Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6661663a3a2f34382d3438203d3e203534363831.roa
File:                     323630323a666166643a6661663a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          Tx5MAQpgZw/wSk8yy0fNoiTuxhPac87DosVFZN2iudQ=
Subject key identifier:   99:F3:1F:91:3E:40:13:A6:50:60:36:C0:F4:7E:60:9E:11:63:9A:59
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       7D79062B5E758A62A7438472358CB7DDD166A8A7
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6661663a3a2f34382d3438203d3e203534363831.roa
Signing time:             Wed 17 Sep 2025 13:08:51 +0000
ROA not before:           Wed 17 Sep 2025 13:03:51 +0000
ROA not after:            Wed 16 Sep 2026 13:08:51 +0000
asID:                     54681
IP address blocks:        2602:fafd:faf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:79:06:2b:5e:75:8a:62:a7:43:84:72:35:8c:b7:dd:d1:66:a8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 17 13:03:51 2025 GMT
            Not After : Sep 16 13:08:51 2026 GMT
        Subject: CN=99F31F913E4013A6506036C0F47E609E11639A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:4d:73:e3:a3:0c:62:b9:4b:0c:3d:2d:b5:
                    e5:1e:4f:d8:b6:de:92:a9:fc:9e:c8:23:3e:47:54:
                    39:02:05:32:49:ae:3e:ef:9d:31:1a:11:ac:7f:fd:
                    4b:28:65:f4:04:a1:2f:d8:5c:3b:80:b6:0f:0d:fe:
                    0c:8f:70:a1:85:01:1f:a6:8d:e9:bc:1e:de:10:a0:
                    fe:b8:47:c4:aa:c5:df:f4:e9:54:ee:90:6e:f3:4e:
                    aa:e9:db:02:62:49:f9:dd:0c:46:17:ad:4b:80:95:
                    19:bc:c2:2e:db:d2:7f:b4:64:d8:23:1d:e8:d7:d2:
                    3b:e2:71:f6:c2:18:fd:81:1b:8c:c1:86:e7:a7:93:
                    55:7c:c4:78:b1:41:91:83:8f:2d:00:73:93:c7:68:
                    0e:8f:97:aa:50:36:85:ce:ae:8a:1f:93:c0:89:be:
                    c6:e5:45:04:7c:95:05:64:fc:bc:c8:cc:7b:27:44:
                    cb:32:fc:60:3a:e7:1c:5e:0f:42:47:92:ec:f7:64:
                    49:8f:8d:37:88:d5:b7:7e:74:5e:7d:f1:fa:f6:de:
                    d0:28:b2:e2:c8:ba:6f:98:e8:49:29:b4:17:92:00:
                    a8:85:8d:3a:75:71:dc:35:cb:5e:8d:a6:d9:ab:15:
                    c7:cb:5f:c6:14:cc:e9:ab:12:0b:d5:ce:11:aa:47:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F3:1F:91:3E:40:13:A6:50:60:36:C0:F4:7E:60:9E:11:63:9A:59
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6661663a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:faf::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:12:f8:0d:26:f2:95:2a:44:5f:ad:76:88:93:0e:a3:fb:8f:
         3b:f5:da:ca:ff:9c:2d:a9:92:e5:02:b5:e5:c3:e0:37:01:b4:
         76:ae:5d:5c:14:7e:50:21:5a:b1:42:9f:7b:e0:ee:46:61:ca:
         e7:94:b0:aa:9a:7b:37:7e:c7:6b:60:25:a4:f2:fe:d0:d7:3f:
         a6:7b:ff:00:5c:3f:36:e0:96:cd:d3:57:32:c4:36:55:ec:d6:
         27:bf:c0:18:2f:af:51:bd:bf:0f:20:a7:cd:a8:84:80:06:bf:
         d6:10:46:7a:13:e6:19:9c:4c:e1:80:d9:44:1d:64:54:c2:02:
         b2:ab:ca:f2:de:9b:dd:2f:b3:2a:c4:86:61:c7:b3:bf:63:54:
         3e:21:44:72:32:17:7d:e4:11:32:f9:fc:1d:a9:a1:36:bc:fa:
         a9:3e:72:2d:ad:cd:4e:b1:d7:28:4c:10:0b:53:13:b7:4a:b2:
         df:56:0b:5b:67:de:fe:2e:78:ed:29:a3:e1:e8:56:04:bf:67:
         95:23:44:3b:bb:0e:45:57:79:74:de:72:e6:cf:29:02:35:a0:
         90:9a:32:2b:e9:64:6a:79:8c:9f:30:96:dc:e2:a7:47:12:a5:
         98:de:54:18:4c:31:a9:ee:75:fc:ba:56:cc:31:b9:53:67:57:
         e4:12:c8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:02 2025 by rpki-client