Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39312e302f32342d3234203d3e203633303233.roa
File:                     32332e3133342e39312e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          3HyrOo7OX0lSYu01REFgMu5F8Z0aCnF0NWCzAXZLQzo=
Subject key identifier:   0B:AE:01:DA:01:A2:E3:E7:C8:54:D6:FD:B5:38:13:A4:F5:3C:86:51
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       2BD9144B84474362D3156B385EA00EE87A8D7ACF
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39312e302f32342d3234203d3e203633303233.roa
Signing time:             Wed 23 Oct 2024 22:45:26 +0000
ROA not before:           Wed 23 Oct 2024 22:40:26 +0000
ROA not after:            Wed 22 Oct 2025 22:45:26 +0000
asID:                     63023
IP address blocks:        23.134.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d9:14:4b:84:47:43:62:d3:15:6b:38:5e:a0:0e:e8:7a:8d:7a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct 23 22:40:26 2024 GMT
            Not After : Oct 22 22:45:26 2025 GMT
        Subject: CN=0BAE01DA01A2E3E7C854D6FDB53813A4F53C8651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:62:58:f2:a1:10:cc:0d:29:85:f9:5c:f2:
                    a8:01:75:ad:d8:1e:b0:dd:66:c3:19:d8:a2:a6:77:
                    9e:3a:1b:f8:62:99:bf:05:a2:89:95:98:80:f2:b6:
                    41:67:43:bb:ca:61:ac:23:59:e5:79:2a:6b:ab:c2:
                    0d:08:c5:b8:ac:4e:66:96:32:83:09:72:ef:69:de:
                    60:77:f7:4b:8b:0e:cd:0e:12:25:58:04:5e:53:e3:
                    e2:be:a6:92:8e:f3:e6:e0:fc:c2:98:c4:20:1d:c1:
                    ef:6d:06:68:69:64:4e:88:c5:2f:98:33:17:f5:67:
                    97:26:60:70:5d:8a:20:6c:b1:35:b6:a4:70:7a:3e:
                    28:2a:26:e2:5c:c0:b0:c4:44:b3:83:52:57:53:3f:
                    50:15:83:5d:56:b0:d2:eb:98:74:2b:23:b0:68:57:
                    81:49:79:98:6f:25:b0:be:a7:10:73:d8:53:03:92:
                    fa:4d:95:e4:88:6b:df:53:96:ae:4f:53:dc:8d:90:
                    a0:ec:f7:1c:cd:1d:66:6d:b8:e9:82:2d:8b:4e:08:
                    62:ea:22:e3:4e:62:53:4c:9a:ef:1d:5c:14:b7:79:
                    89:09:dc:38:24:ee:f7:4c:6d:98:8a:e1:32:b2:81:
                    74:49:30:43:97:1f:0b:2a:61:ec:cc:2c:35:fd:f3:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:01:DA:01:A2:E3:E7:C8:54:D6:FD:B5:38:13:A4:F5:3C:86:51
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39312e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:71:f5:f3:38:9f:4b:a4:52:75:cd:65:34:98:0a:c6:4b:53:
         64:7e:99:44:1e:cb:f1:2f:8d:04:6f:01:7e:80:a9:e2:e7:ab:
         54:f5:e1:cf:af:6a:3b:5d:a7:5f:12:d3:0a:20:8b:d6:be:0c:
         f5:17:f3:9a:03:8e:61:d1:c5:28:91:54:f0:4c:15:54:64:dd:
         72:52:5d:e7:3f:ad:1e:aa:e5:98:93:ea:59:cf:b3:e6:01:c2:
         13:a0:d6:33:4b:c9:74:79:42:ed:95:7f:53:dc:8e:7c:7b:f3:
         de:c5:98:2d:a8:22:e5:c5:3a:fd:0b:4b:0c:d6:5b:5d:f3:60:
         9c:d5:67:ce:d5:ac:09:b4:85:d3:f0:25:3f:5b:f2:77:11:93:
         50:75:2a:ef:b8:c2:4d:d9:09:be:2d:06:03:3a:75:07:87:28:
         a0:97:08:39:11:c6:40:f6:71:cc:5e:99:fc:78:34:37:f4:62:
         52:84:dc:7b:31:08:39:f1:13:ea:cd:8d:11:09:97:9d:ed:ed:
         ef:e4:8f:63:1a:88:20:b6:0d:eb:30:20:ad:9d:a3:e5:04:68:
         4b:a7:4d:7d:32:88:ac:f5:f0:92:f6:c3:29:7c:c8:9f:f3:e9:
         4a:80:b9:c3:2d:f7:5f:c9:c3:0e:9e:e5:7d:36:c9:d3:d1:4e:
         62:f1:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org