Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3636363a3a2f34382d3438203d3e203434353730.roa
File:                     323630323a666261313a3636363a3a2f34382d3438203d3e203434353730.roa (raw, json)
Hash identifier:          GZmSK6Vx240vWCo5sVtsg4WQmhTDsIeYFDheFA8VQxg=
Subject key identifier:   94:E5:FA:F7:DE:32:AD:AB:4D:01:EA:85:B5:BA:6F:32:91:67:69:7E
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       2C0E7B7EFF838216C135C757A4FCC3631D8FA862
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3636363a3a2f34382d3438203d3e203434353730.roa
Signing time:             Wed 23 Oct 2024 22:45:25 +0000
ROA not before:           Wed 23 Oct 2024 22:40:25 +0000
ROA not after:            Wed 22 Oct 2025 22:45:25 +0000
asID:                     44570
IP address blocks:        2602:fba1:666::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0e:7b:7e:ff:83:82:16:c1:35:c7:57:a4:fc:c3:63:1d:8f:a8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct 23 22:40:25 2024 GMT
            Not After : Oct 22 22:45:25 2025 GMT
        Subject: CN=94E5FAF7DE32ADAB4D01EA85B5BA6F329167697E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:a5:cb:83:1b:76:de:3c:23:c3:c9:8e:81:
                    40:a9:24:1c:39:dd:5b:86:a8:8e:49:ba:67:23:9a:
                    a6:02:1f:2d:dc:98:93:cb:72:ed:ff:b2:9a:21:1b:
                    e7:ee:80:1d:48:ff:24:8c:a5:ce:1b:a3:8a:e8:58:
                    13:22:e1:6b:cc:70:c8:8f:a8:ef:ec:8f:fe:2e:3e:
                    8e:c9:34:ba:59:1a:7d:b9:3e:13:a0:1d:88:c0:f2:
                    f3:25:6a:30:29:d8:4a:56:66:2c:89:fd:80:4a:bc:
                    81:4d:8a:b4:13:d8:e6:12:9e:3d:57:c2:e8:76:a9:
                    68:a8:70:f2:46:81:42:d6:90:ba:d2:e2:ab:77:69:
                    05:6b:c0:be:34:bb:4d:2f:8a:b5:ba:de:54:29:2c:
                    1a:5e:1f:bf:16:91:14:30:ba:90:97:62:17:09:f0:
                    da:ba:89:3c:da:d4:c0:82:e0:d2:b4:bd:53:81:a7:
                    af:cd:eb:ee:1f:db:88:0a:2e:f7:1c:01:48:ef:28:
                    60:c0:9b:a0:d9:07:b2:79:9c:d2:2e:ce:91:0e:28:
                    74:cd:ed:5f:92:d8:9c:9b:25:50:04:99:d0:99:4e:
                    8f:22:6d:b9:a0:52:38:b4:14:57:68:62:b1:fb:10:
                    9d:7c:b9:74:90:59:c6:60:9a:74:29:20:d3:95:33:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:FA:F7:DE:32:AD:AB:4D:01:EA:85:B5:BA:6F:32:91:67:69:7E
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3636363a3a2f34382d3438203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:666::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:e0:58:ef:ff:6a:83:30:bf:a7:91:24:07:62:a8:68:b1:6a:
         31:83:c6:6c:67:f4:a9:0f:fa:aa:94:f1:74:24:80:02:62:44:
         cf:40:5c:0f:48:d2:3e:9f:0b:63:27:cc:20:a7:27:6b:9f:22:
         c9:74:ef:5a:1b:a4:3d:d0:93:65:3f:e7:a6:c9:45:fb:b6:de:
         41:0a:ee:d2:87:91:a0:c5:b2:ed:58:69:3e:60:45:9c:c9:22:
         ca:e9:de:c0:41:68:dd:14:31:56:d1:09:89:f6:4c:13:ab:e5:
         08:ec:77:4a:2e:72:96:9a:5f:aa:4e:4d:d8:e8:05:88:f6:60:
         e5:ff:22:d7:c1:e0:4d:91:9f:af:06:78:a4:91:d6:50:55:46:
         98:22:91:23:ea:24:69:a5:17:1c:e0:10:8c:9b:e5:89:91:2d:
         1e:86:06:b3:dd:12:45:8c:c3:5d:81:af:b5:57:df:96:91:be:
         a6:d0:bd:54:3f:10:f7:7e:ae:56:05:63:13:c6:cd:b4:2c:55:
         f0:ec:ca:8b:e1:31:79:bd:31:1b:94:35:69:ca:4e:b8:3f:d6:
         e6:13:44:c3:ce:33:d7:94:62:e5:f9:d4:f8:7f:14:d1:3e:10:
         cc:55:b5:53:f7:39:59:5e:58:cd:fc:97:0b:73:2a:47:30:69:
         a9:ac:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org