Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39342e302f32342d3234203d3e203633303233.roa
File:                     32332e3133342e39342e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          ZJllhihRS+V0LGKEzyKK10HSHq2eL4lkLh9GXtGoGd4=
Subject key identifier:   6D:E4:12:55:D5:AF:59:C7:34:31:FE:D7:1D:4F:B9:39:45:76:F0:2F
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       0CC735864B5155E67B109FEBD4E9FA8ADBF8CFD7
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39342e302f32342d3234203d3e203633303233.roa
Signing time:             Wed 23 Oct 2024 22:45:26 +0000
ROA not before:           Wed 23 Oct 2024 22:40:26 +0000
ROA not after:            Wed 22 Oct 2025 22:45:26 +0000
asID:                     63023
IP address blocks:        23.134.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 02:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c7:35:86:4b:51:55:e6:7b:10:9f:eb:d4:e9:fa:8a:db:f8:cf:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct 23 22:40:26 2024 GMT
            Not After : Oct 22 22:45:26 2025 GMT
        Subject: CN=6DE41255D5AF59C73431FED71D4FB9394576F02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:9a:1a:ce:24:6e:11:58:20:25:41:aa:f3:
                    bc:5c:56:7c:c5:ec:68:13:3e:39:cc:5b:9c:99:9c:
                    5b:e1:8c:59:f9:9a:12:79:f3:8a:c4:05:45:87:d9:
                    4a:23:75:30:a7:17:3d:47:5b:ce:b1:c6:3e:14:9d:
                    14:fa:6a:2a:bc:71:6a:4a:6b:6b:53:d2:bb:56:37:
                    17:20:15:dc:b3:44:b9:77:a2:4c:44:0f:16:e0:71:
                    8c:a3:28:b7:0a:68:96:8f:16:c3:45:c0:b3:cd:99:
                    22:12:a2:b1:59:45:14:51:f8:cb:0d:c7:f3:da:ad:
                    f9:cf:9c:dd:14:f1:6a:ff:80:92:27:60:98:38:95:
                    e1:22:72:6e:18:7a:54:e5:2b:9c:40:29:9a:c2:c5:
                    02:67:46:7b:a0:a0:2b:b0:97:af:68:18:65:b7:f2:
                    74:01:7b:a8:fc:b3:d0:e0:f0:0e:5f:eb:1b:32:b4:
                    e5:a7:38:46:b2:36:0c:c6:02:47:35:c4:d0:e4:44:
                    1e:6d:4f:5d:66:60:d1:df:1e:9c:08:8e:e1:87:d7:
                    ca:bf:ed:72:91:6a:8d:c7:85:92:8f:d6:11:40:20:
                    2b:bc:51:82:81:88:c9:23:ae:7d:a7:24:e8:78:20:
                    61:17:e5:c5:61:0a:ff:27:43:36:02:c8:50:39:2f:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E4:12:55:D5:AF:59:C7:34:31:FE:D7:1D:4F:B9:39:45:76:F0:2F
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39342e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:50:1d:e1:d5:cf:9b:0d:34:3e:9c:03:bf:83:7c:c4:a5:
         42:04:98:d9:c7:c2:11:40:ec:b9:58:7a:4d:5c:29:dd:0c:a5:
         6c:68:0e:23:8a:97:84:7e:a8:ec:c7:6b:49:86:5e:c9:d2:b0:
         f8:7b:97:8f:59:3a:6b:07:18:b8:12:b3:bc:44:0e:29:fd:1b:
         9c:dd:9e:85:d6:6a:14:63:54:fb:ff:7c:5e:c3:a0:8b:3f:cd:
         1c:4a:fb:40:5b:4d:cb:5f:c2:2b:e7:0f:75:6a:58:b7:ce:e5:
         18:f0:a0:b4:8c:67:75:68:cf:73:f5:10:c5:05:88:92:7c:96:
         6d:ad:bc:63:77:c9:36:49:94:36:9d:92:20:80:a5:15:01:e8:
         9c:5a:02:7d:2d:8d:ee:fc:ce:76:a7:33:84:38:cb:db:1f:5f:
         c2:17:8b:b1:0b:b3:a7:c2:32:8b:bc:b7:94:0f:b8:7a:4b:88:
         45:e7:0e:48:ee:86:30:0c:7d:a9:9a:94:ad:bf:62:51:9c:38:
         cc:90:cd:2d:dc:99:9e:4b:8c:15:f5:de:50:d0:30:14:84:ec:
         59:0a:ff:77:17:70:65:95:10:d5:13:41:ac:cc:10:5b:ff:9a:
         79:46:46:13:73:91:b2:4a:d8:81:d4:a0:b3:96:48:ad:cd:e2:
         69:8b:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 03:20:14 2024 by rpki-client on console-fra.rpki-client.org