Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203239383032.roa
File:                     3231362e3134362e32372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          BsbsraLuC87ZfiPZRej7szSz1MY9L6Kb4aoCEiKBsHY=
Subject key identifier:   D6:F4:D0:44:B8:30:3A:40:58:2C:62:BE:AC:F3:A5:04:B9:DF:91:0A
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       2D0BC2E16712A746F24827AB6321D62EDD2A6AC8
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203239383032.roa
Signing time:             Tue 11 Feb 2025 02:45:51 +0000
ROA not before:           Tue 11 Feb 2025 02:40:51 +0000
ROA not after:            Tue 10 Feb 2026 02:45:51 +0000
asID:                     29802
IP address blocks:        216.146.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 14:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0b:c2:e1:67:12:a7:46:f2:48:27:ab:63:21:d6:2e:dd:2a:6a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Feb 11 02:40:51 2025 GMT
            Not After : Feb 10 02:45:51 2026 GMT
        Subject: CN=D6F4D044B8303A40582C62BEACF3A504B9DF910A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a4:82:ce:a5:20:7d:b8:85:cf:79:78:a8:1b:
                    8c:b5:66:2f:80:ca:21:55:47:46:e1:48:f4:3c:d1:
                    30:a9:ec:f7:f5:bc:ef:63:ef:4f:7f:15:aa:e3:dc:
                    28:05:51:e7:87:ee:9f:b9:16:fb:b5:68:c4:0c:e7:
                    2c:0d:2b:65:fb:8a:82:dc:ec:8b:de:f0:aa:d8:48:
                    84:84:a4:e2:54:fb:25:8e:4d:9b:60:8c:1e:3b:7b:
                    df:e8:82:c2:2e:87:7e:32:9a:7f:70:73:83:bc:c1:
                    dd:df:a5:e7:82:d9:6c:4a:1a:a4:d6:46:a8:3e:0b:
                    fa:56:29:2f:e9:0c:37:64:e3:71:af:84:11:9a:fc:
                    43:4c:d0:03:f4:3d:51:44:50:67:55:0c:89:9d:52:
                    2e:ab:1f:1e:1f:8d:e3:90:81:35:b7:56:59:7e:72:
                    97:c2:0c:7b:6a:03:66:5b:f1:32:13:94:b6:cf:fb:
                    0c:93:f6:45:56:20:c7:82:87:40:f6:8b:b4:22:c9:
                    45:3e:6b:6a:f6:3b:f9:79:fd:dd:27:fc:69:55:a9:
                    46:a8:5f:11:f2:b0:22:89:42:90:82:b5:b2:ed:f1:
                    74:22:1b:a6:33:c8:9b:dd:9e:d1:79:f7:8f:93:3f:
                    7b:da:9e:e3:55:ed:fa:b2:7c:e1:53:5c:0a:a5:7d:
                    80:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F4:D0:44:B8:30:3A:40:58:2C:62:BE:AC:F3:A5:04:B9:DF:91:0A
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:95:5d:0b:61:78:ec:d8:09:33:42:d3:48:8a:a7:0e:a1:25:
         e0:62:ac:3a:2b:bf:9f:29:eb:28:14:b3:7f:cc:dd:34:f3:91:
         84:85:44:8e:bd:b6:6b:1e:b1:40:93:8a:cd:9a:67:7a:bb:8a:
         f4:70:b8:03:50:91:a7:49:c3:ec:d2:86:92:05:b2:af:b0:57:
         3a:bf:9d:24:db:c9:f1:ad:f7:fe:31:59:ca:d5:01:9d:31:33:
         92:0c:4c:ec:55:28:63:5d:a4:2a:b3:99:74:2f:b1:68:5e:99:
         98:3a:bf:8a:0b:50:7b:ff:06:a5:0c:50:5e:3d:bf:5e:11:c3:
         82:6b:70:10:f8:62:b3:b2:d9:b4:12:14:ea:3a:2b:53:26:73:
         cb:76:4a:a2:00:22:3d:ca:79:7e:72:5f:c2:34:fd:8d:22:54:
         11:c9:dc:c6:4b:27:9d:bb:8a:84:f0:4d:96:49:ba:a6:34:ac:
         6b:92:9b:ae:3e:53:a7:ae:cc:7b:82:c5:ad:54:2c:95:99:a8:
         74:91:06:43:df:2d:f9:9a:66:c7:8e:c4:eb:eb:57:a6:6d:a3:
         ea:ba:79:97:24:eb:09:d2:40:4f:ca:7f:8e:8f:d8:0d:57:3b:
         84:f1:15:4d:a6:f1:8f:ab:f5:b3:19:18:5b:14:06:97:de:6c:
         de:07:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:35 2025 by rpki-client