Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323033343538.roa
File:                     323630323a666166643a6630353a3a2f34382d3438203d3e20323033343538.roa (raw, json)
Hash identifier:          8Mi8A1OKD7rImnTgxTQDbBLCaBJkMFWciYA3kGOwROY=
Subject key identifier:   0E:D7:75:5C:9F:99:47:AD:BD:83:C6:CB:B6:3F:EF:CE:EE:DE:0E:51
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       733EF51CAF83CA18F86D5C12A8B77FBA6A5193CC
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323033343538.roa
Signing time:             Wed 17 Sep 2025 13:08:51 +0000
ROA not before:           Wed 17 Sep 2025 13:03:51 +0000
ROA not after:            Wed 16 Sep 2026 13:08:51 +0000
asID:                     203458
IP address blocks:        2602:fafd:f05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3e:f5:1c:af:83:ca:18:f8:6d:5c:12:a8:b7:7f:ba:6a:51:93:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 17 13:03:51 2025 GMT
            Not After : Sep 16 13:08:51 2026 GMT
        Subject: CN=0ED7755C9F9947ADBD83C6CBB63FEFCEEEDE0E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:5b:a7:3d:38:13:b2:57:5e:dd:a9:3a:02:
                    db:44:0f:52:df:da:06:df:55:76:9f:8a:62:fc:d2:
                    1c:8a:13:eb:b2:48:26:40:cd:f6:c1:5b:94:44:44:
                    3f:af:5d:20:56:da:bb:da:df:26:2d:46:fb:d3:30:
                    2b:3e:ac:9e:39:fe:7f:e3:f1:3f:16:8f:3b:55:8f:
                    1f:0e:82:7d:13:ef:3b:86:06:f9:89:43:77:77:12:
                    78:b8:f1:72:03:98:11:0d:c0:13:3d:c7:84:9d:e2:
                    09:55:98:00:75:ac:4a:52:f9:4d:1e:14:f8:9b:ef:
                    15:46:91:a5:9f:ef:97:df:9b:cb:be:60:d2:9e:d7:
                    a9:ec:b2:19:f2:df:fe:30:96:9c:c4:2b:da:e6:40:
                    3b:9b:29:10:ad:df:9c:72:11:ae:6a:3c:39:cb:94:
                    fc:3f:67:aa:52:11:e6:44:eb:e3:ca:b7:cf:9e:14:
                    b1:09:e3:72:89:af:fe:ff:a9:22:cc:16:07:16:50:
                    84:bd:af:c3:51:8b:3d:25:8d:1d:f1:bd:1c:4d:db:
                    08:bb:1d:43:52:60:94:86:dd:4a:80:03:b4:72:00:
                    dc:ce:4b:fe:2b:c2:0c:41:5b:cb:b1:cb:2f:e8:33:
                    d7:fe:0b:37:ec:15:12:c5:c4:d2:2b:c6:b7:4e:53:
                    0d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D7:75:5C:9F:99:47:AD:BD:83:C6:CB:B6:3F:EF:CE:EE:DE:0E:51
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323033343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f05::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:10:8e:29:79:23:f6:eb:fe:ca:19:4f:43:f2:1e:fd:e2:07:
         63:10:52:e5:35:ce:36:d5:b3:af:e5:11:c4:0c:fa:04:64:e3:
         f0:28:2f:7a:d9:15:3e:b6:6e:d1:fb:61:d0:72:23:a7:da:2f:
         17:18:eb:a5:bf:85:b7:78:6e:58:00:17:3f:e8:ac:88:a0:33:
         00:4b:3c:16:22:71:99:0a:fd:ce:da:70:f2:62:97:39:df:c4:
         ee:fe:b3:ed:58:c3:cd:44:89:9e:93:09:36:4b:65:ac:78:0b:
         ea:24:77:61:9d:de:de:f8:43:3f:38:38:bd:28:20:38:cf:92:
         d7:4b:2c:1f:94:3d:ef:e0:03:cd:48:0e:93:cf:15:c2:17:e8:
         78:c3:8f:76:3a:f9:be:69:57:d8:60:52:d9:76:21:69:76:13:
         98:e0:2b:42:40:9e:ea:ca:d3:b3:dd:5c:c1:3a:91:0a:5d:90:
         c5:d0:ab:8f:06:2c:24:df:d1:b4:44:5d:c0:49:56:d8:d9:1f:
         16:45:d0:b6:d2:15:87:49:39:4f:cf:7f:45:58:c2:12:be:a3:
         89:fb:8c:b8:86:cc:b7:91:2a:22:06:22:a7:cd:ba:a5:9c:87:
         e6:25:63:ef:d9:05:b8:ed:37:b7:3e:45:a4:35:99:3d:9a:b9:
         e0:18:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:22:19 2025 by rpki-client