Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32362e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3134362e32362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          aryXw1CTuuzjJ5NRjn1DMS3OMQUSULE/0hfXv1hZi5A=
Subject key identifier:   85:3E:42:34:DE:F0:CB:9D:8E:51:36:36:39:B6:88:CF:E5:C8:91:36
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       6A34FD3E87150DE0896F10DE07C1781CB2A06012
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32362e302f32342d3234203d3e20323132323338.roa
Signing time:             Tue 27 Feb 2024 21:58:07 +0000
ROA not before:           Tue 27 Feb 2024 21:53:07 +0000
ROA not after:            Tue 25 Feb 2025 21:58:07 +0000
asID:                     212238
IP address blocks:        216.146.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:34:fd:3e:87:15:0d:e0:89:6f:10:de:07:c1:78:1c:b2:a0:60:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Feb 27 21:53:07 2024 GMT
            Not After : Feb 25 21:58:07 2025 GMT
        Subject: CN=853E4234DEF0CB9D8E51363639B688CFE5C89136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:fa:61:71:98:96:8b:1c:18:72:49:f8:ab:
                    d9:3d:c6:e0:b2:12:5f:94:66:09:ca:7d:21:4e:ed:
                    6d:0f:31:e3:b7:4b:15:c4:ba:f7:c7:b1:7e:c8:e6:
                    75:c8:da:50:d2:6c:0a:45:19:c3:8d:e1:6a:a6:ec:
                    e2:9e:b1:af:aa:04:97:6c:24:1e:77:92:17:21:19:
                    76:33:70:0e:2c:f3:61:86:d2:32:d5:f5:a2:f2:8e:
                    8d:d6:aa:ed:fc:1c:36:b8:7a:e4:19:8c:ca:c5:69:
                    da:da:83:5f:ee:8b:16:cd:8e:7c:0d:f6:13:ab:c8:
                    65:cf:58:96:cf:df:4e:df:7d:2a:52:0b:89:7d:16:
                    2d:27:c4:e1:d9:79:02:d9:a9:59:b1:25:da:86:ac:
                    59:5c:f8:f1:57:ec:5c:99:96:27:af:0d:14:14:6d:
                    3f:29:de:ab:db:50:8a:2d:58:b3:4d:5c:9f:33:6f:
                    af:95:da:45:9b:74:93:fa:d1:f6:b5:7c:80:c8:a7:
                    7e:78:b5:eb:3c:05:2b:a2:b0:9a:bb:5b:a4:47:bf:
                    5e:8d:1e:30:7a:a5:24:6f:cf:fd:1e:3b:3b:27:ef:
                    3e:fa:de:62:4e:12:e9:71:17:b5:70:2d:a9:0c:3c:
                    7b:0e:1b:ed:69:a5:93:23:2e:09:0c:99:57:31:8d:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:42:34:DE:F0:CB:9D:8E:51:36:36:39:B6:88:CF:E5:C8:91:36
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32362e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:e2:36:b1:47:61:95:74:ca:b6:18:9b:28:b1:bc:60:de:e9:
         59:86:d4:9f:e1:9b:e7:8a:9d:e6:5f:84:0f:f5:df:6f:6c:47:
         28:28:88:9d:ff:69:d0:eb:44:77:3d:b7:6f:07:77:25:c6:d3:
         95:43:f5:0b:be:cf:24:3a:d6:d5:b7:fe:a9:45:50:be:7b:3e:
         76:62:8d:c5:04:54:f5:76:5b:86:e3:3b:65:b6:55:e2:43:b8:
         3c:74:8f:cb:15:21:94:4b:b9:e9:d4:61:80:4e:74:3e:3f:b5:
         2f:a2:af:da:c2:c2:e1:1a:ea:20:ac:52:ad:f0:b4:bd:8f:bc:
         fd:5e:a0:6b:54:23:58:a1:f2:90:ed:fb:f2:64:60:bf:26:6d:
         64:61:f2:e2:3f:19:e7:31:a6:b2:1d:3a:b1:09:90:b4:fc:68:
         ca:ea:70:4a:2a:4d:75:ac:3f:b7:14:23:cb:f2:d9:b9:63:de:
         e2:42:e2:da:3c:06:19:66:04:9c:99:ac:7e:4f:a0:28:67:15:
         e4:88:c5:a0:46:7e:52:94:5b:42:d1:b9:fe:4a:3f:20:fe:1f:
         f6:42:27:44:78:fb:33:c8:e9:75:7f:35:ed:de:6c:d1:5f:c7:
         fe:6c:d4:3d:f8:3b:a0:71:b8:5e:08:06:f6:e5:f7:86:b0:44:
         c9:e5:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:52:58 2024 by rpki-client on console-ams.rpki-client.org