Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa
File:                     323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa (raw, json)
Hash identifier:          IgbfyNXv0OXDJD4O2U4ZHHnXehvv1a1ud7m72i928qI=
Subject key identifier:   3A:C8:26:3E:86:35:8B:C6:8B:48:5F:15:03:20:BD:2E:D8:53:D1:6D
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       1A5DE02FE1DA55408E407A784DF6C8F2BB78D838
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa
Signing time:             Mon 29 Sep 2025 08:08:57 +0000
ROA not before:           Mon 29 Sep 2025 08:03:57 +0000
ROA not after:            Mon 28 Sep 2026 08:08:57 +0000
asID:                     204340
IP address blocks:        2602:fafd:fb3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5d:e0:2f:e1:da:55:40:8e:40:7a:78:4d:f6:c8:f2:bb:78:d8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 29 08:03:57 2025 GMT
            Not After : Sep 28 08:08:57 2026 GMT
        Subject: CN=3AC8263E86358BC68B485F150320BD2ED853D16D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:ab:a4:dd:bd:6b:2e:de:33:5d:7d:45:1c:
                    2f:19:bd:2e:25:f1:c0:d7:6b:cb:80:b2:a6:f1:f4:
                    af:28:d4:47:de:ac:3b:96:b2:54:48:e3:19:e8:cb:
                    9a:2a:e5:d4:82:0d:85:17:12:ad:c8:e0:69:2b:3f:
                    99:3b:39:eb:c5:30:20:b3:30:59:b7:2e:3a:52:73:
                    d1:f3:6f:e1:5b:c4:f7:b9:61:7c:6f:3b:db:5c:00:
                    22:c9:28:0b:63:4a:0b:ce:5a:81:25:11:68:89:13:
                    8d:ec:9b:da:64:2f:5d:85:95:fe:4e:74:82:20:45:
                    ef:2c:a6:62:61:7a:49:35:04:5a:d3:ac:0b:2c:89:
                    1b:8e:a5:cd:c8:e6:6f:29:e1:37:60:46:f3:0f:8c:
                    9c:82:bb:c5:56:c4:91:5b:72:71:f8:2c:ac:dd:7f:
                    09:7a:b1:d5:57:ce:a3:00:aa:59:61:a5:e0:1a:76:
                    bc:57:bd:28:ac:1b:74:69:47:1b:92:0a:5e:18:15:
                    a6:b6:a9:97:0b:16:9c:8b:64:26:9d:76:a5:77:c3:
                    fa:59:64:eb:60:ca:aa:25:d8:70:8a:4f:80:97:06:
                    3d:e0:d9:88:33:11:bb:c5:df:15:71:60:60:67:88:
                    62:5f:b4:8e:81:df:a3:84:21:e4:42:4a:9b:69:73:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C8:26:3E:86:35:8B:C6:8B:48:5F:15:03:20:BD:2E:D8:53:D1:6D
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:80:93:b8:f3:03:ed:01:f4:22:65:f0:c9:c3:91:f3:31:
         79:b7:37:3e:fc:a8:a5:ec:94:a1:50:64:ac:64:0b:6f:ec:4b:
         bf:2d:c7:c1:c2:ab:ca:a0:50:98:dd:5f:72:3b:86:2a:3f:c1:
         0b:3e:a0:24:41:57:f0:d4:57:ef:43:22:46:62:2d:35:d7:f7:
         aa:e2:4d:27:29:97:ed:4c:38:36:c6:47:76:10:21:8c:71:00:
         c2:1d:1e:b7:53:0a:bc:d5:8e:9a:ad:47:15:f0:ad:0c:a6:81:
         d9:15:23:1e:fc:f8:b0:d7:b9:9a:88:09:79:ef:92:2a:d2:15:
         fa:5c:77:a6:7c:b9:95:b7:94:01:8e:f1:6a:a7:f0:f7:a1:c1:
         d7:a9:e5:b2:30:8a:81:db:f1:0f:d1:75:da:d9:34:c5:7d:54:
         fb:78:5c:5c:0a:5d:14:47:ef:12:d4:36:1c:48:9b:db:33:6d:
         5d:2e:b7:c5:29:af:06:f1:ef:02:aa:34:bb:fa:bd:3e:02:11:
         6c:c8:22:c3:b4:0e:77:42:e8:e7:e2:b5:3b:dc:63:0d:e1:25:
         04:8e:5b:f4:dd:a5:63:82:3c:a8:33:24:15:00:32:c4:2e:ab:
         a2:95:c1:95:0c:8b:5e:5f:69:27:0b:83:e9:2e:36:56:fe:87:
         b8:df:22:92
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUGl3gL+HaVUCOQHp4TfbI8rt42DgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjUwOTI5MDgwMzU3WhcNMjYwOTI4MDgwODU3
WjAzMTEwLwYDVQQDEygzQUM4MjYzRTg2MzU4QkM2OEI0ODVGMTUwMzIwQkQyRUQ4
NTNEMTZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1arpN29ay7e
M119RRwvGb0uJfHA12vLgLKm8fSvKNRH3qw7lrJUSOMZ6MuaKuXUgg2FFxKtyOBp
Kz+ZOznrxTAgszBZty46UnPR82/hW8T3uWF8bzvbXAAiySgLY0oLzlqBJRFoiRON
7JvaZC9dhZX+TnSCIEXvLKZiYXpJNQRa06wLLIkbjqXNyOZvKeE3YEbzD4ycgrvF
VsSRW3Jx+Cys3X8JerHVV86jAKpZYaXgGna8V70orBt0aUcbkgpeGBWmtqmXCxac
i2QmnXald8P6WWTrYMqqJdhwik+AlwY94NmIMxG7xd8VcWBgZ4hiX7SOgd+jhCHk
QkqbaXNnxwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFDrIJj6GNYvGi0hfFQMgvS7Y
U9FtMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjYyMzMzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzQzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9D7Mw
DQYJKoZIhvcNAQELBQADggEBAE2rgJO48wPtAfQiZfDJw5HzMXm3Nz78qKXslKFQ
ZKxkC2/sS78tx8HCq8qgUJjdX3I7hio/wQs+oCRBV/DUV+9DIkZiLTXX96riTScp
l+1MODbGR3YQIYxxAMIdHrdTCrzVjpqtRxXwrQymgdkVIx78+LDXuZqICXnvkirS
Ffpcd6Z8uZW3lAGO8Wqn8Pehwdep5bIwioHb8Q/RddrZNMV9VPt4XFwKXRRH7xLU
NhxIm9szbV0ut8Uprwbx7wKqNLv6vT4CEWzIIsO0DndC6OfitTvcYw3hJQSOW/Td
pWOCPKgzJBUAMsQuq6KVwZUMi15faScLg+kuNlb+h7jfIpI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:07 2025 by rpki-client