Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa
File:                     3231362e3134362e32342e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier:          0JUwrNwRz2E0v/LppgBcT8znn/QbzFZybUYCuYyzrIg=
Subject key identifier:   84:D9:2F:44:1C:82:70:67:C7:F0:23:8E:9A:3C:AE:13:80:2F:EB:86
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       509C2E5E83EE8FF10AA7AE0F2BFBA75B2CBD5DB7
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa
Signing time:             Wed 07 May 2025 23:46:19 +0000
ROA not before:           Wed 07 May 2025 23:41:19 +0000
ROA not after:            Wed 06 May 2026 23:46:19 +0000
asID:                     48925
IP address blocks:        216.146.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 02:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9c:2e:5e:83:ee:8f:f1:0a:a7:ae:0f:2b:fb:a7:5b:2c:bd:5d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: May  7 23:41:19 2025 GMT
            Not After : May  6 23:46:19 2026 GMT
        Subject: CN=84D92F441C827067C7F0238E9A3CAE13802FEB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:21:20:98:bc:00:8f:16:2d:87:4e:a2:0f:30:
                    20:bf:62:9c:1a:a8:8d:4b:74:bf:cf:58:50:02:5c:
                    bd:7e:97:83:20:94:a3:c8:f9:9e:82:70:b2:9e:0d:
                    61:04:eb:fd:ef:13:7c:71:68:66:0c:42:ac:27:19:
                    19:53:b2:8c:a6:b0:99:c0:18:ac:a1:8c:c9:ac:4d:
                    68:6f:e5:17:9b:06:2b:26:88:55:25:98:c0:44:9e:
                    29:06:f5:4d:33:e9:a3:c6:f3:d4:d9:5b:6c:b2:a0:
                    a0:40:fb:3f:d7:73:40:ee:b8:be:83:a7:62:2d:6d:
                    7a:40:ca:89:d2:1d:13:47:70:f9:fe:02:0f:69:51:
                    cb:ad:76:77:15:3e:b9:a9:0b:b8:10:30:f7:16:28:
                    a6:48:90:34:30:66:c4:c6:d3:32:0b:7b:e4:9d:7d:
                    84:42:3c:52:be:26:24:b5:98:aa:fb:dd:89:e0:ec:
                    9b:bc:ec:1c:34:53:1f:45:6a:bb:64:73:ad:7d:37:
                    3d:5f:6b:0e:ac:cb:d9:bf:2e:75:86:4c:88:b6:26:
                    1a:e4:b5:64:6c:ba:93:bc:51:f0:11:91:14:60:13:
                    b3:7c:61:df:de:de:b3:42:bf:c3:af:5a:2d:94:5b:
                    2e:25:e6:e8:a2:e7:c5:fe:2b:59:70:89:12:22:fd:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D9:2F:44:1C:82:70:67:C7:F0:23:8E:9A:3C:AE:13:80:2F:EB:86
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:8a:cc:df:51:31:e2:65:0d:df:cb:b9:5d:c5:2f:45:83:ed:
         27:5e:2b:5c:0b:93:84:d4:c3:a6:fd:39:5d:f8:e9:00:f4:84:
         32:86:c6:b4:02:9f:c0:6c:ba:85:01:f7:76:78:25:69:57:ba:
         71:8a:7f:71:a9:47:9d:d0:03:0b:63:f5:da:ac:a5:ad:f0:be:
         f2:f4:91:73:d6:d4:ad:61:7f:f0:a2:5b:a4:ba:81:50:de:70:
         5d:a0:23:1f:20:cb:e8:2c:c2:dc:c8:1f:96:e0:b9:22:80:d0:
         90:32:e9:c8:5e:cc:db:b5:b9:05:b4:da:e5:2b:cd:c0:ac:5a:
         fb:78:69:3e:a6:c9:d3:62:fc:95:42:b1:03:ca:b3:5e:0c:d0:
         7a:8d:ad:fb:48:e5:0f:e6:23:d9:b9:b6:5d:47:16:06:8c:65:
         f9:57:7c:30:9d:4d:81:d1:d0:f5:61:ce:80:ca:ee:8d:c6:11:
         30:35:df:23:15:d9:3d:89:f6:e6:52:fb:a3:8e:b3:06:d4:56:
         1d:d3:7a:88:80:85:59:96:fe:47:c6:5d:24:e6:07:b5:af:34:
         d3:10:51:a9:c1:62:9b:4d:33:1a:7c:89:51:6d:a8:4d:55:13:
         38:09:72:55:16:91:36:c7:85:9e:a8:29:6a:9f:09:94:81:3b:
         09:be:dd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:34:39 2025 by rpki-client