Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa
File:                     323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa (raw, json)
Hash identifier:          UWWZn2qa1Vk2uJtQrRoRUPbb7VTIAvNGbGJHyrUsk/4=
Subject key identifier:   C2:DC:69:55:FC:37:21:23:23:48:9A:BA:BF:67:E6:08:56:A5:70:C8
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       627034A8E957A300A432FC12139691DF97CA375F
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa
Signing time:             Sun 27 Oct 2024 11:45:28 +0000
ROA not before:           Sun 27 Oct 2024 11:40:28 +0000
ROA not after:            Sun 26 Oct 2025 11:45:28 +0000
asID:                     924
IP address blocks:        2602:fba1:c00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:70:34:a8:e9:57:a3:00:a4:32:fc:12:13:96:91:df:97:ca:37:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct 27 11:40:28 2024 GMT
            Not After : Oct 26 11:45:28 2025 GMT
        Subject: CN=C2DC6955FC37212323489ABABF67E60856A570C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:92:c7:24:b3:42:a9:d2:06:56:7e:f3:8c:
                    a6:04:e7:0c:4a:bc:b6:7c:8b:00:82:bf:cb:80:de:
                    dd:37:96:85:65:5a:3c:af:72:98:ea:a5:57:95:e8:
                    f8:4f:2d:0b:fc:26:ce:70:cd:35:aa:d9:63:6a:48:
                    9e:b4:46:b2:ab:8b:89:ea:62:58:e7:4c:51:18:ee:
                    36:06:d0:29:0a:dd:54:1e:54:3a:df:e9:d1:c9:a4:
                    db:cf:bb:a8:d0:11:de:d1:3c:f9:31:59:c7:02:49:
                    9a:02:ef:ae:ae:97:30:55:ea:c2:95:07:96:66:9a:
                    2c:65:e4:0e:17:ec:49:6e:31:ba:a2:ae:1f:e5:18:
                    86:71:61:af:75:a5:36:99:7a:3f:f7:e8:e3:23:70:
                    3d:49:31:0a:d2:2c:50:fa:94:d0:09:cf:95:76:cb:
                    da:3b:3d:60:a6:1b:93:b9:5c:a7:0d:55:97:b4:39:
                    e6:3e:65:f2:97:f6:94:55:ca:49:51:50:40:79:39:
                    a3:3d:7d:72:63:12:5b:65:c7:ad:c7:71:93:67:f9:
                    a9:21:1e:ac:85:65:3e:3b:90:b6:4d:b9:37:78:28:
                    ec:d9:07:24:53:2b:83:45:c4:11:51:12:f3:e6:80:
                    b7:1e:11:8f:e6:98:dd:02:da:68:08:35:78:c1:1f:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DC:69:55:FC:37:21:23:23:48:9A:BA:BF:67:E6:08:56:A5:70:C8
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:a0:b2:9f:30:67:4b:df:33:10:99:12:b5:f1:63:b2:22:4a:
         58:d7:09:2e:de:b8:05:6b:38:d8:26:c8:5e:cf:25:e7:10:98:
         5b:05:36:fa:a6:be:f8:a4:ab:10:05:38:8d:21:a6:2f:d3:75:
         f6:9e:9d:d3:c4:03:e1:2a:b1:e2:9a:39:6a:4f:f0:0d:74:66:
         b2:5b:71:52:54:58:9c:ba:d2:b0:d7:c8:50:5e:cb:bf:22:ea:
         14:b9:39:7b:23:88:2e:db:5c:cb:70:a6:c0:3c:b2:52:72:c7:
         93:11:61:69:68:99:b7:5a:f2:b1:dd:d8:68:ca:07:54:65:9a:
         33:64:e5:a7:6b:c7:44:34:dd:78:12:8a:58:b9:37:0f:f2:bd:
         b6:86:19:6b:9c:96:fb:d3:e1:71:17:0b:67:5a:47:ee:57:6d:
         6a:f2:79:15:0b:5e:fa:e8:26:26:c7:4f:5d:5d:51:b1:39:22:
         f7:9f:a1:b0:0f:0c:d1:2d:bc:b9:51:cc:a9:ba:23:41:c2:35:
         cb:50:4f:19:7f:de:73:ef:f1:cd:96:24:29:8e:0c:50:e2:77:
         30:e2:13:30:cd:f8:07:a0:88:17:45:b0:6d:6e:b4:89:71:ba:
         1e:81:5a:15:af:21:44:a0:dc:2d:3e:0d:f0:4d:03:28:5a:6f:
         43:d3:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org