Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32352e302f32342d3234203d3e203633303138.roa
File:                     3231362e3134362e32352e302f32342d3234203d3e203633303138.roa (raw, json)
Hash identifier:          n4Y8S9z2dZErxvIaqu5y8s9Uc5iz3ukoeHJfq2Y6WOs=
Subject key identifier:   8E:19:FD:F4:24:D9:4E:BA:F4:A0:D0:A4:79:7C:72:F5:C1:E1:69:51
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       1CFC10697729FA03F7BF4A3993F28AD9C3FABE71
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32352e302f32342d3234203d3e203633303138.roa
Signing time:             Wed 22 Nov 2023 22:14:39 +0000
ROA not before:           Wed 22 Nov 2023 22:09:39 +0000
ROA not after:            Wed 20 Nov 2024 22:14:39 +0000
asID:                     63018
IP address blocks:        216.146.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 10:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fc:10:69:77:29:fa:03:f7:bf:4a:39:93:f2:8a:d9:c3:fa:be:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Nov 22 22:09:39 2023 GMT
            Not After : Nov 20 22:14:39 2024 GMT
        Subject: CN=8E19FDF424D94EBAF4A0D0A4797C72F5C1E16951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:8a:02:32:d4:5c:4d:ed:6c:bc:dc:2a:58:
                    cd:4f:5c:1e:88:1b:ee:cf:bf:f7:56:31:c4:62:04:
                    84:c7:01:cc:f3:72:6f:ca:e8:19:77:20:3a:f8:e0:
                    e4:51:d3:b8:e1:fd:e8:d9:3e:44:61:91:14:c6:4d:
                    f1:88:46:d2:0b:a0:ea:1a:05:41:9b:ab:41:49:db:
                    c1:5c:87:6a:be:d0:cd:78:52:24:64:3c:d1:64:df:
                    a5:df:c7:05:0a:07:a7:c3:c2:32:49:b9:5d:b3:17:
                    4d:61:7a:87:c7:e3:aa:2c:ff:a2:45:50:94:c6:5a:
                    02:cd:af:ec:1b:7d:45:5f:7e:61:5a:29:97:13:de:
                    ca:81:e0:86:c7:3f:d2:37:a7:57:02:72:9f:bf:0d:
                    02:61:a8:65:4d:ef:56:dd:d9:30:50:40:2d:ac:0d:
                    e7:62:0b:8f:ec:62:f7:41:dd:bb:7f:a5:a4:73:70:
                    0e:91:14:c2:53:b1:0f:e3:3e:fd:ff:c4:1a:06:51:
                    50:93:4a:81:91:ea:74:2f:22:b0:d1:2b:38:63:b0:
                    02:50:69:e7:a5:8d:f9:2d:27:e2:be:ee:82:8d:d2:
                    84:6b:16:1d:75:f0:c5:fc:49:d7:c8:ae:ad:e8:c3:
                    1c:7a:b8:a6:f4:a1:c3:e8:0f:6d:5c:63:a8:d5:c1:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:19:FD:F4:24:D9:4E:BA:F4:A0:D0:A4:79:7C:72:F5:C1:E1:69:51
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32352e302f32342d3234203d3e203633303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:70:c4:b0:28:63:91:f4:ed:e0:bd:a6:c6:82:e2:84:60:
         96:f8:27:27:82:90:4b:1f:d9:a0:24:33:30:7a:b1:de:93:f4:
         ed:e8:96:56:44:5c:59:e7:73:4d:e3:fe:69:f3:5a:d6:c0:09:
         5c:a2:62:b6:60:b1:55:83:08:e9:aa:96:7e:4c:6d:ea:8f:2a:
         d9:a4:18:82:7c:f2:1b:9f:5d:f4:05:fe:95:87:0e:3a:fe:cd:
         e6:de:49:09:23:f2:5c:e7:bf:69:e0:87:df:3b:ac:8b:47:57:
         3d:00:e5:50:23:26:70:38:66:17:c4:77:26:dc:42:f2:23:a1:
         63:71:da:81:fe:57:4c:2e:0b:83:3e:45:d4:17:57:fa:c4:f9:
         ce:d7:25:79:9c:66:ce:f8:b5:e6:bd:bd:00:d8:c1:99:63:fa:
         40:f1:45:c9:0a:9f:8a:d1:64:23:1d:f7:b3:5d:48:10:d5:5a:
         d7:01:bb:06:d9:bd:21:2f:72:62:39:98:ca:29:7b:31:aa:34:
         32:39:30:e2:e5:05:95:39:4d:4c:cd:80:62:ff:0d:9e:6d:3c:
         cc:a6:97:df:ba:6c:7b:27:4e:a8:f0:f6:c0:fc:af:06:4f:08:
         5e:15:a4:e2:27:a2:2e:4c:4d:12:33:9a:1c:93:32:a4:da:fa:
         82:25:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 08:05:07 2024 by rpki-client on console-fra.rpki-client.org