Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          5eXTF9gzfsmx7pzMJBPTk90hcHeKmWPNUe68b3f2wbA=
Subject key identifier:   97:60:C0:4A:9B:D4:D4:97:03:59:53:D7:39:00:87:EC:A2:B9:D6:46
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       0A1B2CD506EB1BD6F783FDE085ADDBFFB95A1C78
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Wed 17 Sep 2025 14:08:52 +0000
ROA not before:           Wed 17 Sep 2025 14:03:52 +0000
ROA not after:            Wed 16 Sep 2026 14:08:52 +0000
asID:                     200775
IP address blocks:        2602:fafd:f0c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1b:2c:d5:06:eb:1b:d6:f7:83:fd:e0:85:ad:db:ff:b9:5a:1c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 17 14:03:52 2025 GMT
            Not After : Sep 16 14:08:52 2026 GMT
        Subject: CN=9760C04A9BD4D497035953D7390087ECA2B9D646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:c2:44:b0:dd:2e:d5:46:84:b9:1f:e4:6f:
                    d0:36:11:63:6d:38:91:47:41:e4:bb:3d:b4:2b:66:
                    c8:1d:68:42:e6:d7:70:f7:c3:34:7b:c2:25:f7:ab:
                    94:09:9f:66:7a:07:d8:4c:af:e7:98:ff:b2:34:a3:
                    6e:f4:9c:f1:79:18:f3:05:81:41:c9:c4:df:0b:47:
                    a9:88:b1:3a:14:3d:66:d1:2c:07:6e:9c:80:4f:61:
                    bf:a4:2f:da:4a:96:4e:e5:c2:fd:b0:e3:e6:32:5d:
                    0d:3a:7e:74:d5:c1:c3:5b:28:b6:5f:ed:ea:3b:82:
                    0c:87:55:a8:c1:8e:2f:84:44:29:70:25:aa:9b:50:
                    d3:fd:de:f0:57:04:d7:2c:b2:04:ce:9f:fd:1e:e7:
                    a5:96:b9:30:77:62:3f:33:a1:bd:5a:b5:bb:e8:bc:
                    4f:96:91:f9:5c:91:0c:3f:25:6a:13:3e:06:6f:3c:
                    d8:f7:af:44:3e:4d:ab:b6:25:26:fc:16:c9:3c:9a:
                    be:7f:b3:4e:c3:f5:76:13:b0:8f:8c:19:9f:82:c9:
                    27:61:41:59:0f:72:ac:99:34:c3:7c:da:69:67:13:
                    79:87:dc:19:5c:7a:c7:8e:3b:6f:1d:8d:4b:7e:7d:
                    67:a1:8c:14:7f:15:40:79:82:7b:62:54:79:2d:4c:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:C0:4A:9B:D4:D4:97:03:59:53:D7:39:00:87:EC:A2:B9:D6:46
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:2c:68:e1:3e:8d:b6:40:7f:9d:04:99:7f:b0:11:4e:bb:bb:
         0b:17:e7:fd:fe:0b:14:0d:7c:d8:a2:0d:5d:6a:35:d6:5a:ec:
         d7:fd:c8:be:c6:ee:a0:2b:cd:a0:fd:58:17:8f:54:6b:b9:be:
         9c:a1:51:36:ef:57:38:b4:53:30:06:99:94:f9:7a:2f:2b:6c:
         0b:63:72:3c:95:0a:6b:27:c7:e4:d0:70:9e:be:3e:36:98:bf:
         ac:84:f3:d2:6e:aa:11:1f:86:75:c3:94:4c:a2:9a:15:d8:39:
         2b:1f:80:be:b8:99:06:70:39:d9:30:5a:a5:39:08:b5:d4:db:
         45:49:f0:42:e1:82:6c:3d:54:1d:c8:f9:fb:df:c3:ae:13:e2:
         8d:df:19:b2:b2:14:eb:90:86:87:d6:f9:ec:56:d4:5b:2a:64:
         a6:7d:69:55:37:3c:a1:4e:8b:be:e4:70:20:a0:11:d2:38:70:
         78:3f:a1:17:ff:84:f8:61:35:15:b2:42:fc:ef:fe:77:d9:63:
         89:ac:44:f1:64:c7:fa:5d:9e:d9:fc:0b:17:12:e5:2b:1e:3b:
         7e:10:90:70:e4:3a:20:59:77:d3:9a:1e:f8:10:46:d1:a2:b3:
         ea:04:a9:5e:b1:78:06:5a:7e:3d:0e:7a:bc:7a:ed:23:5f:a5:
         e6:51:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:19:47 2025 by rpki-client