Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6631303a3a2f34382d3438203d3e20313333383436.roa
File:                     323630323a666166643a6631303a3a2f34382d3438203d3e20313333383436.roa (raw, json)
Hash identifier:          XBCPc5EEES4vCG6Pd3a0JmyBEEmfWQybEo600+7kOiM=
Subject key identifier:   0E:F4:EC:AD:C6:CB:DB:DB:D6:C9:E3:85:EC:F4:B6:D1:02:E5:C9:3C
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       2E9B00258D1C85106A229DB0DED70C509FCA3828
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6631303a3a2f34382d3438203d3e20313333383436.roa
Signing time:             Thu 16 Oct 2025 13:12:03 +0000
ROA not before:           Thu 16 Oct 2025 13:07:03 +0000
ROA not after:            Thu 15 Oct 2026 13:12:03 +0000
asID:                     133846
IP address blocks:        2602:fafd:f10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9b:00:25:8d:1c:85:10:6a:22:9d:b0:de:d7:0c:50:9f:ca:38:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 13:07:03 2025 GMT
            Not After : Oct 15 13:12:03 2026 GMT
        Subject: CN=0EF4ECADC6CBDBDBD6C9E385ECF4B6D102E5C93C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:4e:d3:7c:36:fa:2a:3a:fc:a7:6a:a7:09:
                    ee:64:d0:13:82:91:2b:7b:2e:b9:2d:e3:d0:cc:22:
                    dd:39:1b:be:17:22:0a:a9:62:59:7b:52:3f:c2:b7:
                    6d:a4:76:e2:4d:6d:47:a7:b2:a6:15:25:c0:4d:b2:
                    e3:89:0f:40:aa:68:3f:11:e1:1c:91:2f:a3:23:5f:
                    84:34:c3:95:cd:cb:38:82:e6:1b:26:cd:c2:7d:14:
                    e6:0a:ff:12:ec:8c:fd:76:d4:3a:0f:fa:d3:3a:f8:
                    17:64:44:28:0f:fc:ef:d2:32:11:61:6b:e5:cb:49:
                    68:01:fb:8d:d7:27:40:4b:ab:d7:41:a5:ca:1b:23:
                    9c:09:15:f8:59:e8:1b:b5:04:24:4e:46:a8:f2:4a:
                    51:ff:13:b9:dc:ae:ba:98:e9:46:ef:48:f5:59:00:
                    61:84:bc:35:cc:bc:16:03:66:4f:fb:67:4c:70:21:
                    04:a6:f9:56:c2:ea:da:57:72:40:f8:15:b7:9f:8d:
                    17:06:26:4b:d2:d7:d9:53:75:7a:50:e0:79:17:5b:
                    cf:2b:61:b4:89:f3:bc:2f:dd:36:aa:87:47:b7:46:
                    08:64:3a:6a:1d:2e:14:5b:77:eb:08:93:20:98:55:
                    fd:04:3c:a1:54:50:6c:90:14:e6:a8:9d:35:a3:11:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F4:EC:AD:C6:CB:DB:DB:D6:C9:E3:85:EC:F4:B6:D1:02:E5:C9:3C
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6631303a3a2f34382d3438203d3e20313333383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f10::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:58:d2:31:a0:91:6b:8c:75:68:a5:c9:47:9a:c0:d1:2c:e4:
         79:50:27:8c:59:9e:e1:c9:1e:22:b8:32:4f:45:c7:84:98:80:
         15:32:51:22:13:b5:c9:01:8a:a7:82:75:1c:9a:c1:a5:93:9b:
         f6:0f:07:7e:b3:cb:db:4e:13:26:f4:79:12:c5:ad:c1:8f:79:
         08:d3:4b:63:1c:94:2b:0b:f8:d2:41:79:50:92:05:ea:0a:bb:
         5c:9a:28:06:99:43:14:09:ce:b4:1a:df:4b:13:f7:80:c6:7f:
         9a:17:dc:e6:fd:aa:07:41:c5:d5:06:aa:ed:44:d5:2a:3b:1b:
         15:ca:e1:f7:3e:3f:2d:09:78:9f:36:e5:11:d5:c6:10:c9:87:
         d7:0b:cb:01:05:79:96:2c:11:f3:38:99:0e:9a:f6:fd:04:5e:
         a0:78:e9:66:5f:c6:6b:18:88:54:b2:ff:65:25:0d:e1:0b:60:
         46:70:be:ea:32:0f:91:02:97:7b:ee:9c:ec:4c:52:d9:a4:d2:
         a7:e8:f5:d7:64:64:6d:4c:d7:41:64:c0:c4:2b:fd:0b:56:85:
         26:db:42:e2:c9:83:28:7b:d2:6e:3d:de:7c:ba:ca:0c:14:ce:
         d1:0c:2e:39:54:31:42:22:ea:fc:1b:5f:4f:21:9a:ab:d8:53:
         e0:e3:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:07:33 2025 by rpki-client