Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630333a3a2f34382d3438203d3e20323039383631.roa
File:                     323630323a666166643a6630333a3a2f34382d3438203d3e20323039383631.roa (raw, json)
Hash identifier:          cli7pU+jj201KzQanUS5b9jEm7jByX23Cc3k0SGcR08=
Subject key identifier:   1B:A3:41:60:93:35:1D:3A:94:96:64:48:F6:19:58:EF:3D:ED:DA:67
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       47D7A8CD3EB2FB4F2F897C503B9E107D1A03E9AD
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630333a3a2f34382d3438203d3e20323039383631.roa
Signing time:             Wed 17 Sep 2025 13:08:51 +0000
ROA not before:           Wed 17 Sep 2025 13:03:51 +0000
ROA not after:            Wed 16 Sep 2026 13:08:51 +0000
asID:                     209861
IP address blocks:        2602:fafd:f03::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d7:a8:cd:3e:b2:fb:4f:2f:89:7c:50:3b:9e:10:7d:1a:03:e9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 17 13:03:51 2025 GMT
            Not After : Sep 16 13:08:51 2026 GMT
        Subject: CN=1BA3416093351D3A94966448F61958EF3DEDDA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:71:30:9b:0a:85:c1:68:ce:bd:6c:5d:d8:
                    cb:9e:2a:3b:8e:db:e0:47:cc:86:5c:9a:10:87:2d:
                    aa:e6:68:55:65:c9:59:e0:01:e3:17:2c:a9:a8:a3:
                    78:80:b7:b6:79:2b:17:d4:93:21:69:80:b4:42:05:
                    44:be:76:4b:0b:e4:36:42:35:00:da:a1:c0:11:64:
                    34:ce:ac:8e:5b:fc:b7:6f:ed:f5:77:2f:93:43:aa:
                    dd:5b:41:59:5f:6e:7e:43:d6:77:21:8f:76:b1:52:
                    15:a9:5c:2a:42:04:45:55:f2:d1:fa:e2:3b:a0:81:
                    24:fc:97:ca:09:0f:d3:01:e7:20:fe:d8:6e:14:f7:
                    1a:c6:cf:92:b6:83:ad:bf:41:7d:50:30:25:6a:04:
                    ce:06:34:32:9b:70:af:57:6c:b4:7d:48:cb:31:e8:
                    c5:de:63:9a:08:d3:56:b9:20:a5:9f:50:b3:a8:8f:
                    c2:32:49:bc:cc:65:ee:59:bb:73:c4:6f:66:43:1f:
                    2c:5b:8c:02:ef:12:94:23:c3:73:f7:34:c6:fa:d5:
                    bc:52:77:51:17:08:a1:37:1d:7f:c1:40:87:d5:d2:
                    fd:ca:3e:05:27:61:06:2f:fe:77:f4:ce:49:fc:17:
                    21:3a:d7:d6:47:1a:20:3d:4b:f5:20:ee:38:64:cd:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A3:41:60:93:35:1D:3A:94:96:64:48:F6:19:58:EF:3D:ED:DA:67
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630333a3a2f34382d3438203d3e20323039383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f03::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:d6:10:87:be:2b:bf:26:42:47:77:7a:d5:25:a3:b9:14:
         45:43:a3:bb:f5:ac:80:6e:f5:74:0d:3f:20:f5:63:29:1d:6f:
         e2:10:4d:e6:bf:20:f3:2e:ff:04:77:e1:53:e1:0a:70:ce:cb:
         24:27:72:53:f5:36:44:8e:12:f1:c6:d4:ec:17:5d:fe:48:61:
         97:01:00:5d:73:b7:79:b2:e3:c3:86:ba:b3:21:8b:13:cb:6b:
         f4:06:7b:07:ee:5e:e9:23:e3:ae:d3:86:b1:b9:bd:f7:e5:62:
         3e:77:9c:3f:0b:0a:69:d9:22:b6:d5:62:28:b3:a5:18:54:fe:
         a7:3d:c3:be:67:d2:fa:25:04:dd:cc:ee:07:20:03:04:8b:84:
         5d:a2:e5:77:94:cb:7e:94:2f:1f:cc:44:99:c6:7f:1a:9b:9d:
         71:c1:79:25:d2:1c:c3:70:ff:c8:6b:a8:d2:1d:75:2b:d5:26:
         e2:18:d4:54:48:d0:21:3e:b2:29:fd:57:80:49:22:33:93:19:
         df:d4:32:7c:36:c6:65:db:77:87:7b:cf:e0:06:d7:ec:53:91:
         8d:64:93:a2:08:d9:ef:c2:28:84:b3:dd:de:4a:4b:80:da:38:
         d0:09:00:de:4e:6e:d0:5d:72:1c:b8:2c:1a:5d:09:9f:38:ba:
         4d:fd:9f:28
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUR9eozT6y+08viXxQO54QfRoD6a0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjUwOTE3MTMwMzUxWhcNMjYwOTE2MTMwODUx
WjAzMTEwLwYDVQQDEygxQkEzNDE2MDkzMzUxRDNBOTQ5NjY0NDhGNjE5NThFRjNE
RUREQTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj5xMJsKhcFo
zr1sXdjLnio7jtvgR8yGXJoQhy2q5mhVZclZ4AHjFyypqKN4gLe2eSsX1JMhaYC0
QgVEvnZLC+Q2QjUA2qHAEWQ0zqyOW/y3b+31dy+TQ6rdW0FZX25+Q9Z3IY92sVIV
qVwqQgRFVfLR+uI7oIEk/JfKCQ/TAecg/thuFPcaxs+StoOtv0F9UDAlagTOBjQy
m3CvV2y0fUjLMejF3mOaCNNWuSCln1CzqI/CMkm8zGXuWbtzxG9mQx8sW4wC7xKU
I8Nz9zTG+tW8UndRFwihNx1/wUCH1dL9yj4FJ2EGL/539M5J/BchOtfWRxogPUv1
IO44ZM3ICQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFBujQWCTNR06lJZkSPYZWO89
7dpnMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMwMzMzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzkzODM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9DwMw
DQYJKoZIhvcNAQELBQADggEBAGsy1hCHviu/JkJHd3rVJaO5FEVDo7v1rIBu9XQN
PyD1Yykdb+IQTea/IPMu/wR34VPhCnDOyyQnclP1NkSOEvHG1OwXXf5IYZcBAF1z
t3my48OGurMhixPLa/QGewfuXukj467ThrG5vfflYj53nD8LCmnZIrbVYiizpRhU
/qc9w75n0volBN3M7gcgAwSLhF2i5XeUy36ULx/MRJnGfxqbnXHBeSXSHMNw/8hr
qNIddSvVJuIY1FRI0CE+sin9V4BJIjOTGd/UMnw2xmXbd4d7z+AG1+xTkY1kk6II
2e/CKISz3d5KS4DaONAJAN5ObtBdchy4LBpdCZ84uk39nyg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:37:00 2025 by rpki-client