Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          kdWw8LoeDxA+C2d9jO6u7tP9ypKKaw6MyKSnp/PKUNg=
Subject key identifier:   CA:21:D2:CF:BD:1E:30:51:39:22:CA:76:E2:7C:80:C5:5A:0E:D9:38
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       3FA381E98E8B242E6161150700E31DB6479EF358
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa
Signing time:             Wed 18 Mar 2026 16:12:07 +0000
ROA not before:           Wed 18 Mar 2026 16:07:07 +0000
ROA not after:            Wed 17 Mar 2027 16:12:07 +0000
asID:                     23470
IP address blocks:        2602:fafd:fe0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a3:81:e9:8e:8b:24:2e:61:61:15:07:00:e3:1d:b6:47:9e:f3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Mar 18 16:07:07 2026 GMT
            Not After : Mar 17 16:12:07 2027 GMT
        Subject: CN=CA21D2CFBD1E30513922CA76E27C80C55A0ED938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:4c:94:11:e8:0e:e7:31:19:e9:70:44:11:
                    f7:16:31:ec:c5:ce:bb:9f:ac:d7:c6:98:02:84:9f:
                    17:e1:9d:9b:4e:52:19:5c:72:66:7c:45:8b:86:c3:
                    b0:fa:75:fd:76:f3:d8:82:71:5a:66:b4:30:c4:6a:
                    5d:e8:36:f3:f8:10:46:92:34:7a:1d:82:a0:82:88:
                    10:76:40:72:d5:22:3f:fd:9c:d8:f4:d3:3b:ce:b8:
                    3b:a4:27:d8:b3:09:aa:dd:6f:db:2c:16:eb:3c:ad:
                    05:30:60:15:de:9f:f6:c1:54:1c:e3:45:88:49:80:
                    fd:c6:53:ea:7b:fc:98:f4:a8:70:dc:1d:9b:89:e6:
                    17:15:06:60:f5:85:bf:f2:d6:20:80:8d:56:2f:b7:
                    db:5e:9a:1d:d0:c1:a8:5d:07:34:c1:4d:3b:3f:9d:
                    85:92:f7:45:24:89:41:ed:95:5e:83:1d:f4:22:8b:
                    54:21:ad:e8:95:03:8e:77:08:97:6d:09:0c:ff:2c:
                    a2:67:a3:3d:78:09:29:c9:83:3f:35:06:a9:76:56:
                    c0:76:60:77:1c:27:6d:fe:4d:46:ac:ca:b8:16:09:
                    3b:ed:9d:22:f2:33:67:f1:fb:57:c9:1d:e6:5e:97:
                    ae:f9:3b:6e:02:0e:30:b3:ef:46:3c:39:f9:9a:67:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:D2:CF:BD:1E:30:51:39:22:CA:76:E2:7C:80:C5:5A:0E:D9:38
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6665303a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fe0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:ea:d9:6e:fe:5f:99:a3:80:05:76:e3:18:43:01:e8:e4:69:
         eb:41:7b:ab:42:f2:15:cf:4d:db:c3:86:2e:a2:a2:39:21:09:
         07:e6:9c:4e:db:b3:c1:ec:64:35:c5:8d:71:f4:12:0c:34:0d:
         51:21:68:42:83:28:f9:53:e7:13:77:76:ed:f2:50:7e:7c:c4:
         21:78:b1:04:e7:9e:05:12:1d:9c:55:a4:8b:76:3b:26:4b:bb:
         9e:8d:5e:ff:ca:52:ef:f9:cd:cf:86:3c:d3:1f:7c:94:c4:5f:
         36:5a:fb:35:c0:8b:8d:70:3c:a1:b6:87:85:6b:63:88:9e:2b:
         67:e8:af:34:d1:65:45:35:a4:bf:d6:0b:d7:8e:f1:03:f6:21:
         8e:9c:d4:91:54:3f:48:bc:e6:97:38:54:19:be:b9:ec:ac:17:
         7e:e0:07:ad:95:cf:b7:03:6f:82:6d:30:ed:c1:e9:7f:c7:57:
         86:95:29:32:a2:70:a3:0c:c5:13:81:33:c4:30:5b:41:8d:9c:
         f5:39:90:82:5d:a9:c9:31:43:af:58:a9:2e:f6:41:8c:bb:8c:
         6c:eb:58:b4:b9:8a:50:a1:f1:89:e9:d4:9d:ed:65:b0:15:dc:
         38:ae:27:ad:e9:d6:1e:11:38:b1:3a:3a:fb:7d:bf:d4:5f:97:
         61:56:a3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:44 2026 by rpki-client