Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662313a3a2f34382d3438203d3e20323037313432.roa
File:                     323630323a666166643a6662313a3a2f34382d3438203d3e20323037313432.roa (raw, json)
Hash identifier:          1XDJT0minxRo3iaZDGstu6TSbIbRXKSluAiX8KDEHpI=
Subject key identifier:   CC:2E:FD:D6:CD:25:C1:E4:93:CA:7F:EA:E0:90:F0:82:C4:DD:CC:EC
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       1E4B4AA41C6B511B2BE1165716DE7CA65C8B5611
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662313a3a2f34382d3438203d3e20323037313432.roa
Signing time:             Thu 25 Sep 2025 00:08:56 +0000
ROA not before:           Thu 25 Sep 2025 00:03:56 +0000
ROA not after:            Thu 24 Sep 2026 00:08:56 +0000
asID:                     207142
IP address blocks:        2602:fafd:fb1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4b:4a:a4:1c:6b:51:1b:2b:e1:16:57:16:de:7c:a6:5c:8b:56:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 25 00:03:56 2025 GMT
            Not After : Sep 24 00:08:56 2026 GMT
        Subject: CN=CC2EFDD6CD25C1E493CA7FEAE090F082C4DDCCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:cf:81:a6:fd:2c:c4:a2:18:f4:17:6a:6e:
                    44:ec:00:94:4d:ff:a8:12:08:6a:e3:23:65:96:35:
                    36:d7:8f:c8:6d:8c:cc:87:97:65:00:62:35:2a:72:
                    44:f9:c0:42:0e:c7:1b:14:40:0d:fa:11:4f:8b:2d:
                    59:fe:25:90:54:3e:1f:cd:9a:5a:9a:bd:ea:b6:26:
                    fb:58:81:88:f1:2e:6e:9b:15:a4:ea:e5:68:54:39:
                    03:09:13:4e:82:1f:c9:80:79:6b:e3:c6:2d:4c:de:
                    52:35:5d:6d:14:69:8a:18:b7:d8:bb:4f:df:7c:1d:
                    27:14:c0:ea:76:3b:ab:c4:8b:93:8a:5e:04:4a:83:
                    4d:8c:76:04:14:a4:4d:c7:d7:9d:04:71:ac:f3:24:
                    af:2a:93:0a:4a:c6:0f:f6:f4:04:b9:78:c5:02:07:
                    01:82:d8:88:b9:91:2e:82:e7:86:a3:5b:94:42:a7:
                    72:d0:a2:eb:9f:c5:43:68:c6:a6:5e:b7:7d:2d:3c:
                    56:99:b8:87:94:b7:54:03:71:95:9a:1e:7c:32:b9:
                    b1:0b:16:19:82:2c:75:57:6c:1c:c6:d1:19:7d:a1:
                    a8:16:11:43:e8:3c:0e:3e:39:e8:cf:47:05:8a:b2:
                    b0:ea:3b:7b:41:08:bc:69:45:bd:47:c8:63:2c:2c:
                    60:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2E:FD:D6:CD:25:C1:E4:93:CA:7F:EA:E0:90:F0:82:C4:DD:CC:EC
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662313a3a2f34382d3438203d3e20323037313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:5d:ba:b4:8c:8d:82:d7:f7:ee:00:22:79:e4:73:1a:11:b8:
         03:aa:9d:fe:b8:db:de:ad:e8:82:d2:c2:0b:02:04:44:5d:83:
         7e:a3:85:35:1d:37:1f:be:ac:98:47:41:47:dd:75:d3:fd:ba:
         fc:fb:fc:0d:25:50:3b:d4:f2:8e:d8:1f:8f:87:d5:31:af:ba:
         0a:68:fe:62:33:65:d0:66:44:eb:de:b8:41:f7:9f:51:9b:dd:
         1f:c9:26:2d:cc:a7:26:b8:48:19:37:e8:80:3f:11:b0:74:55:
         f4:35:dc:5d:b7:11:a9:ff:81:22:62:62:d6:44:dd:8d:45:29:
         a4:aa:3e:bc:98:56:93:3e:7f:e4:7e:0a:06:45:2d:38:3d:8f:
         e4:42:3b:ee:b1:c8:6e:a4:0d:b9:7b:eb:e2:b3:cf:52:32:9e:
         42:ba:3d:41:4e:d3:95:2b:7f:d6:d3:bd:39:6a:9f:dd:2f:6b:
         b4:5f:3a:26:43:39:d3:21:51:a5:3f:a9:d3:bf:64:7d:a5:b3:
         39:3f:2e:f5:d9:a7:f7:39:f2:aa:f2:10:29:09:9f:b4:88:c1:
         b6:32:d2:90:ca:90:60:6f:9c:99:a1:53:4d:a1:98:40:3a:fb:
         1e:c2:90:39:f0:fe:be:e6:da:d3:bc:25:79:5e:d7:49:43:70:
         e6:1c:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:08 2025 by rpki-client