Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133382e302f32342d3234203d3e203334393237.roa
File:                     3134372e3136302e3133382e302f32342d3234203d3e203334393237.roa (raw, json)
Hash identifier:          O/cFO7daUkYP823muVLjY7KQaPrURVXTG0a6SMrqsBA=
Subject key identifier:   1D:7D:2D:29:E2:4C:15:68:93:F6:D3:17:A0:46:B7:44:7A:D1:61:14
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       1B987A9A83D16852C64E696363D201D74880805B
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133382e302f32342d3234203d3e203334393237.roa
Signing time:             Wed 29 Apr 2026 14:12:08 +0000
ROA not before:           Wed 29 Apr 2026 14:07:08 +0000
ROA not after:            Wed 28 Apr 2027 14:12:08 +0000
asID:                     34927
IP address blocks:        147.160.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 12:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:98:7a:9a:83:d1:68:52:c6:4e:69:63:63:d2:01:d7:48:80:80:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Apr 29 14:07:08 2026 GMT
            Not After : Apr 28 14:12:08 2027 GMT
        Subject: CN=1D7D2D29E24C156893F6D317A046B7447AD16114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:3a:53:fe:ee:ba:fb:1a:4f:26:33:8a:8e:
                    0b:af:6c:1d:8f:99:b6:09:2b:c8:33:cf:8a:02:b7:
                    4f:93:bc:82:ab:86:ac:3f:2b:3d:e7:c0:ef:03:ec:
                    38:0e:af:6c:77:87:13:ae:f1:ed:98:9e:de:0c:46:
                    2c:44:49:cf:6f:07:ba:6c:b5:04:a2:d8:30:5c:aa:
                    c5:8b:0c:13:32:b7:b8:a5:5b:8c:af:5e:7b:11:ec:
                    b6:d6:70:ba:ed:06:6d:18:7a:bb:6f:21:40:d4:3b:
                    28:be:5c:5f:43:17:1d:35:b5:04:42:d3:60:40:80:
                    71:d9:49:6e:6f:dc:7c:ed:a9:5c:a5:47:74:81:a6:
                    4b:68:91:86:d0:2c:aa:48:e4:da:49:74:fd:9a:46:
                    de:29:41:00:d3:58:89:a8:03:8a:06:37:ab:91:7d:
                    3e:e7:8f:dd:70:97:9a:0a:f0:a9:f7:95:85:83:d4:
                    f6:07:b7:2c:0d:d4:15:0a:11:39:5f:87:b6:a8:71:
                    03:6d:4b:51:61:82:78:4b:cd:f7:c7:a6:e9:bd:31:
                    9c:26:a3:d3:9f:5f:9f:72:7f:c0:a9:16:f4:77:20:
                    6c:a8:3e:51:dd:12:25:dd:c7:13:5e:89:28:6c:31:
                    5c:3b:21:f1:7d:51:3a:f3:12:40:48:13:39:a1:16:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7D:2D:29:E2:4C:15:68:93:F6:D3:17:A0:46:B7:44:7A:D1:61:14
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133382e302f32342d3234203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:10:e7:7e:16:0b:32:40:90:b5:9c:9f:48:e1:59:2e:c5:
         48:c8:46:62:31:38:45:f4:6f:ea:3c:8e:1c:8e:0a:f5:ee:8f:
         12:1a:1c:ad:3e:89:d6:0c:59:0a:33:f4:77:53:41:83:1f:e2:
         81:a8:be:49:bb:d4:3e:f2:43:2a:68:04:6f:f6:f3:f9:fa:56:
         1d:93:e9:80:d0:1a:a9:cb:3b:ce:d8:96:1f:73:fd:e0:b0:57:
         78:67:ff:3a:8a:9f:01:02:c2:7f:83:05:f9:39:09:c1:97:f4:
         06:3b:ed:26:7f:0d:ce:a9:37:cd:9b:e5:3f:8a:14:28:3c:da:
         a5:07:61:e2:5b:06:82:85:e8:db:4c:a2:fc:0a:aa:83:63:11:
         19:a5:86:18:fd:ff:c1:2f:1e:a3:f8:73:a8:e4:a9:5d:8a:ce:
         86:4d:8b:bd:ae:04:35:a4:2f:c3:23:c5:b8:02:44:5f:1c:fc:
         9d:a1:a9:62:6a:80:20:b1:9f:b6:9d:96:b1:b7:9c:1a:26:a2:
         e9:48:32:69:38:cb:c2:b4:d5:84:d7:e5:65:e8:d9:4e:bb:23:
         f3:25:82:0c:9e:6d:9b:5e:26:70:e4:a2:1d:c3:54:15:fe:db:
         5c:79:97:ed:64:d5:36:b6:f5:f8:65:33:77:92:f3:d5:3a:21:
         30:bb:26:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:43 2026 by rpki-client