Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20313939313834.roa
File:                     32332e3136382e3233322e302f32342d3234203d3e20313939313834.roa (raw, json)
Hash identifier:          kCEplxdvQK8R3o2kIjOkqbRqdIGzh74QGZrdNENSOD8=
Subject key identifier:   DE:F8:72:AC:6D:19:FD:A9:24:14:77:B3:79:42:5E:00:55:FA:0F:B7
Certificate issuer:       /CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Certificate serial:       45E48B06011FFCFD2886AFAEC06583A8644A7B31
Authority key identifier: 5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20313939313834.roa
Signing time:             Fri 06 Dec 2024 07:45:34 +0000
ROA not before:           Fri 06 Dec 2024 07:40:34 +0000
ROA not after:            Fri 05 Dec 2025 07:45:34 +0000
asID:                     199184
IP address blocks:        23.168.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e4:8b:06:01:1f:fc:fd:28:86:af:ae:c0:65:83:a8:64:4a:7b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
        Validity
            Not Before: Dec  6 07:40:34 2024 GMT
            Not After : Dec  5 07:45:34 2025 GMT
        Subject: CN=DEF872AC6D19FDA9241477B379425E0055FA0FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:31:4b:59:a2:bf:f5:6d:09:84:1c:92:b1:
                    20:4d:01:1c:29:7f:a7:1d:ce:34:c7:57:7f:a0:6a:
                    ab:ae:a1:fd:d4:3d:e4:99:7c:ed:ef:7e:31:49:fa:
                    87:2c:b3:77:7a:8b:8f:5b:d8:cb:92:19:e1:0c:1f:
                    ce:ca:5c:4e:a8:b2:a6:0c:e9:a1:2a:c5:da:3e:9b:
                    8d:a1:41:3b:49:cd:a0:35:77:80:1b:51:dc:17:ca:
                    05:8c:28:d4:14:6b:54:7d:8a:29:f2:d2:17:68:24:
                    67:26:ca:16:2b:bd:d5:c5:b7:c7:17:38:14:11:77:
                    da:20:e3:9a:8b:59:9d:d4:ae:7c:2a:15:92:dd:59:
                    d9:4d:d9:3f:67:c1:af:56:02:86:94:38:43:5b:de:
                    7d:64:63:34:02:b4:6f:d3:33:0f:3d:f7:f2:a7:a6:
                    fc:55:ea:34:41:3d:86:f4:e6:31:6a:0a:ec:53:ec:
                    5c:6f:f8:5d:a6:af:c2:91:30:81:d0:fc:2f:3b:d7:
                    86:2f:1b:92:0c:17:90:11:75:fd:97:3a:41:37:6e:
                    6c:6e:3e:4c:7a:46:c0:69:53:f8:a6:3f:f3:0a:e2:
                    2d:43:c9:2e:9b:b9:f6:cb:61:bc:49:cb:8f:5d:33:
                    85:95:46:c5:d9:92:c9:34:e7:30:2c:5a:3b:23:9f:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F8:72:AC:6D:19:FD:A9:24:14:77:B3:79:42:5E:00:55:FA:0F:B7
            X509v3 Authority Key Identifier:
                keyid:5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20313939313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:0a:38:ef:35:b2:1c:ca:14:c8:7f:c7:01:c8:9b:53:0a:
         9c:ff:58:d5:a5:df:62:d1:b8:df:91:9d:a5:f6:34:d6:56:d9:
         19:ca:c3:36:62:12:9b:82:72:28:8a:7a:b7:83:d8:0a:b0:73:
         5b:db:8b:6a:bf:50:f0:4d:6b:1b:0b:d4:29:d6:f2:ff:53:6d:
         01:1d:81:b9:09:98:a6:b5:99:a8:7b:c7:03:16:5f:cc:a7:e1:
         d0:4f:7c:a1:5d:42:07:9d:8c:e0:f9:26:19:fe:fd:49:e5:d4:
         37:0f:06:05:db:bf:45:bd:8d:ab:5f:66:37:f4:f1:88:06:39:
         53:75:69:8a:03:71:b2:ac:c8:5a:c5:85:b8:04:aa:3e:89:8d:
         48:70:1b:c1:c2:ab:21:93:9a:87:6d:49:55:1e:85:13:03:27:
         46:4a:b8:2a:db:d5:b5:50:01:8d:31:88:ee:21:f2:dc:f3:19:
         cb:19:94:3d:46:b7:bf:c2:e1:51:0c:11:db:c4:06:02:e1:99:
         74:91:83:dd:c4:f3:61:66:4b:83:8b:af:c8:fc:09:f1:d6:e2:
         3c:c8:c7:ad:02:82:f9:9e:6c:3b:e8:b8:a2:0f:ad:a8:69:a6:
         40:01:43:b1:58:9b:2d:db:63:c2:ec:6e:a0:f4:95:f6:b9:53:
         05:0a:ea:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:19:33 2025 by rpki-client