Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa
File:                     323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa (raw, json)
Hash identifier:          guAz4VVQBUwKkQYovsC4YmXVUmikO+b4o9frNQ4lZeg=
Subject key identifier:   36:83:83:D7:00:3A:2E:C4:7A:86:09:CD:A9:34:E0:EA:64:7F:1E:F0
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       5D0A4672C205A59A7EAD64E1587A130B4E07200D
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa
Signing time:             Wed 17 Sep 2025 13:08:51 +0000
ROA not before:           Wed 17 Sep 2025 13:03:51 +0000
ROA not after:            Wed 16 Sep 2026 13:08:51 +0000
asID:                     204268
IP address blocks:        2602:fafd:f09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0a:46:72:c2:05:a5:9a:7e:ad:64:e1:58:7a:13:0b:4e:07:20:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 17 13:03:51 2025 GMT
            Not After : Sep 16 13:08:51 2026 GMT
        Subject: CN=368383D7003A2EC47A8609CDA934E0EA647F1EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a5:4a:ae:8d:b1:53:ab:61:ad:81:71:88:aa:
                    54:de:cf:a8:b6:81:10:22:34:fc:23:e6:ab:b6:9c:
                    30:71:d0:78:fc:7a:e4:b6:0c:b7:8e:47:07:4a:46:
                    82:1a:eb:eb:84:5d:00:77:3c:f0:76:d0:6a:8b:19:
                    60:9e:23:d7:5b:27:60:2f:84:15:3b:65:b1:b6:63:
                    58:f2:2c:b2:62:7f:6e:85:3e:5e:28:8c:9c:3a:37:
                    57:a3:c2:d4:89:c1:20:f5:08:42:16:35:56:69:3b:
                    45:26:5e:c8:62:66:29:22:ed:b8:b2:ac:1e:77:04:
                    7c:94:12:7d:2b:6a:e1:94:db:52:ba:f0:81:68:bd:
                    1b:ed:85:19:1b:a9:e3:01:b0:b0:7e:0d:f8:a6:fa:
                    91:1e:1f:6b:9d:6d:a4:ab:a9:7d:f2:d3:34:e2:3d:
                    3b:0a:e4:d9:0c:c0:2d:4f:bf:41:8b:ae:d9:a2:8c:
                    73:7d:0a:2c:11:e2:fb:e5:6b:06:73:04:ee:fa:2d:
                    74:4d:1b:60:b9:78:a2:5b:04:6d:1b:be:03:87:59:
                    2d:34:7d:33:60:40:3e:56:85:70:b2:91:d5:86:79:
                    f6:b6:ee:7a:fb:93:9c:64:d1:24:8d:06:e0:46:80:
                    86:fb:60:2c:8c:fa:19:b3:39:76:1b:60:10:1b:5e:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:83:83:D7:00:3A:2E:C4:7A:86:09:CD:A9:34:E0:EA:64:7F:1E:F0
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f09::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:d8:ff:81:ea:f5:28:a7:c5:b9:6a:a6:ff:7d:6d:5c:cc:56:
         36:9f:f2:6e:18:4b:18:71:58:c0:24:49:e4:10:54:d4:ee:e8:
         86:6e:6f:f1:da:05:cd:75:06:98:92:94:56:29:cb:5c:f4:0e:
         d0:51:46:31:fb:54:ec:e4:7b:fc:bb:2c:7c:0c:c7:de:97:a2:
         ca:e7:a2:90:d3:f3:19:9d:cf:12:df:be:d0:ca:b6:6d:07:36:
         40:b3:7a:39:68:82:2c:1b:75:c6:5b:0b:77:b5:87:87:81:e3:
         75:2f:a9:93:78:ef:85:73:ae:42:d7:61:c7:72:1b:b5:be:19:
         97:1b:2c:94:50:d1:39:12:27:f6:4e:8a:17:03:26:10:e1:90:
         38:1f:9b:de:35:82:63:16:0c:9d:a2:4d:26:10:18:77:97:8b:
         8a:88:58:b0:35:a4:78:e5:45:66:2d:27:36:e6:3b:b8:56:60:
         54:af:ac:85:94:f0:9c:c3:65:95:4f:44:19:0c:c2:81:08:f1:
         82:30:40:75:f4:bf:37:a8:35:2a:d4:ef:90:78:c2:c7:f8:ea:
         8f:48:a2:a5:4b:6d:ba:02:8d:f3:9a:8b:4c:6b:f9:fa:9f:f0:
         33:1e:95:78:07:15:4a:c8:03:32:a4:68:b8:4b:f1:d6:91:9e:
         01:b4:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:15 2025 by rpki-client