Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20393234.roa
File:                     32332e3136382e3233322e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          B2X9A53uFwqaDy1Bkk0MB0PkIKI7qbvkxDjfh/A4R9Q=
Subject key identifier:   DA:61:DA:C2:42:83:EE:94:6C:30:A0:F0:14:EA:DB:9A:73:FE:04:8B
Certificate issuer:       /CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Certificate serial:       4860946A94E0BB8D421A0B1A1A952EEEF26400E7
Authority key identifier: 5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20393234.roa
Signing time:             Sun 07 Jan 2024 03:11:50 +0000
ROA not before:           Sun 07 Jan 2024 03:06:50 +0000
ROA not after:            Sun 05 Jan 2025 03:11:50 +0000
asID:                     924
IP address blocks:        23.168.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 14:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:60:94:6a:94:e0:bb:8d:42:1a:0b:1a:1a:95:2e:ee:f2:64:00:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
        Validity
            Not Before: Jan  7 03:06:50 2024 GMT
            Not After : Jan  5 03:11:50 2025 GMT
        Subject: CN=DA61DAC24283EE946C30A0F014EADB9A73FE048B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:4b:fa:a0:25:2a:b9:71:cb:2d:16:66:e8:
                    58:7e:51:6c:4d:f5:a3:96:52:b8:6c:af:d0:85:b1:
                    69:e4:5a:23:14:f2:bb:0e:65:6b:e5:92:13:8c:be:
                    94:1f:2d:0f:d5:39:b0:26:d6:57:bd:45:67:77:a2:
                    5e:b2:11:89:74:1a:18:be:44:a6:7d:1e:06:82:ba:
                    1f:d5:f0:1b:ec:18:ed:c1:ba:0a:27:9b:f5:8e:d1:
                    e7:d2:d7:98:a4:bb:72:47:99:5e:f3:16:cf:c2:cd:
                    73:23:c2:45:73:d2:53:b3:3f:e7:57:72:05:8e:0f:
                    10:03:96:ee:89:3f:8c:42:49:2d:da:92:17:ed:9e:
                    77:b9:cf:61:66:05:d5:dd:03:7e:45:e0:16:db:b8:
                    81:08:4f:6f:51:c0:2e:63:19:bc:c3:aa:8c:85:3d:
                    4e:b9:08:98:c6:f2:d6:85:cf:02:2a:56:70:47:3a:
                    c1:ed:ec:43:0f:01:16:88:90:4c:d5:d1:b2:ff:a8:
                    8b:e7:31:aa:4b:56:4a:13:17:06:0c:c7:38:52:b4:
                    0d:a1:11:76:09:2f:59:24:03:4e:71:79:75:8a:3c:
                    69:60:22:cf:06:09:d6:00:61:aa:fd:d9:74:80:2f:
                    0d:0b:7e:50:f0:90:9f:94:e7:13:25:25:1f:c4:1e:
                    4d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:61:DA:C2:42:83:EE:94:6C:30:A0:F0:14:EA:DB:9A:73:FE:04:8B
            X509v3 Authority Key Identifier:
                keyid:5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/32332e3136382e3233322e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f3:0b:ca:fb:08:11:d9:bf:c9:16:d3:82:ce:38:ef:60:48:
         e1:24:82:b0:70:41:2b:d2:0e:9b:ca:2f:6b:a0:3d:2f:73:de:
         d4:a5:ad:60:7b:9d:86:d6:ca:f6:42:a9:c6:26:be:bc:b2:72:
         c6:17:f8:98:8c:db:5b:cf:50:a3:bd:de:92:c0:f0:d1:5d:07:
         06:23:2e:cb:99:46:4b:7c:75:1e:b6:eb:29:17:40:0e:05:04:
         df:ba:a4:b7:17:e7:3c:84:ef:4e:74:62:c6:6a:ac:89:7c:3d:
         f0:df:95:3e:ed:f6:d3:df:56:52:17:1b:0f:d2:50:83:ce:5c:
         b1:5a:69:36:aa:e9:38:15:1e:df:20:26:96:04:0d:9d:32:02:
         fe:eb:0f:eb:5c:52:51:e7:46:24:79:ff:9e:18:2f:f6:0c:86:
         80:1b:31:cf:3b:d5:c9:b9:3c:4a:ef:b2:9e:bb:64:d6:ea:f1:
         a6:46:1b:1a:b0:8c:55:76:cf:da:80:28:fd:c8:51:94:8d:7b:
         7e:34:d2:f8:de:cb:7a:d0:bd:b5:3b:12:83:ae:7d:5c:d8:f4:
         31:59:3b:63:29:60:36:65:41:1c:9e:14:71:20:dd:ff:50:92:
         83:1c:ff:b9:85:f8:bd:d1:78:03:5c:aa:f0:85:b0:b6:22:57:
         04:52:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:33 2024 by rpki-client on console-fra.rpki-client.org