Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f33362d3438203d3e203630343338.roa
File:                     323630323a666261313a3a2f33362d3438203d3e203630343338.roa (raw, json)
Hash identifier:          L1D4oEorWDpkdPcazKUU62U92UgKmmSDK0K9rfwDPIE=
Subject key identifier:   8D:CC:41:86:C4:FD:19:9A:E7:E6:6B:A4:38:05:E5:EC:56:8D:16:29
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       6210EE40503785D3D3B7BCABDACEB22FF9088DF0
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f33362d3438203d3e203630343338.roa
Signing time:             Wed 23 Oct 2024 22:45:26 +0000
ROA not before:           Wed 23 Oct 2024 22:40:26 +0000
ROA not after:            Wed 22 Oct 2025 22:45:26 +0000
asID:                     60438
IP address blocks:        2602:fba1::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:10:ee:40:50:37:85:d3:d3:b7:bc:ab:da:ce:b2:2f:f9:08:8d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct 23 22:40:26 2024 GMT
            Not After : Oct 22 22:45:26 2025 GMT
        Subject: CN=8DCC4186C4FD199AE7E66BA43805E5EC568D1629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:22:2f:86:23:32:69:a9:99:6b:bc:64:36:eb:
                    88:4d:35:2a:b9:67:20:f5:4f:e3:d9:b0:fb:cd:04:
                    3b:02:7c:87:42:f8:4d:a1:b8:cb:9f:0d:63:99:2b:
                    fe:a4:ba:20:61:60:ab:ce:d6:3f:cd:b2:e2:bc:95:
                    a7:ae:cf:68:a0:6e:62:16:b1:4d:ad:cd:5b:93:2c:
                    f8:74:89:66:11:4d:81:fe:75:03:f6:98:d9:8f:9e:
                    8a:90:3e:05:ad:fe:6f:cd:e0:dd:ce:6b:8d:b8:76:
                    06:db:0d:26:24:7b:60:9b:cd:2b:c7:85:c0:79:da:
                    28:ec:05:05:3c:bf:f4:77:cd:a5:c3:8d:73:2d:24:
                    37:27:61:4a:6e:d2:a2:4d:04:7c:08:96:6e:65:b2:
                    3b:82:5d:fa:e1:d1:58:25:dc:32:6f:f4:88:f4:15:
                    51:b8:c2:e3:bd:91:47:d0:43:08:3e:e6:9b:ec:24:
                    f8:27:86:20:f1:e9:b0:6b:53:a9:e5:04:6f:1f:f9:
                    4d:bb:ca:20:c4:c2:f6:46:6b:9a:52:f8:d6:bc:ba:
                    1c:20:62:08:39:58:8b:e7:48:9e:3f:59:2f:61:61:
                    d1:da:ae:dd:4f:1b:65:bc:73:d4:f5:67:39:39:52:
                    28:37:10:99:df:fa:41:3b:76:7f:7a:28:47:a8:6c:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CC:41:86:C4:FD:19:9A:E7:E6:6B:A4:38:05:E5:EC:56:8D:16:29
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f33362d3438203d3e203630343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:e5:23:d4:0c:9e:53:02:d0:08:1c:db:ca:cd:07:d1:83:
         5f:a2:27:b2:ee:24:ee:4e:78:30:d8:7b:ab:b3:f2:fd:5a:4d:
         e5:40:f6:86:ab:1a:90:bd:c0:f9:9e:25:d5:69:8e:9f:b9:4d:
         8f:b9:00:49:09:6a:5d:47:8e:72:07:22:28:ed:48:1a:04:b5:
         6f:34:82:6c:76:78:b5:a9:fd:8a:af:b7:5e:22:f4:aa:9e:f4:
         2e:d4:61:40:de:ac:84:62:2f:7e:42:da:be:e3:eb:79:f5:c5:
         da:ba:12:4c:33:1a:66:d7:12:82:2f:4f:dd:be:5f:87:7f:45:
         30:1a:e1:50:5b:ae:8b:d4:c9:2f:a7:13:83:a7:bf:92:4b:c3:
         32:00:a1:94:d0:b2:cd:29:46:58:cd:a8:8c:83:a9:44:7c:ad:
         5e:5b:c5:5f:3d:9a:cb:58:ee:01:7e:0e:1a:3e:cf:aa:f8:be:
         c7:d7:e3:02:06:ca:7a:fb:cc:4b:13:90:f7:32:2b:ac:37:fc:
         90:38:63:6f:e5:cd:85:5c:fa:2d:83:42:46:8a:d0:83:1a:84:
         16:0a:7c:49:96:83:9c:ce:33:89:cb:83:8b:0c:f0:de:4e:8c:
         c8:c7:bb:1f:b3:cc:00:68:ce:7e:35:8d:76:2c:5b:e3:24:02:
         f6:2e:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org