Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20333936393938.roa
File:                     3231362e3134362e32342e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier:          V70+LUuKOCRLkotLWs1lgA5MNLOZhLcyrbfbX86fCVw=
Subject key identifier:   17:68:E6:D7:8D:8E:08:03:4C:12:39:94:94:1C:8A:D6:31:0E:1F:00
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       5ABBFDD513DB475B1CFC64B8CB7A1C5E553AEB82
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20333936393938.roa
Signing time:             Sat 12 Aug 2023 00:49:27 +0000
ROA not before:           Sat 12 Aug 2023 00:44:27 +0000
ROA not after:            Sat 10 Aug 2024 00:49:27 +0000
asID:                     396998
IP address blocks:        216.146.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Jun 2024 00:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bb:fd:d5:13:db:47:5b:1c:fc:64:b8:cb:7a:1c:5e:55:3a:eb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Aug 12 00:44:27 2023 GMT
            Not After : Aug 10 00:49:27 2024 GMT
        Subject: CN=1768E6D78D8E08034C123994941C8AD6310E1F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6d:d0:79:70:5a:7e:da:85:8b:c7:e8:1f:b1:
                    1c:7f:a3:4d:e5:44:91:f3:13:df:fd:77:47:5e:46:
                    e2:cc:21:23:3e:dd:a9:67:91:78:99:2b:92:8e:10:
                    cb:08:5e:3f:6d:71:e9:3b:11:ee:3a:5e:8e:bd:e6:
                    a2:7f:1c:e6:bc:53:17:f7:29:46:cf:15:5c:44:05:
                    18:c1:5c:8a:75:12:fa:13:93:3f:b9:10:dd:ea:eb:
                    b9:0d:4d:b8:99:45:5f:2b:09:4d:cf:89:4f:51:c1:
                    8e:d1:14:f6:63:66:5f:92:35:ff:7c:8c:c4:01:45:
                    df:39:cd:58:ac:77:39:97:d1:f2:d9:5a:d3:8d:d1:
                    ca:1c:b2:b5:a8:df:18:ad:f9:03:eb:0d:59:60:fa:
                    a3:ba:22:71:a0:d8:61:9a:95:cf:9d:d9:f0:b4:7b:
                    58:47:34:0d:d4:68:b6:50:ef:77:f0:84:a2:04:29:
                    08:4a:b9:89:ff:30:4d:41:e0:35:71:92:bb:a0:d8:
                    9b:3c:d5:a2:cf:10:db:33:a2:b2:b6:c1:cd:e6:57:
                    28:91:68:d1:9d:fb:18:19:43:af:8b:b1:6d:25:2e:
                    7f:d6:58:9f:4c:27:88:c6:3b:7a:c0:21:57:f7:11:
                    fc:73:6e:bc:34:01:b2:2c:85:ee:a5:d7:29:9d:d1:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:68:E6:D7:8D:8E:08:03:4C:12:39:94:94:1C:8A:D6:31:0E:1F:00
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20333936393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:6b:af:87:0a:59:ef:34:61:d7:b5:08:e3:ad:1d:9e:26:61:
         7c:b6:fd:94:26:da:db:1a:9f:b4:8b:b8:50:a6:7f:51:d2:38:
         8c:73:93:a0:e8:d0:9c:ba:e7:88:47:85:5d:6c:66:66:6f:44:
         5b:ab:a0:92:3f:0d:c9:05:96:79:68:d3:89:aa:3c:fc:51:93:
         85:49:34:26:79:f4:85:ee:b8:e4:0f:de:2f:8c:ec:02:f0:b9:
         14:c3:16:a2:7f:2c:3a:c7:45:46:ad:14:85:0b:7d:f6:d0:8d:
         64:d6:5e:30:7f:3c:82:8e:ca:05:57:f8:7d:e9:b0:e8:f3:32:
         69:dc:8d:9e:32:77:99:71:36:74:66:44:52:9b:4d:73:4e:dc:
         1f:17:20:89:e9:9e:8f:82:e4:c5:dc:22:7b:da:c7:3e:00:6d:
         a1:87:7d:a5:fc:01:66:0b:5c:5f:4d:51:da:3c:03:7e:d7:0f:
         df:08:ce:d4:ba:5e:aa:72:af:84:3e:dd:7c:01:fe:ef:a6:2f:
         ef:9c:18:c7:a2:22:ac:34:1e:db:1d:57:7c:5a:52:da:99:bb:
         6d:ee:8d:11:f3:fd:9b:5e:49:71:55:ac:3c:fb:21:28:d9:74:
         18:6b:9c:61:40:31:e6:38:ec:bd:5b:ce:2e:f6:6f:0b:ca:1c:
         8b:88:bd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:10:26 2024 by rpki-client on console-ams.rpki-client.org