98:80:90:12:
                    1c:54:66:31:89:82:08:ea:03:d6:c3:fd:88:5c:e2:
                    1d:b0:59:93:51:84:37:80:af:67:c8:ad:d4:c1:c5:
                    a3:68:5e:19:3a:4d:df:4c:80:b8:3d:48:0d:55:94:
                    19:83:03:d6:29:3f:52:e3:a1:4b:0f:88:4f:41:eb:
                    b1:12:9c:8b:4a:83:e3:86:5c:f7:59:a5:96:6b:dc:
                    36:a3:fc:78:5d:3f:b9:ec:67:d2:33:11:99:b9:64:
                    b9:bd:83:21:c1:70:f0:21:bd:60:75:3a:09:bc:69:
                    3d:ac:f1:ec:57:c2:e1:13:e1:17:a2:13:cf:38:eb:
                    e0:c3:f7:b3:54:da:52:05:05:d3:56:80:9c:df:b5:
                    36:19:09:75:1b:58:eb:06:b1:de:94:75:ed:aa:89:
                    cd:5a:dc:26:23:23:7b:5a:b5:36:1e:da:ba:be:de:
                    1b:04:53:af:ad:76:a2:a0:67:ed:13:5f:aa:87:02:
                    bf:5a:63:c6:1f:75:56:26:99:27:f1:74:05:11:48:
                    d1:de:ef:e7:60:16:e4:aa:77:de:c2:40:e9:1a:bd:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:61:C5:F7:C6:EC:C1:12:A2:D1:AF:35:02:9D:ED:BF:17:6D:18:FC
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31372e302f32342d3234203d3e203438393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:24:e1:82:4d:5c:b9:4e:69:52:ee:e7:b4:43:55:53:79:
         5b:21:a8:44:a3:5c:16:69:3c:73:2a:af:d7:ac:96:3f:01:ae:
         50:93:28:fa:47:34:99:74:03:e5:f5:92:76:85:83:b2:9d:1e:
         68:41:87:56:44:19:e7:18:d0:c5:03:38:62:d3:0a:ee:9b:26:
         7d:b2:b3:29:8e:09:ae:ba:dc:e1:16:4b:68:24:27:78:16:26:
         97:66:a9:2d:46:e9:6c:ce:cc:61:6a:f7:39:ee:13:68:43:a2:
         d9:2c:7a:0e:76:01:b2:b9:fb:9e:ed:ba:d2:3e:d0:3e:d7:36:
         ee:dc:56:e8:13:8c:83:47:24:27:b4:bd:d7:6c:a2:40:83:9e:
         62:bd:8f:fd:24:99:0d:51:aa:ab:c3:ca:25:89:2d:9a:6a:3f:
         f2:cb:65:15:29:17:32:d9:28:16:4c:67:6f:9c:ba:92:e8:02:
         fe:57:9f:d2:ac:b5:da:fe:30:28:21:a9:8d:01:5c:34:40:f1:
         88:fc:23:83:c9:e7:d2:4c:67:94:5d:b5:34:58:06:cd:49:e8:
         ad:65:fa:bf:06:8d:bb:f4:80:b7:cb:96:ce:6a:bf:7a:f8:cb:
         55:1a:0c:30:1e:77:16:89:d3:cd:c6:24:2f:33:d8:95:5f:e1:
         9f:94:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:23 2024 by rpki-client on console-ams.rpki-client.org