Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa
File:                     3231362e3134362e32342e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier:          YT55975QLI8Xq/xWkXmYNy8L/OJBcIO8RO644FyEYFc=
Subject key identifier:   F3:B6:26:C9:61:60:2C:8C:78:4E:60:01:FF:75:C9:BD:16:77:19:60
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       3628F144B700479B30A10A7378A03724B9E9431F
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa
Signing time:             Wed 05 Jun 2024 23:32:20 +0000
ROA not before:           Wed 05 Jun 2024 23:27:20 +0000
ROA not after:            Wed 04 Jun 2025 23:32:20 +0000
asID:                     48925
IP address blocks:        216.146.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:28:f1:44:b7:00:47:9b:30:a1:0a:73:78:a0:37:24:b9:e9:43:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jun  5 23:27:20 2024 GMT
            Not After : Jun  4 23:32:20 2025 GMT
        Subject: CN=F3B626C961602C8C784E6001FF75C9BD16771960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:12:01:d5:58:66:b1:11:e6:93:2e:1e:f7:
                    49:97:1b:5b:14:57:f3:ff:d3:44:5e:58:8d:3a:4c:
                    ff:6a:9f:d0:b9:a4:57:a6:39:5c:ca:90:ea:e2:d2:
                    e4:64:1c:bd:ce:ab:98:36:14:5a:9b:03:fd:4f:45:
                    d4:7e:82:e0:93:21:24:1c:a3:95:8e:94:66:0f:e0:
                    7f:39:34:7c:02:44:f7:53:88:e8:2f:4b:ab:0d:fa:
                    ed:27:f6:be:72:e0:ed:9b:83:7f:07:d6:90:28:cb:
                    5b:93:c6:8d:8b:1b:09:f5:10:79:07:eb:7f:c7:b1:
                    e1:24:2e:c7:63:f5:2f:e4:97:56:0c:30:e7:34:3d:
                    97:a5:77:e7:0f:1d:cc:34:39:ea:40:90:61:64:34:
                    8d:34:30:98:60:58:d4:a9:0b:f0:0f:3f:f4:b7:7f:
                    d4:c0:70:ae:ca:e0:15:b8:3e:67:32:e2:5c:3e:81:
                    11:9f:5e:16:d6:d1:15:fa:84:47:e5:a5:4f:03:ec:
                    cf:9f:69:bd:e0:03:11:04:34:c4:a9:99:01:9f:06:
                    ce:7b:7a:2f:34:f0:e6:7a:0f:b9:26:47:b7:0f:d4:
                    f1:60:8d:0c:de:06:97:f6:73:16:84:a6:d9:00:0e:
                    4f:2e:04:88:19:57:14:d0:54:2c:cd:3e:74:ee:5a:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B6:26:C9:61:60:2C:8C:78:4E:60:01:FF:75:C9:BD:16:77:19:60
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:6c:1a:e7:14:f4:6d:50:a9:cd:b7:fc:f3:af:e7:ec:df:c5:
         f0:f7:c0:99:2e:3d:be:3c:7c:7d:fe:ee:73:63:22:ef:ea:b5:
         bc:5c:d4:76:af:b6:0e:d3:8f:9c:d9:8e:c2:ee:b9:d2:57:e3:
         4c:c5:f6:b4:06:27:d5:33:78:8c:ce:47:6b:22:b7:8c:3f:ce:
         e4:ec:66:70:28:a0:0c:09:0f:ab:7b:e0:87:c2:9b:05:be:7e:
         75:d9:e2:ea:ab:36:11:88:38:d9:5a:7f:28:7e:62:04:0b:cc:
         51:d2:bb:92:7c:9e:f3:89:31:e3:a2:e9:67:f1:9e:aa:95:6f:
         07:70:b6:8e:f1:f5:a6:62:bf:64:09:6b:3d:c0:d5:1f:fc:9a:
         3c:e6:da:d3:aa:d7:48:6d:68:4b:8b:22:c4:3a:68:e6:79:2c:
         02:85:82:53:db:48:96:13:0d:d3:30:20:a3:a1:92:3e:38:37:
         2e:56:6b:16:22:22:05:dd:08:a8:47:01:e0:a8:8b:c8:14:32:
         5f:26:32:6a:35:ce:e5:4e:89:6f:e4:99:a2:dc:11:a8:a7:10:
         11:28:7c:be:a7:59:b4:22:c5:6e:5e:0e:58:80:16:30:56:5a:
         60:86:a1:59:81:da:cb:bd:f1:08:a3:e7:df:61:cf:04:6c:5e:
         de:bc:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org