Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          Cz0wMI8cW/UcBqpg4itF+kuWA9qrtVJIw8NWnxIfxlw=
Subject key identifier:   7F:95:71:5F:7D:46:E2:EA:B0:43:B6:0C:E1:A4:D5:73:84:D8:2E:78
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       4455C9A09BB28496237B65B034343702B0120D0F
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa
Signing time:             Tue 23 Sep 2025 00:08:54 +0000
ROA not before:           Tue 23 Sep 2025 00:03:54 +0000
ROA not after:            Tue 22 Sep 2026 00:08:54 +0000
asID:                     23470
IP address blocks:        2602:fafd:fb2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:55:c9:a0:9b:b2:84:96:23:7b:65:b0:34:34:37:02:b0:12:0d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 23 00:03:54 2025 GMT
            Not After : Sep 22 00:08:54 2026 GMT
        Subject: CN=7F95715F7D46E2EAB043B60CE1A4D57384D82E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:60:97:ad:8c:32:64:53:9d:0f:59:73:70:
                    85:d3:6c:e0:c8:f3:82:61:36:48:40:e6:38:f1:2e:
                    a5:13:4a:82:7c:64:5a:18:ab:f3:00:84:28:9a:4c:
                    25:c4:5a:4a:00:43:86:a4:7a:7e:39:e8:f3:bc:52:
                    81:12:4e:49:40:9c:f8:28:c0:3a:88:0e:b2:4f:81:
                    0d:c5:91:13:5b:6b:5f:9a:5d:93:c0:47:28:b4:d8:
                    16:6e:7b:3a:bd:35:f3:52:15:87:c1:27:44:ec:19:
                    ef:bf:a1:fe:7c:16:e3:fa:93:fd:d7:7d:b8:40:58:
                    1a:8b:28:b9:55:4f:ff:3c:c6:84:33:13:62:c1:21:
                    bd:c2:23:24:16:15:8e:9d:5a:47:4c:cf:c3:f7:d9:
                    ba:85:19:3c:c9:c4:e6:70:66:97:1d:7c:8f:40:01:
                    a6:cd:93:da:07:0a:f1:80:ae:f8:0b:0e:38:65:4f:
                    8a:51:d4:ac:a8:6d:e8:34:62:93:ac:84:c4:d6:40:
                    8e:87:1f:50:a0:a8:79:a5:aa:8e:b1:55:7e:38:a7:
                    fd:69:cd:f8:17:91:19:a9:69:cd:02:da:88:f8:31:
                    05:87:ee:f7:86:d2:88:c4:74:d6:f9:fe:51:9f:40:
                    de:61:78:f9:70:06:33:cb:0c:c2:08:5c:37:57:01:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:95:71:5F:7D:46:E2:EA:B0:43:B6:0C:E1:A4:D5:73:84:D8:2E:78
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662323a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:c3:44:17:7f:d8:f8:60:58:a0:f3:3d:c9:01:cc:bf:57:
         75:03:9e:07:3e:50:75:7e:44:c6:02:3d:ff:ce:95:fb:43:0b:
         ea:12:9d:ea:09:67:04:c2:65:c4:4b:ed:f4:7d:c9:ea:9d:13:
         d4:8b:44:0d:9c:67:0e:a6:88:0b:71:23:70:d5:f8:54:11:5c:
         59:7d:67:5f:86:8e:26:c4:32:98:5f:1e:9e:42:40:d3:75:32:
         ae:34:0a:bc:1c:e7:83:c7:a4:02:70:6e:fb:8c:95:3a:fd:96:
         5c:13:c8:4e:e9:27:f3:30:d0:b8:80:5a:64:49:eb:91:a6:52:
         3e:c8:2d:03:64:09:e2:87:9a:f8:9e:84:61:c0:d1:91:85:04:
         22:2e:8b:08:d9:3d:8d:6a:24:38:cd:c6:c3:5b:af:e0:f6:bf:
         19:41:77:c6:3e:b0:22:19:0d:1c:21:eb:9d:f7:7e:08:a0:6e:
         c6:86:c0:29:30:19:e8:66:a2:47:a5:20:3d:72:14:35:e6:16:
         00:b9:f2:c9:e8:7f:cf:9e:6b:89:3c:71:6a:f9:0d:25:4c:85:
         eb:d3:54:28:db:5f:24:e8:76:3f:28:65:87:84:c7:0a:9e:81:
         2b:fd:77:fe:8b:f9:95:54:9e:e6:35:80:b5:7b:51:4d:46:aa:
         a4:0f:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:46:14 2025 by rpki-client