Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20313939313834.roa
File:                     323630323a663961663a3a2f34302d3438203d3e20313939313834.roa (raw, json)
Hash identifier:          Joc5lv/EyShYI6H5oqtyo9xx4pFPgIAKpZvP4H1WpIM=
Subject key identifier:   E6:88:93:20:2F:5E:70:CE:2E:3D:61:73:61:82:7B:29:9B:6D:AD:B3
Certificate issuer:       /CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Certificate serial:       203ECDD5C05332EDE21457A4259542DDAECEBC3F
Authority key identifier: 5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20313939313834.roa
Signing time:             Fri 06 Dec 2024 07:45:34 +0000
ROA not before:           Fri 06 Dec 2024 07:40:34 +0000
ROA not after:            Fri 05 Dec 2025 07:45:34 +0000
asID:                     199184
IP address blocks:        2602:f9af::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3e:cd:d5:c0:53:32:ed:e2:14:57:a4:25:95:42:dd:ae:ce:bc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
        Validity
            Not Before: Dec  6 07:40:34 2024 GMT
            Not After : Dec  5 07:45:34 2025 GMT
        Subject: CN=E68893202F5E70CE2E3D617361827B299B6DADB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:ae:98:7b:67:63:ed:8e:fe:04:34:07:51:
                    9c:fd:cd:77:20:9a:02:fe:16:81:52:41:1a:17:ec:
                    33:91:68:f1:d0:4d:12:0e:f2:2a:ca:ac:cb:a7:ac:
                    c0:06:58:aa:f7:66:21:75:85:d6:cb:f7:f8:58:d0:
                    aa:57:dd:c1:40:23:a3:6e:38:fc:db:ba:66:fa:85:
                    37:d0:2b:05:6a:71:14:9f:03:6d:6c:ad:d6:5a:0e:
                    d6:e9:c3:e2:b9:18:b2:91:95:f0:3d:6b:a3:7d:7e:
                    57:38:07:c7:27:61:a3:89:3a:42:65:f9:be:46:bb:
                    91:d1:0c:80:af:ab:76:e2:44:5a:01:df:fe:8d:12:
                    d9:92:40:a9:56:c1:d7:12:3e:30:48:7a:86:54:e8:
                    48:5f:54:f5:cf:81:2c:93:ff:84:84:50:85:d7:aa:
                    26:98:4a:b9:c4:d1:6f:1e:a7:af:35:f5:8e:06:01:
                    87:32:68:e4:dc:9d:f5:a5:d2:fd:d8:0e:2b:ed:7c:
                    24:e6:f5:3d:6f:c0:cf:1b:29:47:c6:82:85:88:0d:
                    b2:59:0d:e3:7f:64:b8:2e:8e:17:23:d0:a5:8f:9b:
                    f8:dc:4a:18:35:59:90:27:47:b2:b9:46:5c:3e:67:
                    0c:22:63:48:c3:fe:61:5e:32:31:f4:e9:56:f0:14:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:88:93:20:2F:5E:70:CE:2E:3D:61:73:61:82:7B:29:9B:6D:AD:B3
            X509v3 Authority Key Identifier:
                keyid:5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20313939313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9af::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:c3:a8:c1:82:a3:a3:e3:5b:46:f0:e6:e9:67:47:4b:cf:
         57:6b:36:06:dc:cc:51:56:38:f4:3c:fd:9d:22:b3:69:a5:de:
         6a:c4:45:65:eb:ec:af:c4:09:c7:c0:7a:97:6a:0b:b0:4d:1f:
         da:2a:ff:34:23:de:bb:d6:0b:af:f7:95:9f:8b:87:61:b3:ac:
         cf:27:49:70:e3:3f:da:b6:05:0b:52:83:68:e8:67:d0:7f:f3:
         13:68:27:6e:72:73:38:1c:0d:3a:c4:2f:54:7e:b3:56:13:ae:
         f9:53:b8:1c:cd:72:9b:14:0d:a2:2f:5e:0d:0a:70:2f:44:0e:
         31:4a:bd:6b:90:d7:6d:8b:12:70:f4:a2:ff:7c:e3:05:b7:c6:
         61:28:e1:79:c7:bd:8b:b2:bc:5f:47:21:4c:8a:08:e3:c5:3c:
         22:8c:76:15:b8:54:6b:d3:81:df:f1:1d:5d:6c:65:66:16:9b:
         9e:bc:a2:d1:a4:8f:55:a9:10:07:09:73:62:87:bd:0b:5d:97:
         20:72:5e:c3:91:68:ef:23:6e:ea:bb:13:75:51:f8:48:0d:62:
         5c:6a:85:73:3e:06:8f:37:9b:8b:62:ea:75:61:3c:6e:81:15:
         52:88:4b:1d:95:8d:1e:d7:35:d3:64:70:4b:3a:23:d3:43:73:
         45:b2:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:12:30 2025 by rpki-client