Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa
File:                     323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa (raw, json)
Hash identifier:          D0tYYYUsdap2quWG24xrmYKt72+bmp/TZtxoFyebRJw=
Subject key identifier:   FB:13:8F:00:A4:DD:D7:9F:4E:33:A3:DD:48:81:7F:6B:06:E6:80:51
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       5EE1823D4008FE2D97FB5FD89D6D5FCFD5C9D535
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa
Signing time:             Wed 17 Sep 2025 13:08:51 +0000
ROA not before:           Wed 17 Sep 2025 13:03:51 +0000
ROA not after:            Wed 16 Sep 2026 13:08:51 +0000
asID:                     202952
IP address blocks:        2602:fafd:f06::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e1:82:3d:40:08:fe:2d:97:fb:5f:d8:9d:6d:5f:cf:d5:c9:d5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 17 13:03:51 2025 GMT
            Not After : Sep 16 13:08:51 2026 GMT
        Subject: CN=FB138F00A4DDD79F4E33A3DD48817F6B06E68051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7f:a2:72:84:c0:60:8a:c2:26:d2:d4:1b:fa:
                    42:eb:c2:9d:c7:9a:bd:c0:44:b3:ab:c8:06:9e:a5:
                    41:dc:6c:9b:1d:bb:72:0c:ec:51:71:97:6f:70:a9:
                    a4:99:ab:ba:87:d4:80:38:37:bd:d1:d1:48:f1:79:
                    24:27:f9:c9:f9:17:37:89:22:98:16:be:bb:c2:3c:
                    c0:2d:cc:d5:22:fd:64:1a:39:d5:0e:4b:81:bc:81:
                    52:4e:2c:55:15:1a:05:2f:5e:41:85:67:a4:20:5b:
                    62:32:b3:dc:be:c7:e0:40:a5:52:56:70:4c:64:94:
                    6f:86:b7:d8:99:6d:26:5d:a5:20:d0:65:69:6b:83:
                    ab:97:fa:86:ec:da:0b:08:f4:b1:9a:fd:ca:89:35:
                    70:a4:c8:e8:eb:99:06:20:08:8c:a3:d4:e9:12:42:
                    66:ba:7f:83:f5:27:01:93:94:06:b6:1e:d5:6f:0e:
                    46:e2:13:56:83:aa:ce:ce:4f:11:65:55:97:a7:bc:
                    c1:0a:4a:7b:67:83:ab:58:01:66:d6:24:da:5f:e9:
                    04:02:93:6f:ae:b5:52:4d:60:3e:ab:85:93:64:69:
                    22:7d:94:7a:28:55:64:38:3e:5e:dd:47:2f:cd:2f:
                    17:07:bf:20:5b:62:60:c4:81:49:ab:d7:d6:77:2f:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:13:8F:00:A4:DD:D7:9F:4E:33:A3:DD:48:81:7F:6B:06:E6:80:51
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f06::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:81:a8:6b:97:22:d3:e5:08:8b:26:b2:8e:33:61:43:43:
         f6:fc:d4:35:b6:44:c9:78:c0:68:1f:9e:f4:0e:d4:cc:66:57:
         74:df:1f:1d:55:6a:09:3a:5d:c8:aa:87:5b:8c:37:a4:f9:ff:
         9a:79:96:b5:e8:b9:d1:d5:94:3e:b0:97:8b:36:09:43:39:74:
         a2:ea:ba:e3:d3:48:b7:a1:e5:fa:5f:7f:bf:dc:22:67:6c:64:
         c4:53:81:66:1e:e5:3e:b2:03:f4:04:32:1e:26:1c:1e:d3:a7:
         f7:66:2b:50:d3:d8:17:b7:36:71:9e:69:d6:2e:2f:1f:de:a3:
         06:be:30:6e:1a:1b:5c:0f:9e:78:67:12:84:71:bb:64:2c:ec:
         22:f4:6f:9d:f2:a8:77:bf:5a:06:ba:39:07:2c:90:6c:1c:53:
         cd:6e:72:bc:fb:cb:c4:01:ac:97:83:09:4e:ca:ec:1c:05:88:
         58:9a:5c:4b:5b:d9:cd:29:95:59:86:86:13:bd:65:92:3a:3b:
         43:af:d3:75:d4:76:e7:b5:38:8b:83:5e:2d:31:05:45:aa:d4:
         4f:45:c1:1c:cf:4b:74:46:d2:18:be:26:1c:db:0b:28:49:b6:
         e3:d2:fc:d7:54:5a:b2:ec:cf:1a:92:4b:2b:fb:98:97:18:8b:
         5c:4b:25:a9
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUXuGCPUAI/i2X+1/YnW1fz9XJ1TUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjUwOTE3MTMwMzUxWhcNMjYwOTE2MTMwODUx
WjAzMTEwLwYDVQQDEyhGQjEzOEYwMEE0RERENzlGNEUzM0EzREQ0ODgxN0Y2QjA2
RTY4MDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H+icoTAYIrC
JtLUG/pC68Kdx5q9wESzq8gGnqVB3GybHbtyDOxRcZdvcKmkmau6h9SAODe90dFI
8XkkJ/nJ+Rc3iSKYFr67wjzALczVIv1kGjnVDkuBvIFSTixVFRoFL15BhWekIFti
MrPcvsfgQKVSVnBMZJRvhrfYmW0mXaUg0GVpa4Orl/qG7NoLCPSxmv3KiTVwpMjo
65kGIAiMo9TpEkJmun+D9ScBk5QGth7Vbw5G4hNWg6rOzk8RZVWXp7zBCkp7Z4Or
WAFm1iTaX+kEApNvrrVSTWA+q4WTZGkifZR6KFVkOD5e3UcvzS8XB78gW2JgxIFJ
q9fWdy/cEQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFPsTjwCk3defTjOj3UiBf2sG
5oBRMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMwMzYzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzIzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9DwYw
DQYJKoZIhvcNAQELBQADggEBAHLFgahrlyLT5QiLJrKOM2FDQ/b81DW2RMl4wGgf
nvQO1MxmV3TfHx1Vagk6Xciqh1uMN6T5/5p5lrXoudHVlD6wl4s2CUM5dKLquuPT
SLeh5fpff7/cImdsZMRTgWYe5T6yA/QEMh4mHB7Tp/dmK1DT2Be3NnGeadYuLx/e
owa+MG4aG1wPnnhnEoRxu2Qs7CL0b53yqHe/Wga6OQcskGwcU81ucrz7y8QBrJeD
CU7K7BwFiFiaXEtb2c0plVmGhhO9ZZI6O0Ov03XUdue1OIuDXi0xBUWq1E9FwRzP
S3RG0hi+JhzbCyhJtuPS/NdUWrLszxqSSyv7mJcYi1xLJak=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:46:26 2025 by rpki-client