Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          9SvVH5FCOHwVoN1OrmT86uthi3Hf1fe4UIdKB5ehEkc=
Subject key identifier:   62:19:8D:E1:67:A2:67:22:1F:33:69:56:88:FA:38:D6:83:10:05:1D
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       655A2C00CFCE1E66F9745DC87A16598B7E2765AD
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa
Signing time:             Thu 30 Apr 2026 10:12:08 +0000
ROA not before:           Thu 30 Apr 2026 10:07:08 +0000
ROA not after:            Thu 29 Apr 2027 10:12:08 +0000
asID:                     34927
IP address blocks:        2602:fafd:f40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5a:2c:00:cf:ce:1e:66:f9:74:5d:c8:7a:16:59:8b:7e:27:65:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Apr 30 10:07:08 2026 GMT
            Not After : Apr 29 10:12:08 2027 GMT
        Subject: CN=62198DE167A267221F33695688FA38D68310051D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:06:8d:3d:09:50:0f:bc:c9:ca:85:3e:10:
                    7c:a2:b0:03:d5:2d:95:9a:72:99:cb:28:8c:6a:39:
                    24:43:8d:63:46:3c:66:31:f1:58:70:91:a6:b6:2d:
                    1e:45:2d:ce:22:56:60:29:51:7c:d3:70:73:e4:b5:
                    c7:c5:f1:d2:b5:22:f8:a8:9f:d6:01:b2:18:cf:87:
                    26:5e:35:bd:88:63:bd:8d:7b:72:b1:b7:7c:b6:cc:
                    fb:b7:f8:40:3a:53:b7:8b:a6:6a:51:d7:e6:8f:52:
                    c9:a4:06:e4:05:39:84:7d:43:dd:27:58:02:04:1d:
                    18:fb:bc:31:01:2b:11:6a:15:61:3a:1e:84:38:f9:
                    a6:60:ea:21:b4:6a:38:0c:34:eb:fd:9e:18:75:40:
                    3b:50:05:1d:f1:af:66:11:ec:69:3b:c6:81:b8:ac:
                    20:07:c0:e8:24:fd:37:59:ca:c0:4c:64:80:bd:cf:
                    ea:7a:e1:7c:23:03:b8:6f:51:6a:07:62:c1:db:ee:
                    8f:a4:d2:88:e4:45:e3:cf:7d:20:a4:20:0a:b6:84:
                    71:7c:5c:e7:52:e5:0e:db:1c:57:68:0d:e0:c8:ba:
                    39:89:2f:be:e8:f8:28:f4:11:bc:35:82:57:26:be:
                    69:5d:cf:98:fc:10:fa:48:3b:a4:1d:fa:25:ba:5b:
                    81:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:19:8D:E1:67:A2:67:22:1F:33:69:56:88:FA:38:D6:83:10:05:1D
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f40::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:c5:f9:6a:24:35:f3:c6:2a:41:04:ec:62:df:6f:e6:7c:7a:
         e3:9f:f5:68:95:91:4b:c3:e2:b6:6e:51:0f:31:be:cc:c9:cb:
         22:53:17:42:78:86:f5:92:11:33:39:d5:29:c3:6d:3f:42:e7:
         f0:97:d4:af:7e:96:9b:75:b1:84:06:3c:3b:87:a9:af:7e:9a:
         1e:bb:d6:2b:c5:73:68:fc:b5:9b:10:a1:13:f5:7e:7d:29:12:
         92:6b:fb:50:76:57:6e:2c:73:8f:22:2b:8e:7f:86:3d:b7:84:
         e0:e7:99:27:04:53:f5:f5:45:84:18:df:6b:21:60:58:6a:8b:
         bd:2e:97:7f:f7:94:64:50:31:17:7b:bb:90:26:64:86:d5:73:
         71:61:7c:26:59:20:b3:6a:27:f5:08:0e:fd:7e:79:3a:06:98:
         d3:d8:49:85:11:bb:b1:0a:23:00:20:8e:24:86:0b:1f:18:f4:
         91:b7:c2:22:bf:49:98:ef:c0:a2:f3:4c:19:c6:92:4d:4f:cc:
         95:97:9e:a9:90:47:68:7f:a9:84:ca:f6:64:74:d8:8b:b5:da:
         21:8b:00:d4:78:40:5b:b5:88:d5:d2:22:e6:86:fb:ae:c8:a2:
         71:0f:ed:d5:46:0c:43:49:2b:e8:26:c9:56:fa:d0:2e:e2:42:
         f2:2b:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:10 2026 by rpki-client