Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f34382d3438203d3e20393234.roa
File:                     323630323a666261313a3a2f34382d3438203d3e20393234.roa (raw, json)
Hash identifier:          Wjsx2ObsBkVTwm7AAZwVfFQySSnfyH2tUjKyT7JRZEY=
Subject key identifier:   85:E6:9C:50:2B:3F:15:25:DC:C5:B0:29:A9:3E:51:E8:C8:3E:3E:DD
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       5E541A84260CE45B658ED5624A28CAC7CE2F4B95
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f34382d3438203d3e20393234.roa
Signing time:             Wed 07 Feb 2024 02:58:00 +0000
ROA not before:           Wed 07 Feb 2024 02:53:00 +0000
ROA not after:            Wed 05 Feb 2025 02:58:00 +0000
asID:                     924
IP address blocks:        2602:fba1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:54:1a:84:26:0c:e4:5b:65:8e:d5:62:4a:28:ca:c7:ce:2f:4b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Feb  7 02:53:00 2024 GMT
            Not After : Feb  5 02:58:00 2025 GMT
        Subject: CN=85E69C502B3F1525DCC5B029A93E51E8C83E3EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:f8:3d:d7:fa:97:17:16:b5:63:9d:d9:55:
                    aa:26:8f:ef:d5:ec:a5:ff:f5:61:6c:48:b8:b3:79:
                    3d:86:e0:f7:8d:10:91:0c:be:30:10:6f:ac:5b:47:
                    3a:40:58:b0:59:ab:95:c1:c4:44:ee:81:67:13:86:
                    7f:ec:27:21:81:2c:fc:3b:98:11:67:f1:a8:93:6c:
                    c4:a5:b8:71:4e:29:e4:0b:07:d6:f1:9b:89:2f:fe:
                    35:58:1d:78:37:35:93:93:f7:76:72:50:2e:cb:aa:
                    dd:74:d7:e1:31:8e:a4:ee:a5:87:31:79:52:e1:79:
                    c0:51:2b:b3:a6:1b:32:28:be:6a:9f:ad:ed:a4:96:
                    ed:a2:bf:f4:37:4a:f6:3c:1a:ca:a1:8b:e2:5c:4f:
                    b2:11:c8:37:5e:d7:26:32:28:12:55:c7:23:25:39:
                    db:2e:be:e1:10:13:48:d2:ea:a7:f2:dd:29:26:12:
                    84:5b:d6:35:c1:f0:04:6e:64:d6:06:9e:3c:f3:e0:
                    83:a7:a1:d7:1c:b3:cf:bc:b8:a7:f1:6d:13:39:54:
                    3c:99:6a:13:99:77:35:f6:8e:c9:86:f7:2d:b9:d2:
                    6c:8c:3e:bb:fa:2d:16:62:6d:15:67:bd:36:84:b3:
                    e2:31:04:a2:07:ea:79:cc:27:d7:28:a3:c0:29:a6:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E6:9C:50:2B:3F:15:25:DC:C5:B0:29:A9:3E:51:E8:C8:3E:3E:DD
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f34382d3438203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:31:36:af:f0:fe:00:f6:da:bc:1b:e9:5a:69:d0:6b:1b:
         e2:dc:86:0e:61:3a:68:f9:8d:88:52:d9:c1:a4:6f:99:7e:29:
         3f:b4:eb:c2:75:52:78:74:5d:c1:57:c8:f0:b4:48:73:51:cc:
         7c:44:7d:7d:f1:6a:a2:00:74:fb:8d:1b:86:5f:c0:5d:6b:1e:
         59:14:c5:76:15:20:60:77:33:71:57:3e:0b:c6:cc:2a:05:4a:
         48:73:53:d8:47:1f:66:74:25:67:ac:9f:87:ab:63:93:36:6e:
         fe:b0:f5:0d:36:5e:5c:6e:f8:22:f0:a7:23:72:2a:ff:95:e8:
         8c:1d:01:ce:56:63:d0:cb:bc:73:3e:c9:c6:24:3c:bc:77:72:
         b9:f4:75:ff:d6:60:03:7a:4f:06:45:60:a4:1b:b9:01:bf:a9:
         39:e4:74:25:1e:ea:f3:d5:a0:a6:08:52:b4:1c:f1:c0:91:3f:
         0a:89:63:2e:81:75:42:7c:cb:67:69:7c:e8:1f:71:25:c2:5c:
         dc:df:dd:1f:cd:35:74:bb:78:9f:e1:79:54:13:d5:df:51:26:
         3a:cd:c0:53:ba:a4:4e:3c:89:71:83:3d:47:3f:34:7e:c9:cd:
         a7:20:68:5a:00:4c:69:36:d5:0a:de:38:03:29:54:13:09:6f:
         06:f6:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:23 2024 by rpki-client on console-ams.rpki-client.org