Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa
File:                     323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa (raw, json)
Hash identifier:          bmNTqXNGblb9IppWQmQsIyc0B9m/n/mehr1TnHi4M4c=
Subject key identifier:   0A:03:AF:44:38:B9:A0:59:50:78:6C:7F:2C:1A:EA:6C:23:F4:C9:76
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       35A70EAF285331706798BE690A1F6CA636065BFA
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa
Signing time:             Wed 15 Oct 2025 16:12:03 +0000
ROA not before:           Wed 15 Oct 2025 16:07:03 +0000
ROA not after:            Wed 14 Oct 2026 16:12:03 +0000
asID:                     200226
IP address blocks:        2602:fafd:fb5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a7:0e:af:28:53:31:70:67:98:be:69:0a:1f:6c:a6:36:06:5b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 15 16:07:03 2025 GMT
            Not After : Oct 14 16:12:03 2026 GMT
        Subject: CN=0A03AF4438B9A05950786C7F2C1AEA6C23F4C976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:19:56:38:d8:d9:65:34:fe:3b:77:2d:ee:
                    cc:78:30:35:5b:75:cd:17:64:93:29:8d:47:8b:f3:
                    45:ff:48:0a:cc:dd:7f:2f:98:34:09:13:ac:bc:b3:
                    53:52:92:b5:eb:a4:e4:4f:58:18:c6:e3:11:64:e7:
                    e2:8b:4b:a4:a9:36:5d:62:f5:4b:67:78:10:7c:21:
                    86:2c:c4:5e:aa:8d:ff:94:bf:f9:ce:16:d4:1b:80:
                    58:06:d4:6d:ea:69:b9:c8:c8:0c:85:a8:f4:44:45:
                    a0:76:99:5a:2a:ee:3e:a6:02:b8:b6:e7:fa:bd:c1:
                    48:0d:ca:10:c8:eb:26:3e:a2:31:ac:dc:67:13:af:
                    24:c3:eb:a3:19:bd:7a:3b:9a:d5:ff:4c:97:1a:a1:
                    0c:ef:9d:20:22:b7:62:2c:86:e7:87:38:7f:0b:d1:
                    6b:f3:8c:fc:f7:b3:52:3d:5d:c8:b8:54:39:52:a5:
                    f1:b1:25:2d:af:41:1a:49:08:12:91:cd:b9:a9:22:
                    f1:b6:df:20:4b:39:da:8a:3f:da:11:0f:78:af:ed:
                    b2:b2:1c:38:a5:b6:58:27:1d:c4:26:69:67:6b:52:
                    f0:9a:07:c4:01:73:61:50:d5:f7:69:e2:d1:db:69:
                    5d:5e:fd:11:f2:52:9c:e8:80:64:c1:f0:d6:7f:f1:
                    44:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:03:AF:44:38:B9:A0:59:50:78:6C:7F:2C:1A:EA:6C:23:F4:C9:76
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb5::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:25:a3:8c:27:bb:c8:21:1e:a5:c3:07:f3:f2:55:28:65:94:
         e8:e0:20:87:d6:2f:89:a3:8c:39:1d:f3:90:85:a5:e5:10:88:
         55:e5:2e:58:b9:6f:e3:72:48:1c:6d:cd:47:5e:2b:52:35:a6:
         25:55:b6:d5:0f:1e:50:d6:93:8b:50:68:d3:ac:2d:0c:a1:71:
         19:36:e0:f7:86:eb:89:69:06:1c:86:d5:04:38:35:f0:a8:a5:
         3d:a4:e5:c6:17:36:f0:74:c1:36:61:d7:87:a2:24:63:ac:77:
         53:3d:d5:0b:30:32:2f:af:79:3a:4f:42:bd:ec:ca:f6:74:4e:
         e8:47:ed:d6:8d:20:ec:0e:26:8f:af:0d:ef:33:d7:57:bd:87:
         96:90:4e:b9:a4:b7:20:f2:f4:bd:1c:3f:c7:01:20:cb:00:ea:
         ef:ea:63:a7:0f:d2:6f:13:dc:a5:c6:36:5b:8d:c2:2d:56:be:
         7c:7a:b8:5e:04:82:f7:7a:02:05:a9:1d:b2:b4:4b:98:a9:1a:
         e3:ad:6d:fc:13:a9:ca:5e:b6:6d:e5:46:89:93:88:e4:9e:3a:
         df:6c:06:67:3f:1a:02:1e:b8:af:19:4e:09:d3:96:39:5a:50:
         d6:31:67:2c:cf:a2:30:e3:ba:49:89:46:9a:10:a6:f9:fc:62:
         f2:db:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:23:52 2025 by rpki-client