Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39312e302f32342d3234203d3e2030.roa
File:                     32332e3133342e39312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          mByi/V/ED3KjhH+jLMY+ZXosiTrIArdpIIgSa6VrO6M=
Subject key identifier:   BD:47:87:43:CA:81:29:61:A8:67:8F:3F:F5:1E:DD:95:DA:75:83:1B
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       07BEF82BB6AECA4E0C392418D00EB79618E2CF00
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39312e302f32342d3234203d3e2030.roa
Signing time:             Thu 21 Aug 2025 03:39:48 +0000
ROA not before:           Thu 21 Aug 2025 03:34:48 +0000
ROA not after:            Thu 20 Aug 2026 03:39:48 +0000
asID:                     0
IP address blocks:        23.134.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 17:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:be:f8:2b:b6:ae:ca:4e:0c:39:24:18:d0:0e:b7:96:18:e2:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Aug 21 03:34:48 2025 GMT
            Not After : Aug 20 03:39:48 2026 GMT
        Subject: CN=BD478743CA812961A8678F3FF51EDD95DA75831B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c2:9f:76:03:77:ab:7c:dd:4e:84:f6:16:f7:
                    ec:44:33:ff:04:ba:1f:4e:b7:a1:4a:62:4f:20:0c:
                    36:05:66:ff:80:32:e3:c0:4b:52:a1:5a:08:cf:d2:
                    50:c7:6c:68:e7:f3:e6:5d:de:22:2e:7e:11:dc:ce:
                    ca:a4:e0:85:a5:08:82:4f:68:56:f4:8f:8f:56:4a:
                    5c:11:d4:1c:0c:49:af:0d:ff:29:79:67:e0:15:11:
                    aa:3f:06:ae:5c:e5:c1:45:ce:c6:13:c0:a3:13:4d:
                    b0:fe:ea:89:fc:54:89:99:be:46:23:77:1f:d8:46:
                    7f:84:cc:bb:14:ac:49:da:9e:46:c3:e5:64:1f:62:
                    5e:31:b9:89:be:12:7d:01:33:c7:d9:6b:05:35:d0:
                    96:27:06:5c:1e:55:78:d7:a9:63:00:64:bb:4d:ca:
                    13:5d:6b:9f:96:96:a0:8b:4f:f0:dd:ff:5d:0f:13:
                    99:1f:df:90:fd:0e:88:15:52:7e:93:66:c0:2a:0c:
                    ec:dc:f2:6d:03:bd:1c:25:fa:40:dd:16:0a:92:fd:
                    17:1a:54:64:8d:ce:32:68:34:1d:2b:d5:29:5e:37:
                    e7:b5:28:25:6d:75:76:c0:8a:9f:09:05:06:b8:3b:
                    61:86:2d:27:d1:18:9c:d8:37:3a:3c:b2:72:49:c5:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:47:87:43:CA:81:29:61:A8:67:8F:3F:F5:1E:DD:95:DA:75:83:1B
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:8f:0d:05:f2:8d:fe:02:1e:72:ae:a8:38:ad:c7:2f:d9:c1:
         89:44:d0:c8:44:b9:84:68:66:01:7f:c4:4f:d2:8c:39:68:8f:
         d6:f7:f6:27:a1:7a:09:38:c5:53:bd:9a:cc:e1:b2:fe:ff:52:
         85:56:54:30:24:1b:c7:66:22:e7:99:e5:a7:60:b4:3f:b4:45:
         45:05:cd:5a:d5:85:74:f7:c8:ec:47:c4:ee:cf:35:b0:aa:1b:
         12:f7:b8:ca:fb:94:42:dc:c6:d0:aa:29:c5:68:a7:47:60:3f:
         f4:19:0c:4d:8c:33:08:5a:15:34:25:10:b1:f5:d5:15:3d:a4:
         38:4c:47:b6:73:3e:55:1a:d6:2b:52:16:09:ef:af:5e:51:fb:
         39:56:67:0d:73:d0:43:02:b1:4e:64:7e:0b:bc:b1:35:45:7c:
         71:82:3e:1f:f6:ed:c6:60:61:21:71:45:45:a6:2c:d1:28:9b:
         90:a1:4e:27:ee:d6:dd:3f:ba:42:11:e4:f2:62:5a:54:82:1b:
         f9:42:e7:3b:c8:03:54:cb:3c:ce:ae:b0:71:a4:38:d8:57:b3:
         30:56:cb:19:61:72:d2:26:e9:f2:29:9b:d4:1e:6a:6d:3c:3a:
         1d:9b:9a:b9:55:e4:7d:81:4e:9b:f3:af:d3:e4:2f:7a:af:93:
         c0:b9:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:45:31 2025 by rpki-client