Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203236353438.roa
File:                     3231362e3134362e32372e302f32342d3234203d3e203236353438.roa (raw, json)
Hash identifier:          Kgwhq8iaVrtk7DFkLCcwuxc8/vreIVJ2Hjfp8LsrakI=
Subject key identifier:   69:97:C1:A1:F7:1B:D3:17:8A:54:35:A2:77:64:07:34:CA:99:05:35
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       7A6EA426FB612AD780C4013DA673DA4CBA19820E
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203236353438.roa
Signing time:             Tue 24 Oct 2023 23:03:14 +0000
ROA not before:           Tue 24 Oct 2023 22:58:14 +0000
ROA not after:            Tue 22 Oct 2024 23:03:14 +0000
asID:                     26548
IP address blocks:        216.146.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 09:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6e:a4:26:fb:61:2a:d7:80:c4:01:3d:a6:73:da:4c:ba:19:82:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct 24 22:58:14 2023 GMT
            Not After : Oct 22 23:03:14 2024 GMT
        Subject: CN=6997C1A1F71BD3178A5435A277640734CA990535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:70:74:0b:45:02:0a:4c:c4:db:93:c4:8e:
                    b3:06:e0:a0:da:89:99:0a:16:4b:a4:03:7e:df:61:
                    ba:78:34:ed:db:e4:a3:75:38:2f:a6:5e:06:6d:95:
                    a8:9d:b9:cd:32:3b:61:24:66:19:39:7c:78:01:26:
                    d8:4f:6c:10:cb:bc:f0:56:70:ab:cc:f3:83:38:ce:
                    ff:68:66:f6:0f:a7:c9:9e:82:fc:a9:12:5b:ec:57:
                    72:d1:e4:20:68:2d:36:d7:9f:c2:60:6a:e9:04:c7:
                    d4:27:d7:82:76:6f:a8:be:ba:81:b8:2c:4e:22:e8:
                    14:d8:fd:1d:62:a2:9e:36:37:60:52:59:11:1c:01:
                    2d:4a:9b:b6:22:bb:45:32:1a:1f:89:65:5d:6e:09:
                    bb:2b:b9:28:f0:37:22:f6:f4:d2:48:f3:be:48:aa:
                    c4:01:ca:0c:04:31:72:64:a8:37:68:46:6d:2b:3d:
                    6a:04:31:3f:17:4f:28:bf:2e:b7:9f:fa:9f:37:ca:
                    65:71:ae:95:5d:77:aa:99:14:41:45:3d:d8:84:11:
                    92:c3:3e:33:4d:fa:11:c8:fe:e6:39:75:3b:48:52:
                    da:ed:da:6a:11:aa:42:21:bb:53:46:ed:9c:9b:a7:
                    01:9b:d0:b7:69:34:e5:cf:48:9f:08:21:7b:18:23:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:97:C1:A1:F7:1B:D3:17:8A:54:35:A2:77:64:07:34:CA:99:05:35
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203236353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:b5:d1:97:51:33:f1:73:f1:9a:e0:86:9c:18:d1:b0:6f:93:
         c0:53:02:b2:3a:ff:b4:70:f4:f3:56:4e:97:e7:ff:ee:04:4d:
         ef:fd:93:f9:d3:9a:6a:95:40:4c:4a:11:44:4c:e9:1f:1e:28:
         b7:a7:8d:7e:ac:48:03:e4:48:3c:f3:e8:11:45:3b:87:9f:dc:
         58:2a:b7:33:e4:e5:97:84:f6:74:b3:00:e1:3a:86:f4:64:f5:
         45:67:18:ba:68:12:00:75:ad:8b:c6:c7:ed:13:a4:17:3f:be:
         ef:19:58:1e:d6:22:31:c6:66:fe:28:3a:7d:3e:96:53:eb:05:
         6a:ba:12:1f:3c:31:9a:f9:43:1d:2d:66:d6:c6:40:ad:a2:66:
         ce:ad:27:13:db:90:84:34:24:1a:b1:4d:bd:b7:01:b7:37:af:
         47:40:c6:f2:75:b7:51:c5:0c:50:70:f6:cd:bb:4a:2c:a4:88:
         f0:11:3a:a9:a7:fe:5f:d9:ba:24:81:7a:c2:24:12:21:fa:14:
         27:81:9f:d5:09:f7:e3:22:fe:de:69:aa:fc:16:74:96:29:d4:
         15:91:95:0e:45:55:c2:46:a6:58:fb:9e:32:b3:45:6d:db:2b:
         3b:02:69:b1:db:f4:90:80:32:88:88:31:71:e4:2d:33:f2:18:
         d0:1e:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 09:49:12 2024 by rpki-client on console-fra.rpki-client.org