Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6635303a3a2f34342d3438203d3e20323136333832.roa
File:                     323630323a666166643a6635303a3a2f34342d3438203d3e20323136333832.roa (raw, json)
Hash identifier:          k7xTKIR5TJjA+GkQHsZMzFyVWWcJnWhWeotJayB9RTI=
Subject key identifier:   F7:D9:8E:56:07:27:86:39:AA:45:AD:CC:B6:C1:01:45:B5:83:7F:13
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       1B1FD2CFDA9CCB02168DB1F4441602FA779BD022
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6635303a3a2f34342d3438203d3e20323136333832.roa
Signing time:             Tue 01 Jul 2025 23:46:43 +0000
ROA not before:           Tue 01 Jul 2025 23:41:43 +0000
ROA not after:            Tue 30 Jun 2026 23:46:43 +0000
asID:                     216382
IP address blocks:        2602:fafd:f50::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 19:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1f:d2:cf:da:9c:cb:02:16:8d:b1:f4:44:16:02:fa:77:9b:d0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jul  1 23:41:43 2025 GMT
            Not After : Jun 30 23:46:43 2026 GMT
        Subject: CN=F7D98E5607278639AA45ADCCB6C10145B5837F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:dd:71:8c:08:bd:f9:6e:91:ba:e8:a3:1f:
                    ed:76:f2:04:1f:51:26:fc:09:2b:a7:df:b2:01:db:
                    f6:22:a0:62:bf:4a:e7:3b:bd:90:53:08:ef:cc:b1:
                    67:e0:54:82:26:48:ca:9d:8f:1b:52:b4:0c:55:32:
                    cc:92:53:1e:be:24:8c:2a:20:24:b7:6e:42:7d:5e:
                    da:08:a2:65:4a:9f:ee:de:02:8e:d3:cb:0a:4e:24:
                    e8:a7:f3:24:65:a7:c2:46:8a:17:28:23:93:0b:7f:
                    b5:2b:9b:11:0d:3c:b9:94:54:74:5b:8b:bf:f2:d7:
                    76:67:32:2c:d0:88:92:0b:95:a3:f7:46:bc:5e:ce:
                    c5:29:14:de:c7:f8:61:39:3c:69:06:9f:41:a0:d4:
                    14:02:36:6f:15:f9:bc:4d:43:fa:ec:2d:13:33:3e:
                    62:a2:f9:16:12:27:20:14:50:e5:45:ea:85:b5:88:
                    ae:cd:70:5b:17:4e:3a:51:a2:ae:42:cf:7d:57:33:
                    8a:cb:08:24:10:22:9b:b4:6b:47:24:aa:02:21:33:
                    56:c5:05:72:88:39:23:a4:4a:65:b8:70:ee:33:f8:
                    df:ea:df:d9:b9:f4:3a:46:f7:c0:98:ca:06:32:27:
                    9d:9f:e4:f3:1f:dd:65:25:08:36:8a:29:f2:e0:c2:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D9:8E:56:07:27:86:39:AA:45:AD:CC:B6:C1:01:45:B5:83:7F:13
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6635303a3a2f34342d3438203d3e20323136333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:0a:40:8e:0c:8f:88:60:cd:73:89:cb:ea:1f:f4:ad:02:
         0c:42:5e:dd:25:aa:c5:43:ef:24:08:68:ec:f3:f7:80:ad:04:
         74:e7:8e:b6:9a:2e:64:17:f8:21:49:11:88:05:c0:88:0e:ac:
         29:6b:71:41:7a:57:a5:d0:27:a0:60:c9:ea:ca:99:1b:d1:35:
         ee:f7:ce:4a:99:a7:bd:14:9a:b2:07:d9:35:23:75:61:32:42:
         56:3f:18:72:4f:e5:e4:07:b4:59:09:f7:95:a3:9d:3c:58:ae:
         13:4f:f9:07:35:a8:5c:e1:db:7b:a7:2a:e4:7e:19:a9:6b:f6:
         c5:1a:75:62:bc:da:07:bb:66:4c:14:1a:da:96:d6:ed:34:7b:
         ae:39:63:bc:68:cb:9f:bc:18:ed:3e:a1:cc:d1:f2:c1:b7:c1:
         12:1d:44:2a:85:af:07:64:f0:01:f7:31:51:57:1d:8d:79:2e:
         e9:99:5e:21:25:99:3c:08:48:11:35:7c:98:e8:62:82:b3:ae:
         58:16:ce:d1:62:29:c4:3a:35:27:36:ad:ca:3d:78:05:31:5b:
         78:59:cd:12:91:9a:46:47:d8:5f:6b:e4:af:ae:96:68:cf:44:
         c7:fd:3d:a1:75:ac:b3:6b:ef:1a:c2:dc:13:63:44:b2:dc:c2:
         ad:b0:4b:b2
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUGx/Sz9qcywIWjbH0RBYC+neb0CIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjUwNzAxMjM0MTQzWhcNMjYwNjMwMjM0NjQz
WjAzMTEwLwYDVQQDEyhGN0Q5OEU1NjA3Mjc4NjM5QUE0NUFEQ0NCNkMxMDE0NUI1
ODM3RjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qvdcYwIvflu
kbroox/tdvIEH1Em/Akrp9+yAdv2IqBiv0rnO72QUwjvzLFn4FSCJkjKnY8bUrQM
VTLMklMeviSMKiAkt25CfV7aCKJlSp/u3gKO08sKTiTop/MkZafCRooXKCOTC3+1
K5sRDTy5lFR0W4u/8td2ZzIs0IiSC5Wj90a8Xs7FKRTex/hhOTxpBp9BoNQUAjZv
Ffm8TUP67C0TMz5iovkWEicgFFDlReqFtYiuzXBbF046UaKuQs99VzOKywgkECKb
tGtHJKoCITNWxQVyiDkjpEpluHDuM/jf6t/ZufQ6RvfAmMoGMiedn+TzH91lJQg2
iiny4MI15QIDAQABo4ICjzCCAoswHQYDVR0OBBYEFPfZjlYHJ4Y5qkWtzLbBAUW1
g38TMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjM1MzAzYTNhMmYz
NDM0MmQzNDM4MjAzZDNlMjAzMjMxMzYzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvr9D1Aw
DQYJKoZIhvcNAQELBQADggEBAB/vCkCODI+IYM1zicvqH/StAgxCXt0lqsVD7yQI
aOzz94CtBHTnjraaLmQX+CFJEYgFwIgOrClrcUF6V6XQJ6BgyerKmRvRNe73zkqZ
p70UmrIH2TUjdWEyQlY/GHJP5eQHtFkJ95WjnTxYrhNP+Qc1qFzh23unKuR+Galr
9sUadWK82ge7ZkwUGtqW1u00e645Y7xoy5+8GO0+oczR8sG3wRIdRCqFrwdk8AH3
MVFXHY15LumZXiElmTwISBE1fJjoYoKzrlgWztFiKcQ6NSc2rco9eAUxW3hZzRKR
mkZH2F9r5K+ulmjPRMf9PaF1rLNr7xrC3BNjRLLcwq2wS7I=
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:00:48 2025 by rpki-client