Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa
File:                     323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa (raw, json)
Hash identifier:          RY6MjSV0mzLgKxLEqPrQbVNZmBZ3PFkYADEWA4hunLw=
Subject key identifier:   37:19:0F:FE:E0:BE:22:95:A4:A2:34:02:C5:6D:E9:56:FD:A4:13:46
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       51DDCBA365299B30D31F0DDBDC5BBB804C4A9A43
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa
Signing time:             Thu 17 Jul 2025 13:47:06 +0000
ROA not before:           Thu 17 Jul 2025 13:42:06 +0000
ROA not after:            Thu 16 Jul 2026 13:47:06 +0000
asID:                     216401
IP address blocks:        2602:fafd:f60::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 19:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:dd:cb:a3:65:29:9b:30:d3:1f:0d:db:dc:5b:bb:80:4c:4a:9a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jul 17 13:42:06 2025 GMT
            Not After : Jul 16 13:47:06 2026 GMT
        Subject: CN=37190FFEE0BE2295A4A23402C56DE956FDA41346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bf:04:37:aa:b1:a0:35:fe:bd:55:a5:44:6d:
                    8f:11:f4:2a:bb:23:e0:56:7c:13:86:a3:17:80:32:
                    01:19:96:9f:42:a5:c9:25:1f:cd:75:6c:fe:93:6c:
                    a3:81:43:33:a5:9d:15:29:91:d5:81:5d:94:3f:45:
                    b0:28:9f:ac:ce:14:77:d2:2d:f6:8d:6c:f8:0d:a7:
                    8e:b2:ac:a1:1a:74:88:aa:d6:c9:3a:7a:a2:9a:07:
                    c8:7e:f7:dc:a2:a2:48:77:15:43:b6:5b:1b:71:51:
                    47:b4:f7:f9:9c:38:2b:25:8b:87:51:db:cf:e5:3a:
                    4c:a3:2c:b0:cb:56:27:5b:7a:45:a2:9c:42:c1:51:
                    2f:62:00:05:d5:1b:fe:2b:80:cc:ca:49:0f:2c:3d:
                    06:81:2e:65:85:b8:50:ec:b7:9b:d6:45:4a:45:b8:
                    16:38:f0:26:2f:ad:b1:b6:0f:67:85:8c:12:e1:24:
                    37:9b:85:b7:2f:00:32:68:bb:1d:5f:28:2a:d0:00:
                    d1:07:d1:d1:4f:36:1d:08:0a:06:9f:d0:37:33:08:
                    25:de:6d:6c:77:71:f6:96:87:1c:eb:79:31:9b:8c:
                    58:de:43:c2:ff:bd:4d:dc:d0:29:20:34:1b:78:de:
                    a4:c8:f5:11:f4:9e:2d:a4:5f:ce:0a:8e:ba:ba:e4:
                    0d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:0F:FE:E0:BE:22:95:A4:A2:34:02:C5:6D:E9:56:FD:A4:13:46
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6636303a3a2f34342d3438203d3e20323136343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f60::/44

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:b1:2f:e6:6b:32:6b:bb:fb:1e:1c:19:56:6d:ed:ac:3f:
         29:8e:ce:2e:0b:f1:85:bf:94:07:31:a9:15:d0:3a:5d:b5:ef:
         58:b8:f6:75:69:85:09:be:f2:44:eb:c6:3d:f3:22:42:d0:a5:
         dc:83:d6:82:f4:ae:93:ca:36:40:9f:67:45:65:aa:c7:9b:a4:
         76:f7:72:97:1f:6b:89:84:9e:2d:51:88:a9:f2:d2:46:bd:99:
         30:f8:26:93:86:20:36:59:c3:48:68:06:4d:f3:7a:f0:91:9a:
         fa:df:49:68:ea:b3:c9:15:9c:d9:d6:e8:ed:67:08:aa:33:e9:
         e8:ef:b1:25:8e:9a:82:9c:7f:1a:90:9c:05:db:d7:ff:63:ba:
         a8:42:39:8b:9e:35:fe:98:da:18:c1:74:14:cc:9e:5e:49:59:
         84:ac:d4:8e:bc:05:6a:9e:e1:42:e4:dd:a0:18:b8:24:24:20:
         a4:41:a3:8e:8a:fb:6b:01:cf:d4:70:7a:f9:4e:53:8c:7b:fc:
         ea:79:97:ce:a2:49:4d:91:f2:0a:dd:ae:35:07:8b:70:4d:71:
         0c:47:1e:24:64:79:76:d9:26:9e:29:39:1a:a9:f9:a6:b6:f8:
         24:67:74:48:e2:0d:f7:c4:8d:44:68:87:ad:e8:ca:e7:47:1d:
         16:6a:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:02:18 2025 by rpki-client