Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6530303a3a2f34302d3438203d3e20393234.roa
File:                     323630323a666261313a6530303a3a2f34302d3438203d3e20393234.roa (raw, json)
Hash identifier:          jvIuhX6U5e7SOKeMR5gkNF7JhAI7meboW3hz4OB2gSE=
Subject key identifier:   B2:BD:15:F1:E0:A5:C8:9D:C5:8B:C5:16:4A:77:29:0B:B8:37:1B:5F
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       5FE5B939B655C8964C86704CDE48D37A7E91DE5E
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6530303a3a2f34302d3438203d3e20393234.roa
Signing time:             Wed 27 Mar 2024 11:58:27 +0000
ROA not before:           Wed 27 Mar 2024 11:53:27 +0000
ROA not after:            Wed 26 Mar 2025 11:58:27 +0000
asID:                     924
IP address blocks:        2602:fba1:e00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e5:b9:39:b6:55:c8:96:4c:86:70:4c:de:48:d3:7a:7e:91:de:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Mar 27 11:53:27 2024 GMT
            Not After : Mar 26 11:58:27 2025 GMT
        Subject: CN=B2BD15F1E0A5C89DC58BC5164A77290BB8371B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:7d:60:30:65:53:f3:10:83:4b:37:31:ea:
                    43:42:51:c9:7c:c4:64:03:9a:0a:af:d2:63:e8:b0:
                    87:df:b9:f0:ad:cc:1b:d5:82:de:e5:b2:b2:36:72:
                    86:2c:0d:0a:7b:c1:fa:8a:ba:62:2d:0a:08:2f:0c:
                    88:1a:41:e3:8f:61:b4:78:5b:1d:72:ae:79:b1:5d:
                    4b:45:d3:3d:00:dc:84:ff:55:8a:08:90:ec:2c:66:
                    7c:0f:cb:c3:72:35:50:90:0d:28:fb:54:51:d4:cb:
                    5e:d2:68:26:98:9b:f7:a4:fc:85:ac:d0:ee:5c:2d:
                    3d:67:47:46:21:fb:c1:8d:b3:eb:c5:90:c7:8c:ee:
                    7c:a0:76:b9:9a:7a:d6:04:94:5a:88:76:c1:a0:50:
                    9e:85:96:96:64:4a:ad:a4:cc:90:d6:cd:87:93:db:
                    5f:db:a0:68:39:70:07:cd:3e:cd:c5:a9:36:ff:bb:
                    77:e3:e2:d7:bf:50:c2:b8:04:3c:73:ea:29:ca:9d:
                    1e:e4:b7:01:c3:6e:50:91:f1:2c:9d:b8:d4:94:f9:
                    4c:1f:5b:6d:2c:01:58:c1:07:f1:57:f1:b8:49:9e:
                    18:8b:11:56:35:11:63:09:6b:ba:6b:cd:df:52:30:
                    4d:b8:b3:fd:c3:5c:32:64:94:bf:d9:ba:10:57:59:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BD:15:F1:E0:A5:C8:9D:C5:8B:C5:16:4A:77:29:0B:B8:37:1B:5F
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6530303a3a2f34302d3438203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:a1:ce:63:38:97:5b:ed:27:19:5a:d7:1b:5b:5d:13:3b:14:
         c4:8c:e6:c9:e5:4e:38:cb:9b:7f:c4:ad:d0:86:01:d4:66:f9:
         5f:3d:14:67:28:cd:b3:bb:19:44:6b:11:35:95:ca:c6:eb:b5:
         1a:d0:ea:ed:3c:d5:3f:fc:8d:02:2e:c2:3c:fc:bb:dc:d7:74:
         bd:70:5f:e0:f1:1b:f1:f1:22:1b:a3:b6:c8:e5:5d:8b:c4:bf:
         cb:11:5a:7f:4a:17:76:87:d7:54:8c:0a:77:1c:76:f5:b4:0b:
         39:59:00:d6:52:b9:a6:51:d0:12:34:42:0b:47:70:f8:0e:49:
         2b:81:78:9e:78:1d:2d:e3:4a:37:46:12:ca:22:0a:d2:73:c2:
         6f:13:b5:53:b3:42:f0:f4:11:23:51:cb:dd:9c:5c:83:53:6e:
         ca:1f:c4:b4:c6:0c:82:5c:4c:b4:6f:31:62:a6:18:a2:49:2b:
         96:75:4f:1f:35:73:ef:09:45:32:e3:58:9c:34:36:6b:eb:dd:
         29:3a:23:5f:4b:e7:ae:fe:57:70:7a:55:b0:2f:12:94:77:d5:
         b1:d6:e4:9d:46:a0:50:c5:cf:08:5e:ab:3d:c6:fb:5c:ec:af:
         4b:9b:13:5f:eb:61:93:26:b5:10:d3:62:56:fb:d7:a1:84:5a:
         ba:26:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org