Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39322e302f32342d3234203d3e203633303233.roa
File:                     32332e3133342e39322e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          f0lcTieO9BLj4OkQnxsAQpgRuqnfNqC3kyE3dkMGDqs=
Subject key identifier:   65:03:58:15:3F:E3:D5:BB:C8:C4:8C:35:49:2A:B2:49:C4:7B:17:66
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       3363C27AAFC94F184A659066CA69A544E91DE169
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39322e302f32342d3234203d3e203633303233.roa
Signing time:             Wed 23 Oct 2024 22:45:26 +0000
ROA not before:           Wed 23 Oct 2024 22:40:26 +0000
ROA not after:            Wed 22 Oct 2025 22:45:26 +0000
asID:                     63023
IP address blocks:        23.134.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 02:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:63:c2:7a:af:c9:4f:18:4a:65:90:66:ca:69:a5:44:e9:1d:e1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct 23 22:40:26 2024 GMT
            Not After : Oct 22 22:45:26 2025 GMT
        Subject: CN=650358153FE3D5BBC8C48C35492AB249C47B1766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:f0:11:9d:ba:2a:1f:b8:cd:ac:7c:8a:91:
                    1f:83:da:83:70:b7:48:2a:47:20:66:0d:82:ad:f9:
                    18:4f:16:e1:f3:5a:45:71:37:76:39:a3:2f:73:3a:
                    32:ec:9d:a5:cb:48:6a:4e:b2:1f:28:09:a0:db:cb:
                    fc:9e:72:ca:6a:95:e7:c1:76:c0:76:5b:69:4b:b9:
                    a1:44:8e:c0:1d:58:97:1f:e1:5d:3f:12:c4:3e:55:
                    3c:86:7a:f0:44:dc:b3:f0:fd:34:62:32:6a:42:e6:
                    b1:72:cb:b0:85:e8:b8:5c:2a:9e:d9:8b:6e:44:ec:
                    96:fe:82:ee:08:34:d6:79:b2:2d:32:d9:47:d4:bb:
                    7e:0c:6b:06:30:d7:8b:8d:78:30:aa:15:1b:b9:8b:
                    79:e5:ac:54:80:2c:6c:1b:96:f5:6d:ea:a1:91:cc:
                    69:0b:f0:c6:b4:9c:a9:4a:1c:a6:ed:07:f8:91:a2:
                    2c:5d:aa:75:76:a4:b2:9e:9f:a0:ad:bc:be:39:11:
                    81:c6:58:8b:63:7e:32:0c:6b:9a:4d:96:0e:5b:a9:
                    82:34:8d:ef:6c:95:53:65:1b:c0:65:90:ca:9d:6c:
                    96:04:fc:f4:12:35:fb:ac:9d:a9:0a:96:7a:58:ba:
                    2f:3a:31:bc:5b:50:9e:26:86:09:26:7d:78:d1:84:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:03:58:15:3F:E3:D5:BB:C8:C4:8C:35:49:2A:B2:49:C4:7B:17:66
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39322e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:80:f6:d3:cc:40:ae:f3:5a:28:aa:cd:54:28:bf:17:fa:24:
         fe:c0:63:e9:de:5b:b7:da:3f:e2:53:01:96:b9:91:6f:d9:86:
         2f:55:59:38:d9:c5:10:d5:85:f5:8a:af:3a:40:aa:8e:44:78:
         e8:7b:df:95:cf:c7:4a:37:69:c0:70:21:31:fb:3f:2a:19:2c:
         c9:66:7e:ff:2f:b1:19:5f:8a:cf:76:96:c7:9f:51:a9:35:37:
         0a:a6:c5:8e:ab:17:bd:08:88:11:ab:b7:78:10:34:d6:e6:7b:
         a1:47:37:52:69:d6:d4:1f:fd:12:37:c5:a3:50:a9:de:20:13:
         d3:ab:8a:de:c0:28:9b:f6:d3:19:92:36:e7:11:5a:36:14:e1:
         61:97:c0:dd:55:d0:e6:89:b1:74:ee:0d:47:cd:92:74:75:f9:
         1a:23:69:69:f5:ec:6f:5b:d6:04:c2:dc:6d:cd:7f:1b:d8:f4:
         91:1a:cf:70:b5:83:cf:74:50:94:9d:27:54:7f:ab:62:dd:e9:
         52:1f:5e:c2:c5:45:72:3d:c1:33:fd:04:48:79:7d:47:4b:7b:
         a0:b3:84:12:08:31:62:b7:4c:d5:d3:74:90:6f:7a:d8:09:6d:
         34:ae:f0:9a:94:94:2c:df:ec:c4:50:37:f5:c1:50:f1:e0:6c:
         ff:a5:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 03:20:14 2024 by rpki-client on console-fra.rpki-client.org