Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20393234.roa
File:                     323630323a663961663a3a2f34302d3438203d3e20393234.roa (raw, json)
Hash identifier:          9aMB78P2JihGLuUg8pzgBmyHRfzyhGYptw4Akk5OXao=
Subject key identifier:   3F:C2:C8:D0:4D:2F:09:80:F4:B3:CD:D3:05:27:1A:3F:F7:F9:7F:7F
Certificate issuer:       /CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
Certificate serial:       504869E18FB4EFF097C2C988E3E3C9BC62915DB0
Authority key identifier: 5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20393234.roa
Signing time:             Sun 07 Jan 2024 03:11:58 +0000
ROA not before:           Sun 07 Jan 2024 03:06:58 +0000
ROA not after:            Sun 05 Jan 2025 03:11:58 +0000
asID:                     924
IP address blocks:        2602:f9af::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 14:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:48:69:e1:8f:b4:ef:f0:97:c2:c9:88:e3:e3:c9:bc:62:91:5d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f
        Validity
            Not Before: Jan  7 03:06:58 2024 GMT
            Not After : Jan  5 03:11:58 2025 GMT
        Subject: CN=3FC2C8D04D2F0980F4B3CDD305271A3FF7F97F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:47:74:7d:3c:aa:4d:f9:56:b6:26:66:df:35:
                    04:a5:71:58:62:a9:e2:5b:d1:e1:b2:bd:1d:5f:3c:
                    38:fe:be:37:15:e0:22:b3:dd:7f:04:e2:db:6f:fe:
                    0e:96:87:08:ee:64:c7:f9:d5:18:69:29:2a:15:ca:
                    46:86:40:77:60:bd:0b:a5:35:cc:61:9e:7e:f0:8a:
                    d2:0e:14:50:e2:5e:2d:94:da:a9:59:c3:de:c5:ea:
                    f4:b5:b3:3c:de:6c:33:e1:48:be:44:4a:12:8b:6a:
                    67:30:0c:93:26:0a:b6:e3:cf:c2:15:70:a4:07:ca:
                    33:fb:f8:cc:4e:d9:1c:66:07:5e:10:00:73:40:44:
                    90:27:ed:1f:dd:94:b7:f9:a6:e9:f2:6d:01:1d:32:
                    89:00:5d:e0:5b:cd:db:06:ab:09:4f:49:a0:57:5c:
                    db:c8:af:15:a3:17:45:1a:38:dd:08:43:53:52:12:
                    8d:8d:97:b3:0f:86:d4:31:5f:80:fa:2d:0b:e2:e2:
                    a2:17:36:27:b5:e4:1b:84:44:1c:ce:8e:83:2f:e4:
                    fb:6f:9d:ac:39:c0:cd:23:d1:1c:e7:0e:03:84:49:
                    8c:a8:a2:c4:34:d3:98:be:f0:95:e0:61:2b:aa:fc:
                    0d:85:10:92:6c:73:5f:9f:d8:39:b3:a6:cb:4a:c3:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C2:C8:D0:4D:2F:09:80:F4:B3:CD:D3:05:27:1A:3F:F7:F9:7F:7F
            X509v3 Authority Key Identifier:
                keyid:5C:14:15:22:AC:49:7C:4C:E7:BE:A4:BC:85:0E:BD:37:9E:C6:D4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/5C141522AC497C4CE7BEA4BC850EBD379EC6D4F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/578066b79c66d6d0d3a6b8d8ba15834511dd9311df0917ad6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/3/323630323a663961663a3a2f34302d3438203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9af::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:56:27:03:c9:ce:3f:6d:de:41:5c:16:97:ad:40:fc:83:a8:
         17:21:8f:9b:21:59:f4:d2:19:dd:7c:b6:42:7e:a5:a1:7d:e3:
         65:46:fd:c7:dd:6c:75:ee:b0:df:0f:d2:e8:e7:73:54:24:10:
         27:04:87:e9:78:4d:84:9f:19:4c:f3:bc:9f:ec:10:46:b3:61:
         5c:1e:6f:04:f5:c4:ac:0d:c3:fa:db:63:09:19:bc:74:83:2b:
         5b:31:84:a5:64:1c:28:e1:b4:78:b8:b8:57:7a:1f:89:e4:4f:
         45:3d:cf:22:ca:b5:25:fe:76:e2:66:a1:58:3c:f1:a1:b2:33:
         16:d5:d8:11:42:98:6d:31:90:2a:72:34:12:f2:3c:55:79:ca:
         33:c1:67:ef:71:48:2f:01:66:74:17:ec:c2:91:ce:28:a5:9a:
         ea:3d:07:a4:f6:3c:ee:28:7b:a7:ed:14:3a:6d:0c:ff:40:96:
         2a:52:c4:59:b5:7f:71:ec:15:6b:1e:d0:d8:61:07:4c:d3:5b:
         45:35:6a:ae:0b:c1:27:7b:90:dd:cc:64:86:de:2d:21:4a:f4:
         f0:29:6f:8c:21:a1:65:fd:91:03:c8:6a:24:d4:30:35:7c:f2:
         6f:71:43:97:46:55:be:52:47:9f:1e:9a:7e:fd:af:8d:01:f1:
         a6:73:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org