Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20313939313834.roa
File:                     32332e3136382e3233322e302f32342d3234203d3e20313939313834.roa (raw, json)
Hash identifier:          4wJtj76zlkJlAHfUcUDyu+oFeUYyFPP4emeV97raHXA=
Subject key identifier:   08:23:47:9B:6C:3A:57:C6:CF:F1:81:A9:FB:A2:3F:2F:C5:B5:17:D5
Certificate issuer:       /CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Certificate serial:       5A4435249D7E8C79ED79A6E3BA68FE2F629FF101
Authority key identifier: 5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20313939313834.roa
Signing time:             Fri 05 Jan 2024 06:59:44 +0000
ROA not before:           Fri 05 Jan 2024 06:54:44 +0000
ROA not after:            Fri 03 Jan 2025 06:59:44 +0000
asID:                     199184
IP address blocks:        23.168.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 14:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:44:35:24:9d:7e:8c:79:ed:79:a6:e3:ba:68:fe:2f:62:9f:f1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
        Validity
            Not Before: Jan  5 06:54:44 2024 GMT
            Not After : Jan  3 06:59:44 2025 GMT
        Subject: CN=0823479B6C3A57C6CFF181A9FBA23F2FC5B517D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:c5:d9:b3:bd:91:38:62:b8:de:02:e1:e7:
                    d5:43:f5:3d:26:e6:52:30:fe:1a:f8:ec:b1:f1:43:
                    33:e7:4c:ac:12:f9:d6:dd:2e:ea:1c:01:31:83:c5:
                    72:3e:ff:2b:b4:90:79:4c:9e:a8:db:85:c7:89:b8:
                    e6:1c:1d:fd:53:50:46:ac:24:1c:93:6e:31:04:2a:
                    b8:69:91:3f:6a:30:2c:80:a8:d0:6b:3d:45:58:d0:
                    6c:d6:a4:83:3d:e6:0e:a7:01:1f:e0:28:95:ec:ae:
                    2b:cf:8e:80:40:aa:0d:67:32:48:b5:f2:d6:c4:60:
                    3f:91:10:61:2c:94:1b:60:98:87:01:35:ba:75:40:
                    61:aa:d0:0d:99:b2:e0:5a:d3:a3:00:81:1f:90:9f:
                    6f:ee:17:24:00:fe:3b:87:18:56:af:fc:1d:e2:86:
                    8b:04:65:6f:05:c0:bf:46:03:05:e4:47:72:02:38:
                    28:ec:37:7b:d2:54:9b:6c:bd:c2:ac:26:f1:6b:0c:
                    0c:5f:91:33:0b:2f:68:65:76:77:1d:e3:ef:8a:40:
                    5a:b4:6d:6e:a2:d3:db:bd:ba:ec:89:b8:cd:0a:46:
                    9b:78:f5:d2:7c:13:d6:01:e3:c5:b6:db:cd:60:68:
                    9b:53:c5:46:4a:66:50:2c:fd:a5:79:42:e6:dd:c3:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:23:47:9B:6C:3A:57:C6:CF:F1:81:A9:FB:A2:3F:2F:C5:B5:17:D5
            X509v3 Authority Key Identifier:
                keyid:5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20313939313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:19:79:75:9a:f4:ad:b8:d0:e8:2b:dd:a3:31:1e:12:63:
         93:8d:1a:1a:fb:4d:dd:73:bb:6e:79:f6:a8:a3:8a:34:39:d4:
         f2:15:f5:13:75:68:2e:eb:65:f1:ea:60:b9:d8:37:76:3d:2d:
         ca:2c:36:a1:9e:ca:0f:bc:5d:52:51:90:25:d7:79:b9:32:89:
         f6:22:5b:e5:53:c8:79:d0:e2:df:c6:33:26:bc:d8:09:6c:5f:
         4d:7e:41:5a:4a:6a:a7:12:e3:b0:76:b5:75:cf:46:36:b7:0c:
         d0:b7:fe:64:89:f5:ba:94:f9:3d:53:4a:f6:f6:55:f6:26:ac:
         05:a5:61:f2:ed:89:ab:4b:2d:47:30:42:1c:bf:3b:53:78:72:
         2a:2c:77:4f:04:85:68:7e:f2:36:09:1e:d4:0e:f7:a5:75:a6:
         af:65:5c:15:5f:c8:c9:79:04:cf:ef:b0:e5:88:f3:1d:cb:aa:
         3d:7d:92:ab:85:6d:a0:dc:09:a9:7d:c2:af:6a:09:0e:cb:45:
         50:f2:b1:ff:7a:72:59:05:dc:bd:c5:1e:6a:74:f9:73:24:1d:
         9d:bc:ef:0f:2f:81:4d:27:a4:b6:e2:75:fd:cb:bf:52:ac:d8:
         b0:9f:0d:b5:ec:50:43:0a:cb:ce:b8:bf:87:36:06:63:c4:98:
         45:1f:9d:07
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUWkQ1JJ1+jHnteabjumj+L2Kf8QEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTc4MDY2Yjc5YzY2ZDZkMGQzYTZiOGQ4YmExNTgzNDUx
MWRkOTMxMWRmMDkxN2FkNmYwHhcNMjQwMTA1MDY1NDQ0WhcNMjUwMTAzMDY1OTQ0
WjAzMTEwLwYDVQQDEygwODIzNDc5QjZDM0E1N0M2Q0ZGMTgxQTlGQkEyM0YyRkM1
QjUxN0Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfHF2bO9kThi
uN4C4efVQ/U9JuZSMP4a+Oyx8UMz50ysEvnW3S7qHAExg8VyPv8rtJB5TJ6o24XH
ibjmHB39U1BGrCQck24xBCq4aZE/ajAsgKjQaz1FWNBs1qSDPeYOpwEf4CiV7K4r
z46AQKoNZzJItfLWxGA/kRBhLJQbYJiHATW6dUBhqtANmbLgWtOjAIEfkJ9v7hck
AP47hxhWr/wd4oaLBGVvBcC/RgMF5EdyAjgo7Dd70lSbbL3CrCbxawwMX5EzCy9o
ZXZ3HePvikBatG1uotPbvbrsibjNCkabePXSfBPWAePFttvNYGibU8VGSmZQLP2l
eULm3cNzDQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFAgjR5tsOlfGz/GBqfuiPy/F
tRfVMB8GA1UdIwQYMBaAFFwUFSKsSXxM576kvIUOvTeextTxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8zLzVDMTQxNTIyQUM0OTdDNENFN0JFQTRC
Qzg1MEVCRDM3OUVDNkQ0RjEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82YTkwZDQ4NC04Y2Y1LTRm
OTEtOGM3YS00NjkzMjU4NTMyMDcvNTc4MDY2Yjc5YzY2ZDZkMGQzYTZiOGQ4YmEx
NTgzNDUxMWRkOTMxMWRmMDkxN2FkNmYuY2VyMIGKBggrBgEFBQcBCwR+MHwwegYI
KwYBBQUHMAuGbnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzMvMzIzMzJlMzEzNjM4MmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMTM5MzkzMTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXqOgwDQYJKoZIhvcNAQEL
BQADggEBAImeGXl1mvStuNDoK92jMR4SY5ONGhr7Td1zu2559qijijQ51PIV9RN1
aC7rZfHqYLnYN3Y9LcosNqGeyg+8XVJRkCXXebkyifYiW+VTyHnQ4t/GMya82Als
X01+QVpKaqcS47B2tXXPRja3DNC3/mSJ9bqU+T1TSvb2VfYmrAWlYfLtiatLLUcw
Qhy/O1N4ciosd08EhWh+8jYJHtQO96V1pq9lXBVfyMl5BM/vsOWI8x3Lqj19kquF
baDcCal9wq9qCQ7LRVDysf96clkF3L3FHmp0+XMkHZ287w8vgU0npLbidf3Lv1Ks
2LCfDbXsUEMKy864v4c2BmPEmEUfnQc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:23 2024 by rpki-client on console-ams.rpki-client.org