Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa
File:                     323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa (raw, json)
Hash identifier:          09e+CtFAN6UiYXDg7JBdp1Nas/fjiJAMxROC61slkAc=
Subject key identifier:   7C:61:39:92:DB:A4:35:ED:AB:AE:12:14:6B:61:56:99:E5:89:24:23
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       33722397FFFD99772C8215B308C729EB4CB33E93
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa
Signing time:             Wed 17 Sep 2025 13:08:51 +0000
ROA not before:           Wed 17 Sep 2025 13:03:51 +0000
ROA not after:            Wed 16 Sep 2026 13:08:51 +0000
asID:                     204789
IP address blocks:        2602:fafd:f04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 02:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:72:23:97:ff:fd:99:77:2c:82:15:b3:08:c7:29:eb:4c:b3:3e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 17 13:03:51 2025 GMT
            Not After : Sep 16 13:08:51 2026 GMT
        Subject: CN=7C613992DBA435EDABAE12146B615699E5892423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:7a:bb:47:b5:7c:89:2a:75:e0:a5:fb:1d:
                    68:00:ba:55:49:9f:8a:de:e1:85:21:37:6c:8a:13:
                    ad:74:59:c1:4b:ac:45:d3:38:b9:cf:7e:51:ba:4b:
                    35:f1:87:4d:bd:24:2a:41:1b:7c:b7:83:a1:a0:19:
                    6a:dd:43:ad:14:df:a4:a7:58:c1:14:09:b0:9d:e3:
                    f1:f6:23:2c:95:04:36:e1:bb:b1:19:a2:31:9e:c8:
                    6e:d2:14:19:f1:2c:e7:7b:2e:54:fb:d8:72:35:9d:
                    7f:1a:7d:08:65:9f:26:d9:a7:93:09:39:ef:a3:7c:
                    6b:ff:ba:c7:b7:e5:dc:a9:73:c1:a0:47:46:b5:e1:
                    c1:73:b1:14:10:06:a1:87:1a:af:a6:3c:b3:07:3f:
                    1d:40:84:37:ae:ef:b8:4c:23:2c:9d:13:08:b5:45:
                    64:7e:b0:8d:90:77:9f:89:b5:92:f9:82:2e:59:7c:
                    ae:02:9d:75:5f:d9:55:f4:af:42:3f:78:a3:a3:61:
                    15:61:80:ba:1c:43:73:01:15:88:26:2f:92:4e:8f:
                    ac:7b:0b:1f:a0:f5:da:e5:06:8a:17:b9:5e:61:dc:
                    ac:e4:5e:97:cb:d2:1b:e2:fb:fe:1e:39:37:a1:0f:
                    d7:ed:76:07:bd:62:98:26:40:ee:3b:db:5a:48:10:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:61:39:92:DB:A4:35:ED:AB:AE:12:14:6B:61:56:99:E5:89:24:23
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f04::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:70:17:15:98:f2:5a:53:0c:5f:1d:ec:98:1e:15:fd:b0:4e:
         b2:56:fd:97:7d:d1:44:0a:7f:3e:8f:e6:ef:60:77:13:e7:01:
         1b:f0:b4:fd:f9:01:ca:c5:6c:46:cf:38:87:35:93:ec:bf:bc:
         42:01:fe:46:f2:64:15:26:3a:b4:8b:bc:98:56:23:da:e3:87:
         79:1b:b8:26:a6:1e:4e:20:90:11:e6:19:ea:35:90:0c:e1:77:
         fd:58:b6:03:ca:83:61:b2:65:09:6a:29:a3:aa:81:5e:dd:9c:
         7c:79:b0:e8:73:8c:d3:df:1a:46:5d:46:6e:49:8f:1a:3b:10:
         da:b5:f9:18:62:08:b6:38:61:cd:bf:98:85:f2:45:ba:82:02:
         db:5c:1b:4b:5f:6e:90:4f:77:c9:b3:41:d1:e7:7c:9d:c2:6e:
         ad:18:9a:87:ce:06:35:4c:c9:be:e2:a2:9e:95:e3:df:96:c4:
         39:4d:20:01:45:78:ee:d9:02:f5:6b:16:41:7b:ea:a1:a8:88:
         70:33:f7:7b:ab:69:98:8d:e6:92:02:1a:be:77:62:94:82:a3:
         ce:63:07:c1:ac:8a:d6:80:ec:6f:3b:fe:fa:b3:fd:e3:53:93:
         d9:40:70:f4:f0:31:6d:60:92:0c:c3:09:57:24:50:67:c4:0a:
         d0:25:89:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:59:22 2025 by rpki-client