Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          UquSb3XqhD9CGkL81FqrR1appj9VQ3184TMvXp24EaQ=
Subject key identifier:   5F:11:1B:F9:94:84:E1:E8:E2:24:B2:40:25:F3:03:DE:DD:52:6E:63
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       7FAF05EFD0FFA1BF5975A50DB8D7877D273EA22E
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa
Signing time:             Wed 16 Apr 2025 15:46:10 +0000
ROA not before:           Wed 16 Apr 2025 15:41:10 +0000
ROA not after:            Wed 15 Apr 2026 15:46:10 +0000
asID:                     23470
IP address blocks:        2602:fafd:fe0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 18:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:af:05:ef:d0:ff:a1:bf:59:75:a5:0d:b8:d7:87:7d:27:3e:a2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Apr 16 15:41:10 2025 GMT
            Not After : Apr 15 15:46:10 2026 GMT
        Subject: CN=5F111BF99484E1E8E224B24025F303DEDD526E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:b7:9d:e1:ae:11:7c:f5:2d:bd:bf:3f:eb:
                    79:bf:bf:de:04:0d:f5:99:56:d9:c3:5a:6c:c5:57:
                    13:03:d9:04:7c:8e:0f:29:09:2f:26:6c:5e:be:3f:
                    11:10:87:b4:66:83:05:8c:29:ed:71:47:4e:0f:82:
                    58:09:08:7a:02:48:f6:d3:ba:73:89:3a:31:cb:63:
                    15:0e:ef:fe:af:98:97:b2:07:79:1c:f4:04:08:56:
                    c3:52:b0:2a:f9:8b:26:5f:2e:2c:31:53:b3:b0:1b:
                    f8:02:a5:98:38:c4:1f:8c:bf:f2:01:86:22:01:ea:
                    ff:34:59:b3:7c:71:59:41:fa:02:56:77:7c:1e:a2:
                    d2:c5:9c:e7:48:28:ba:4c:9c:c3:5a:e0:b0:f9:26:
                    e3:b2:5f:52:cc:d3:43:41:b2:0b:3a:f6:02:fe:a7:
                    f1:4b:63:08:d2:4a:40:1c:ef:29:48:8f:67:e3:87:
                    d9:e1:5f:0f:c5:31:86:a4:fa:bf:c3:50:6e:8f:2c:
                    39:9b:81:73:4d:df:64:e4:29:62:28:85:43:97:c0:
                    cd:2c:2f:2d:aa:91:5b:b3:ca:54:79:cf:f1:a3:e6:
                    7a:aa:26:8c:20:03:57:3d:aa:35:c0:6b:2f:7e:e2:
                    03:a9:83:5a:4d:e6:e9:d8:53:a8:6f:33:51:e6:40:
                    bc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:1B:F9:94:84:E1:E8:E2:24:B2:40:25:F3:03:DE:DD:52:6E:63
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fe0::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:11:c3:24:1e:c1:c7:14:9b:88:5c:34:58:88:cc:ce:c9:
         66:05:c8:d0:d7:d0:67:ff:b2:27:7e:16:cb:ca:8b:c1:13:66:
         86:13:d4:68:b4:41:cd:16:7f:ba:5f:a4:e2:f7:ca:86:3b:ad:
         5e:e6:7c:61:77:12:be:08:b9:c3:51:c2:bd:37:f4:39:b1:26:
         9b:77:8b:72:82:c2:03:5d:63:7d:58:1b:1c:e6:13:6a:fb:f3:
         d8:d3:10:97:e3:f8:8d:4b:e8:0e:5a:21:b5:c0:fe:b4:ad:bf:
         e2:a4:55:53:05:bd:c5:05:3d:be:06:f1:4b:f4:0d:a7:6c:82:
         00:ee:68:ab:65:2b:24:0f:7f:cd:3a:13:6f:1d:ed:b2:ea:b3:
         13:fb:f9:42:a1:7f:23:47:82:cb:36:73:38:75:85:a9:0d:91:
         2e:b4:c4:62:0d:3f:6d:bb:09:61:0f:dc:ca:3e:5f:a3:87:13:
         f3:bf:ec:d0:35:7b:17:c7:81:27:45:b9:64:73:a4:f3:1c:fa:
         d0:86:73:ec:e7:db:1d:c4:0a:83:c5:58:55:5c:4f:f6:19:57:
         46:4c:b4:4b:65:89:ba:ad:b3:8b:36:36:d1:7b:b3:60:40:8f:
         fd:c2:58:61:62:56:8b:2d:76:c0:a4:f2:e2:50:c4:25:9b:9a:
         e3:e4:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:52:10 2025 by rpki-client