Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31382e302f32332d3234203d3e20343030333034.roa
File:                     3136322e3232322e31382e302f32332d3234203d3e20343030333034.roa (raw, json)
Hash identifier:          9+0779w0A0efahAaPt/empxKrQI1/eu0GXvbAKOpNms=
Subject key identifier:   D1:D2:92:F2:C2:03:8E:4D:13:42:AF:28:01:25:6D:41:AF:80:0A:B2
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       5B568A264F6AD3481094CC499CEADA6E7B74E9D8
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31382e302f32332d3234203d3e20343030333034.roa
Signing time:             Wed 20 Nov 2024 01:45:32 +0000
ROA not before:           Wed 20 Nov 2024 01:40:32 +0000
ROA not after:            Wed 19 Nov 2025 01:45:32 +0000
asID:                     400304
IP address blocks:        162.222.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:56:8a:26:4f:6a:d3:48:10:94:cc:49:9c:ea:da:6e:7b:74:e9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Nov 20 01:40:32 2024 GMT
            Not After : Nov 19 01:45:32 2025 GMT
        Subject: CN=D1D292F2C2038E4D1342AF2801256D41AF800AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:f6:25:87:d7:72:a2:4a:f7:80:07:2c:6e:
                    80:b9:5f:d0:d0:58:60:8a:2d:f9:79:b3:9e:8b:5c:
                    da:58:d6:e8:fa:16:43:48:9a:ed:8e:5d:eb:21:10:
                    f9:8c:f2:ce:46:a0:aa:7b:29:1d:f8:a8:ab:45:ca:
                    62:4c:6c:52:45:76:73:6f:2a:09:92:51:82:bb:c4:
                    34:87:a1:fb:15:81:95:1a:71:03:c2:ec:a2:6d:bd:
                    89:90:c1:68:0f:82:c2:fc:9d:9d:a0:c4:63:ff:29:
                    f3:58:8e:e5:2e:f6:45:0d:45:ec:c5:43:ad:7a:41:
                    e7:3b:df:6a:0a:95:ea:a6:fc:3c:7c:07:ce:0e:ba:
                    75:10:3a:c0:61:88:3d:e2:32:45:97:17:e8:ea:b1:
                    ce:aa:db:cf:75:ae:33:e4:27:fb:55:1f:40:d0:0f:
                    e5:ad:f4:97:58:2d:58:0e:86:44:07:a5:d6:cb:15:
                    7c:bd:b8:6b:5c:d6:95:eb:a9:8f:64:20:c0:20:5b:
                    8e:68:f4:0f:98:0a:ba:c8:0c:28:83:fa:bf:c0:b3:
                    83:b7:7c:cf:d2:0b:59:c5:a9:2c:49:ca:53:9b:b0:
                    cf:ec:93:88:cb:ae:2c:8d:5e:4b:cc:16:b5:37:32:
                    2b:6a:12:a6:a0:33:5c:83:8a:06:30:13:6c:41:18:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D2:92:F2:C2:03:8E:4D:13:42:AF:28:01:25:6D:41:AF:80:0A:B2
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31382e302f32332d3234203d3e20343030333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:f2:1f:58:dd:11:8b:75:dc:34:dd:b0:b5:05:83:0b:48:3a:
         41:da:80:29:a3:17:fa:eb:8b:97:7b:55:7a:30:b4:3c:34:d8:
         45:d4:c8:44:0d:16:04:fa:a8:ce:79:b2:cd:15:f4:ec:18:3c:
         59:99:1c:53:06:43:b4:ea:62:3a:19:be:1f:4c:3c:ad:52:2e:
         d1:c7:f7:cf:62:14:9b:37:ec:5e:be:d7:7a:42:91:29:31:ef:
         5e:b0:ab:8f:2b:c4:58:5d:db:ec:e3:d9:6c:89:af:76:53:5a:
         00:9b:0a:7c:e4:45:1b:e2:8d:e0:9a:69:6f:d1:a2:3a:cc:43:
         64:ad:0f:2a:36:23:1e:fc:71:5d:b8:b2:90:b0:b9:d0:99:ab:
         a4:48:da:89:28:f8:64:99:b1:8b:dd:53:a3:75:c2:68:e1:b1:
         63:0a:b6:9e:9f:fe:33:95:05:59:e5:0c:e6:64:d1:0b:64:21:
         7e:e2:69:aa:e2:d9:9a:58:08:2c:86:a3:1b:d6:92:91:c9:ed:
         c9:46:fc:62:f8:cd:d5:7a:d6:08:9d:7c:e5:aa:11:d8:7d:14:
         de:13:db:80:28:f9:b7:f6:b9:f6:04:2b:40:92:67:02:f5:56:
         47:68:9c:f7:e2:ae:69:16:f1:ab:a1:dd:0a:64:1c:4f:87:f8:
         e0:83:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org