Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39332e302f32342d3234203d3e203633303233.roa
File:                     32332e3133342e39332e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          n7a//SKxkx5VIOlWI04R7VCtajmsLeNcdPIesovNdOk=
Subject key identifier:   56:5F:5A:98:6B:71:AB:09:AC:08:F2:02:36:1F:BB:80:15:E0:9B:CD
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       22AC2E85A1B010239DCCE17CEB77237EBE7DB885
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39332e302f32342d3234203d3e203633303233.roa
Signing time:             Wed 23 Oct 2024 22:45:26 +0000
ROA not before:           Wed 23 Oct 2024 22:40:26 +0000
ROA not after:            Wed 22 Oct 2025 22:45:26 +0000
asID:                     63023
IP address blocks:        23.134.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ac:2e:85:a1:b0:10:23:9d:cc:e1:7c:eb:77:23:7e:be:7d:b8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct 23 22:40:26 2024 GMT
            Not After : Oct 22 22:45:26 2025 GMT
        Subject: CN=565F5A986B71AB09AC08F202361FBB8015E09BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:cf:7a:17:3b:73:f1:7c:54:e2:f8:46:c0:
                    d7:67:18:df:fc:98:c4:30:4e:9e:a8:5d:36:1d:ee:
                    a5:7f:f2:7b:d3:5d:35:d4:54:78:78:41:c4:e8:e1:
                    4a:cb:a0:7f:6a:7b:9f:90:eb:64:82:11:69:e7:52:
                    0b:a3:30:22:68:84:7a:e2:b0:d2:2b:e4:8d:3e:7a:
                    55:d0:3a:0b:7c:60:6e:ee:d9:1c:8f:c8:71:6d:64:
                    4f:28:9b:19:78:49:c0:57:41:0d:c1:05:3e:aa:36:
                    b2:57:f2:ce:ae:cd:31:f5:4f:52:9b:06:fd:2a:7a:
                    a2:e1:48:d4:5e:99:f7:a2:37:a1:96:d5:b2:e8:28:
                    fe:e2:46:ef:d9:ca:6d:98:ab:e8:19:e9:69:9b:cc:
                    c0:6d:4d:24:b9:c2:d8:69:ed:09:67:4a:f1:34:62:
                    3b:e7:9e:07:93:d7:19:a8:8b:9f:2a:59:99:62:d4:
                    d6:dc:02:62:d9:0c:7a:74:c7:b0:b9:91:a5:ab:1d:
                    e2:f7:20:a0:c0:a3:54:b5:1c:e1:4c:20:24:70:24:
                    3f:fa:5a:71:fd:24:49:a6:70:98:48:83:df:28:7b:
                    39:76:14:ab:9b:c2:31:98:b4:44:c5:1f:bf:ee:ef:
                    ca:f7:99:da:a3:bd:12:4e:fa:7a:98:94:1e:77:4f:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5F:5A:98:6B:71:AB:09:AC:08:F2:02:36:1F:BB:80:15:E0:9B:CD
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39332e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:43:37:10:8c:0e:3e:db:ca:04:92:79:4d:e9:de:c1:0d:ec:
         9e:b0:b9:69:9f:22:42:ff:15:72:93:3e:f1:69:a4:45:2e:87:
         8e:44:8c:68:a1:cb:0e:57:98:ef:a4:b6:72:53:dc:63:90:6d:
         fa:e9:da:a7:58:bc:31:99:fb:2b:53:a4:94:db:fa:a2:a8:d7:
         b7:dd:23:36:91:db:e1:c5:15:88:d1:f3:b5:b2:cc:74:1f:2e:
         64:e6:7a:c3:8d:42:64:6a:ba:bb:4e:d0:48:35:21:14:86:e4:
         8d:8d:bf:d2:95:e6:b3:6b:9a:c3:4a:e0:e6:e4:79:29:6f:b4:
         75:27:2b:1a:57:d8:ba:12:a0:8c:b7:f8:29:a8:f0:5d:1d:64:
         cf:09:b8:5c:99:8b:5f:a9:70:79:83:03:b7:c0:91:94:8e:46:
         84:bc:1c:c7:bf:0f:d4:10:ff:a5:b1:4a:5b:9e:55:fd:e4:54:
         9e:3a:46:a5:e3:e6:08:63:f2:11:83:b6:48:e3:28:fb:5b:e7:
         50:09:40:ec:08:57:92:2a:3c:a7:64:9a:26:e5:95:bd:37:4e:
         f5:7e:9f:e2:55:c3:d9:50:e5:3c:2b:b6:4a:79:f9:9b:6d:c5:
         68:cb:b4:30:3c:24:65:bb:c1:08:02:1f:96:83:3a:71:28:7c:
         cd:cf:02:c8
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUIqwuhaGwECOdzOF863cjfr59uIUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTExYWU5MjEz
YjUwNmI3OGJmOTkyNGFkNDIwHhcNMjQxMDIzMjI0MDI2WhcNMjUxMDIyMjI0NTI2
WjAzMTEwLwYDVQQDEyg1NjVGNUE5ODZCNzFBQjA5QUMwOEYyMDIzNjFGQkI4MDE1
RTA5QkNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+LPehc7c/F8
VOL4RsDXZxjf/JjEME6eqF02He6lf/J701011FR4eEHE6OFKy6B/anufkOtkghFp
51ILozAiaIR64rDSK+SNPnpV0DoLfGBu7tkcj8hxbWRPKJsZeEnAV0ENwQU+qjay
V/LOrs0x9U9Smwb9Knqi4UjUXpn3ojehltWy6Cj+4kbv2cptmKvoGelpm8zAbU0k
ucLYae0JZ0rxNGI7554Hk9cZqIufKlmZYtTW3AJi2Qx6dMewuZGlqx3i9yCgwKNU
tRzhTCAkcCQ/+lpx/SRJpnCYSIPfKHs5dhSrm8IxmLRExR+/7u/K95nao70STvp6
mJQed081nQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFZfWphrcasJrAjyAjYfu4AV
4JvNMB8GA1UdIwQYMBaAFGvsGu1lCLsHURsBsXdVF5La6yyQMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8yLzZCRUMxQUVENjUwOEJCMDc1MTFCMDFC
MTc3NTUxNzkyREFFQjJDOTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTMwMzVjZC1jNDZkLTQy
MWMtYjllMC1lNmQ0ZGQzMzZkMjEvY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTEx
YWU5MjEzYjUwNmI3OGJmOTkyNGFkNDIuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYI
KwYBBQUHMAuGanJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzIvMzIzMzJlMzEzMzM0MmUzOTMzMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzYzMzMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeGXTANBgkqhkiG9w0BAQsFAAOC
AQEAQ0M3EIwOPtvKBJJ5TenewQ3snrC5aZ8iQv8VcpM+8WmkRS6HjkSMaKHLDleY
76S2clPcY5Bt+unap1i8MZn7K1OklNv6oqjXt90jNpHb4cUViNHztbLMdB8uZOZ6
w41CZGq6u07QSDUhFIbkjY2/0pXms2uaw0rg5uR5KW+0dScrGlfYuhKgjLf4Kajw
XR1kzwm4XJmLX6lweYMDt8CRlI5GhLwcx78P1BD/pbFKW55V/eRUnjpGpePmCGPy
EYO2SOMo+1vnUAlA7AhXkio8p2SaJuWVvTdO9X6f4lXD2VDlPCu2Snn5m23FaMu0
MDwkZbvBCAIfloM6cSh8zc8CyA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org