Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          qYQv7HpnKA+i5rihKUzFIy5osO0nY6n+FhhVcXRXDAY=
Subject key identifier:   23:8C:FF:D5:13:4E:01:80:3B:2E:95:70:54:AC:22:AA:F7:C8:B7:06
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       3607D122003E6675AEAD05AC30468D3EE97D2D40
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Wed 17 Sep 2025 14:08:52 +0000
ROA not before:           Wed 17 Sep 2025 14:03:52 +0000
ROA not after:            Wed 16 Sep 2026 14:08:52 +0000
asID:                     200775
IP address blocks:        2602:fafd:f0d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:07:d1:22:00:3e:66:75:ae:ad:05:ac:30:46:8d:3e:e9:7d:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 17 14:03:52 2025 GMT
            Not After : Sep 16 14:08:52 2026 GMT
        Subject: CN=238CFFD5134E01803B2E957054AC22AAF7C8B706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a6:04:05:21:cd:15:29:f5:57:7e:63:29:86:
                    59:b6:6d:8b:8a:8b:39:e8:2a:7d:69:82:09:f5:e5:
                    37:c5:01:0d:d0:78:3d:20:45:a4:07:c3:db:db:e9:
                    94:da:fe:4a:77:51:7b:7b:25:22:99:96:64:cc:00:
                    6d:eb:75:5a:1c:1e:f3:8a:f4:38:88:58:f1:62:7e:
                    0e:a2:6f:29:1f:96:12:7c:e3:09:11:f1:4c:c8:6d:
                    1e:f7:ab:4b:88:4b:24:67:8f:4f:1c:10:05:e6:92:
                    36:e9:0e:b0:07:eb:ec:75:6f:ef:bc:28:98:88:2d:
                    4e:a0:82:90:0f:b4:3c:b7:73:4c:63:52:1a:d7:f1:
                    cd:ee:f6:cd:e9:46:f4:c2:e5:03:e4:ee:5c:0b:a8:
                    1b:ae:6d:e0:a8:02:6a:60:2c:78:fd:43:d7:03:4d:
                    2e:79:ad:8b:1d:ba:72:af:76:ce:a7:8d:ae:63:bd:
                    ae:a9:87:de:4b:af:58:3c:b1:69:c2:11:a6:2a:90:
                    d8:9b:38:aa:ab:de:7e:82:75:07:38:f6:fc:4a:6c:
                    37:5c:4f:63:2b:c1:47:61:ea:a3:70:48:4f:ca:0f:
                    a4:19:3d:a1:e9:23:e6:d8:3a:05:fc:08:c4:0a:83:
                    57:bb:99:d0:d6:b0:b9:c2:00:86:8b:d7:82:a0:20:
                    21:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:FF:D5:13:4E:01:80:3B:2E:95:70:54:AC:22:AA:F7:C8:B7:06
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:89:58:af:74:6a:27:f5:fa:04:29:c0:f1:9b:2c:28:7c:f8:
         ba:0f:20:09:9c:09:4f:12:8e:6f:41:92:29:e3:99:be:98:89:
         b7:2d:e9:7b:0e:18:4a:05:84:b3:5a:a6:04:bc:5c:09:12:5b:
         23:de:53:28:ae:08:ab:bd:8d:25:f6:25:19:e4:36:72:89:00:
         6e:5a:9d:0f:f6:5d:ba:d1:d7:47:15:7c:1a:a1:3c:e2:b3:8a:
         5d:9e:33:58:d9:c8:07:08:37:9a:3c:9f:e8:99:fc:b3:c6:58:
         f2:00:45:dc:fe:86:68:71:23:82:f3:f6:2b:aa:ce:16:82:75:
         0d:95:14:6b:1d:c9:15:99:4f:9f:84:00:49:36:35:ad:df:29:
         39:e1:78:03:ba:06:17:76:b2:e4:41:cf:7a:47:9a:5e:0b:eb:
         57:c9:9a:5f:64:56:25:7a:20:dc:a9:05:59:5e:2e:cc:d2:b9:
         2a:b6:f0:98:3d:1c:cc:19:07:6f:e6:3c:4a:d4:7d:e8:6e:2e:
         99:d2:8d:23:c6:82:fc:97:9e:48:ea:6b:4e:f0:c4:2f:c2:72:
         b9:54:c0:50:ec:96:6b:31:19:ee:11:9c:96:fa:5b:f6:2e:e9:
         bb:a6:09:32:76:14:cb:25:2e:65:38:05:58:d8:c8:2e:5c:fc:
         3f:e9:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:28:04 2025 by rpki-client