Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6631303a3a2f34382d3438203d3e20313333383436.roa
File:                     323630323a666166643a6631303a3a2f34382d3438203d3e20313333383436.roa (raw, json)
Hash identifier:          Y+7pueq3OdJuJ08HbmADOFfZs/nK7tkQyVoKf4yJ56U=
Subject key identifier:   C2:9A:A8:F5:EF:C8:1F:76:79:F7:66:4E:59:C6:1C:1D:DD:32:C2:4A
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       2387982F10F6B3CC78EB55AE185127243B4B50A6
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6631303a3a2f34382d3438203d3e20313333383436.roa
Signing time:             Thu 17 Sep 2026 13:13:00 +0000
ROA not before:           Thu 17 Sep 2026 13:08:00 +0000
ROA not after:            Thu 16 Sep 2027 13:13:00 +0000
asID:                     133846
IP address blocks:        2602:fafd:f10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:87:98:2f:10:f6:b3:cc:78:eb:55:ae:18:51:27:24:3b:4b:50:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 17 13:08:00 2026 GMT
            Not After : Sep 16 13:13:00 2027 GMT
        Subject: CN=C29AA8F5EFC81F7679F7664E59C61C1DDD32C24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:a7:af:df:6e:28:a5:6b:04:d0:97:6d:6a:
                    c8:91:93:58:58:b5:65:3a:3c:9d:d7:d0:34:d5:0f:
                    4a:46:8d:20:4c:cf:33:56:f9:93:6d:ab:eb:64:e8:
                    7c:fe:16:b6:8b:d7:58:d4:2e:77:43:56:fd:9c:74:
                    db:08:57:53:bb:c9:a5:8e:41:de:58:79:36:95:b3:
                    b3:43:89:f6:fc:35:95:14:5f:03:b4:ca:b7:d2:53:
                    b8:ba:4e:02:77:ab:12:f3:fe:a1:fa:14:93:0b:0d:
                    b0:99:ee:a7:cd:d9:21:bf:88:ea:32:8e:ac:38:6a:
                    53:11:1f:fa:84:c0:8e:91:e2:02:03:b9:96:7a:6a:
                    a9:10:0b:58:af:21:ee:b2:91:28:6f:54:22:14:c4:
                    65:7f:46:e2:86:00:c0:0b:82:74:2a:48:fe:92:c4:
                    09:32:3a:2e:8b:34:d0:d6:b8:56:b0:cb:f6:c2:69:
                    0d:a8:6c:28:34:17:a4:ab:a1:d8:4e:60:58:52:c6:
                    73:de:5e:c0:8b:80:53:93:12:48:19:67:d5:d2:90:
                    6f:ff:b9:3f:79:64:be:3b:49:fe:fd:a9:96:cd:d9:
                    80:3a:ec:0c:a5:e6:88:ed:b6:42:d7:e1:d2:98:89:
                    7d:14:e3:fa:da:5c:d5:31:02:2e:5b:8d:a9:b0:59:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9A:A8:F5:EF:C8:1F:76:79:F7:66:4E:59:C6:1C:1D:DD:32:C2:4A
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6631303a3a2f34382d3438203d3e20313333383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f10::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:8f:c0:bb:36:01:af:06:44:26:23:92:a7:f7:f0:1f:0b:e6:
         4f:e2:bb:44:bc:15:cc:3c:22:b1:b8:e5:44:6c:a2:b7:57:fd:
         d3:d7:6a:c9:e1:02:a1:b3:77:1f:17:19:8f:cd:6c:77:14:f9:
         14:ae:ee:f3:aa:8b:b9:60:18:9e:97:e8:6b:ab:a1:9e:54:54:
         f4:37:7b:a6:de:e5:b1:d1:71:56:3a:c9:fc:ba:fc:3d:72:13:
         cf:9d:e2:74:47:c1:3d:c2:78:c6:d9:48:fc:b9:af:1a:ae:43:
         36:a5:6e:ad:89:16:bb:11:1b:da:3b:44:10:ee:e4:54:f0:3b:
         98:1c:d4:e2:a4:67:2c:1d:17:6e:bc:69:e5:a2:36:1c:9c:6c:
         34:c1:36:78:98:2e:46:17:a9:85:41:05:cc:64:b9:07:54:92:
         7b:43:a0:6b:97:6e:4d:32:c3:49:b6:c6:9a:5c:13:22:24:d5:
         ee:26:ee:4c:5b:bb:f6:86:ff:e7:26:53:a4:2f:ea:f4:44:19:
         fd:ed:3b:27:72:e4:fb:8b:49:f3:dc:3a:1c:54:28:62:65:e6:
         92:ab:bd:5b:d6:bb:63:e5:7b:11:5d:f9:18:da:f8:da:3f:f1:
         59:1b:53:da:3d:85:c4:d7:b7:8d:e5:3d:6c:13:8d:db:b6:88:
         d9:74:e4:1d
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUI4eYLxD2s8x461WuGFEnJDtLUKYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjYwOTE3MTMwODAwWhcNMjcwOTE2MTMxMzAw
WjAzMTEwLwYDVQQDEyhDMjlBQThGNUVGQzgxRjc2NzlGNzY2NEU1OUM2MUMxRERE
MzJDMjRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov2nr99uKKVr
BNCXbWrIkZNYWLVlOjyd19A01Q9KRo0gTM8zVvmTbavrZOh8/ha2i9dY1C53Q1b9
nHTbCFdTu8mljkHeWHk2lbOzQ4n2/DWVFF8DtMq30lO4uk4Cd6sS8/6h+hSTCw2w
me6nzdkhv4jqMo6sOGpTER/6hMCOkeICA7mWemqpEAtYryHuspEob1QiFMRlf0bi
hgDAC4J0Kkj+ksQJMjouizTQ1rhWsMv2wmkNqGwoNBekq6HYTmBYUsZz3l7Ai4BT
kxJIGWfV0pBv/7k/eWS+O0n+/amWzdmAOuwMpeaI7bZC1+HSmIl9FOP62lzVMQIu
W42psFn8EwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFMKaqPXvyB92efdmTlnGHB3d
MsJKMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMxMzAzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzMzODM0MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9DxAw
DQYJKoZIhvcNAQELBQADggEBADKPwLs2Aa8GRCYjkqf38B8L5k/iu0S8Fcw8IrG4
5URsordX/dPXasnhAqGzdx8XGY/NbHcU+RSu7vOqi7lgGJ6X6GuroZ5UVPQ3e6be
5bHRcVY6yfy6/D1yE8+d4nRHwT3CeMbZSPy5rxquQzalbq2JFrsRG9o7RBDu5FTw
O5gc1OKkZywdF268aeWiNhycbDTBNniYLkYXqYVBBcxkuQdUkntDoGuXbk0yw0m2
xppcEyIk1e4m7kxbu/aG/+cmU6Qv6vREGf3tOydy5PuLSfPcOhxUKGJl5pKrvVvW
u2PlexFd+Rja+No/8VkbU9o9hcTXt43lPWwTjdu2iNl05B0=
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:54:20 2026 by rpki-client