Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3730303a3a2f34302d3438203d3e203631313338.roa
File:                     323630323a666261313a3730303a3a2f34302d3438203d3e203631313338.roa (raw, json)
Hash identifier:          +55w+dMv8tWDRIyUEwl9hvQfXwMBLJnnxCBnD8Tht5g=
Subject key identifier:   96:79:E2:D9:00:B3:F6:A3:08:DB:BE:A3:8B:38:2C:00:E4:3A:4C:CD
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       32F0B55EF34229193CA3C176CEB56FBD631785AA
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3730303a3a2f34302d3438203d3e203631313338.roa
Signing time:             Wed 25 Jun 2025 22:02:39 +0000
ROA not before:           Wed 25 Jun 2025 21:57:39 +0000
ROA not after:            Wed 24 Jun 2026 22:02:39 +0000
asID:                     61138
IP address blocks:        2602:fba1:700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f0:b5:5e:f3:42:29:19:3c:a3:c1:76:ce:b5:6f:bd:63:17:85:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jun 25 21:57:39 2025 GMT
            Not After : Jun 24 22:02:39 2026 GMT
        Subject: CN=9679E2D900B3F6A308DBBEA38B382C00E43A4CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:fd:ca:8f:1a:97:28:a0:53:8c:2d:92:d6:
                    65:85:07:cc:63:88:6c:2a:11:9d:0b:bc:31:e5:57:
                    8d:be:89:f7:1e:c4:05:54:62:9c:c5:ea:3d:d3:28:
                    49:e3:19:fc:b7:a0:5a:39:60:1a:85:f3:2b:26:61:
                    04:de:c4:ca:6c:d9:6a:f3:a2:30:df:2a:1c:11:ee:
                    1a:10:72:58:0c:c5:0c:5d:ee:25:cf:5f:f7:2b:9b:
                    64:9f:b2:18:24:78:39:44:58:0b:e0:d1:b3:17:de:
                    5f:88:8b:a6:9a:d6:4a:08:fe:7c:27:fa:8a:28:63:
                    d2:83:28:af:d2:70:92:bf:c8:42:e8:69:37:81:5c:
                    16:c6:e0:1c:a7:06:86:32:3a:d8:b4:17:6f:1c:84:
                    ed:e3:e5:21:f5:73:72:c9:30:fb:80:56:49:5e:00:
                    a8:03:47:c2:f2:38:d0:08:93:c6:ec:57:a1:83:ee:
                    cf:cf:2d:fc:d1:18:12:2a:67:4b:8e:3d:3e:c1:28:
                    b6:9f:ba:db:e5:c8:fc:6b:46:7f:ea:a2:e5:48:5b:
                    60:4d:57:97:a8:8f:f8:96:15:2c:27:cd:ea:e2:6e:
                    35:01:ac:29:e5:80:3f:20:2e:0b:9a:7c:77:d1:7f:
                    c4:f3:ec:ee:37:28:1c:ae:35:5a:70:ff:18:e5:63:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:E2:D9:00:B3:F6:A3:08:DB:BE:A3:8B:38:2C:00:E4:3A:4C:CD
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3730303a3a2f34302d3438203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         ce:5b:e7:9f:94:f1:90:19:29:63:4c:48:b0:81:76:0b:77:e2:
         1f:12:29:59:44:33:7e:7c:dc:18:6a:86:2c:3f:e6:4a:4e:84:
         9e:c5:52:ce:2d:24:a3:6b:86:82:4a:d7:bb:f1:bb:c6:5b:d7:
         9c:f0:46:25:4c:49:ab:4f:9b:5d:5e:03:a6:03:27:c2:01:fa:
         80:d2:d0:70:02:ff:d2:d7:68:a0:da:be:8c:7d:c4:38:c3:ac:
         75:17:93:3e:94:81:cd:0d:f3:ec:a2:66:5a:32:b7:54:e6:fb:
         a2:65:6a:6b:1b:d9:5c:83:aa:d9:9e:5a:7c:82:3c:69:37:a9:
         92:93:4c:2d:0d:29:69:2a:41:e7:5d:e9:95:1f:af:9f:b4:19:
         a0:ec:91:9b:65:39:02:56:3a:aa:00:90:ef:e6:0d:bb:01:d4:
         24:3c:3b:eb:39:6d:58:a6:73:2e:36:08:9f:d9:c6:24:28:05:
         ac:15:42:98:22:f3:9b:01:18:e4:1e:1b:e7:ec:e8:5f:c1:38:
         ac:15:34:db:77:4c:73:b5:15:33:b2:c3:42:b1:6f:2e:a2:16:
         3c:c7:ef:73:f7:fa:35:56:0c:9d:35:c4:4d:69:7a:4f:5e:81:
         fd:2e:92:0d:af:6a:12:58:5b:12:00:5e:59:42:31:c3:b2:73:
         73:b9:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:25:49 2025 by rpki-client