Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133392e302f32342d3234203d3e20343030333034.roa
File:                     3134372e3136302e3133392e302f32342d3234203d3e20343030333034.roa (raw, json)
Hash identifier:          x2UbTo9yrFP0CvyU8IPV7fybaYq9lBD1KpWaZATYDCw=
Subject key identifier:   32:B1:C4:4C:72:03:04:0B:9E:D4:6D:CA:B5:41:B4:BF:77:15:F6:A0
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       721591A1202B1E7E0B6DA7BC1F1A5477867E86D5
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133392e302f32342d3234203d3e20343030333034.roa
Signing time:             Tue 26 May 2026 03:12:08 +0000
ROA not before:           Tue 26 May 2026 03:07:08 +0000
ROA not after:            Tue 25 May 2027 03:12:08 +0000
asID:                     400304
IP address blocks:        147.160.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 21:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:15:91:a1:20:2b:1e:7e:0b:6d:a7:bc:1f:1a:54:77:86:7e:86:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: May 26 03:07:08 2026 GMT
            Not After : May 25 03:12:08 2027 GMT
        Subject: CN=32B1C44C7203040B9ED46DCAB541B4BF7715F6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:6c:da:82:45:f6:bf:17:54:0a:6a:bf:a9:
                    ab:b4:e6:7a:dc:3d:41:f7:e8:19:6a:8c:94:e2:3d:
                    40:c0:bc:1d:88:58:11:99:46:14:25:06:7a:e7:ec:
                    7b:28:b2:7e:3c:be:ca:02:5d:71:f1:03:dc:4d:99:
                    4d:04:88:23:49:9e:41:94:b1:4f:d4:0e:bd:c0:80:
                    7d:07:12:d1:bb:88:9f:0f:8d:14:14:36:80:f4:44:
                    99:ac:dc:64:a1:d3:d5:5f:58:da:6a:c0:b4:52:e4:
                    d9:dd:38:c6:71:12:aa:30:39:9b:e4:dc:a3:72:e6:
                    2a:89:83:3d:22:e6:ba:c4:1b:b4:a2:1b:b9:53:82:
                    e3:70:25:b9:e8:d7:46:e2:2e:ce:21:30:d1:4e:d5:
                    78:c9:01:ec:34:c3:8c:99:14:28:cd:da:97:c1:8a:
                    8b:65:2f:d9:00:04:56:51:63:38:56:72:77:af:43:
                    3a:d9:fb:b2:11:f9:76:17:a7:50:17:10:7e:d3:65:
                    bc:bd:29:cb:db:3f:7e:14:a5:e5:05:1d:b9:f5:3f:
                    33:52:02:42:2f:78:4e:0a:ec:0e:8b:c2:4e:80:0f:
                    b2:a3:c3:16:b1:8f:f9:ea:42:96:0b:d1:cb:50:d3:
                    2d:27:72:08:99:6b:1b:e4:94:f5:1b:b1:b6:b0:26:
                    3d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B1:C4:4C:72:03:04:0B:9E:D4:6D:CA:B5:41:B4:BF:77:15:F6:A0
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133392e302f32342d3234203d3e20343030333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:66:01:d9:e7:69:b2:3d:2f:50:80:a9:aa:47:5c:57:24:30:
         e1:ee:d9:26:ff:a8:9b:44:c5:d0:a5:23:75:d2:65:41:33:1d:
         9e:4d:5c:7b:a3:c5:5c:47:26:6a:ac:9f:01:65:be:2f:6d:f4:
         fa:72:a1:70:6e:a8:1e:09:ea:eb:1a:e8:f5:f1:6c:39:34:70:
         bf:aa:16:1f:ab:fd:e5:ce:42:7b:c4:9f:e1:51:eb:cf:3e:aa:
         6b:d4:86:f0:4f:21:06:03:cf:65:c8:88:d1:e3:da:79:7d:a2:
         ae:cf:e2:af:39:f3:4e:0b:18:00:89:ca:31:fb:00:ca:dd:f4:
         f5:50:ca:a8:dc:e1:6f:be:1a:ae:d6:11:0a:b8:05:95:de:47:
         a2:e6:f0:bc:d8:cd:f0:0a:e1:e3:e0:2a:3a:ab:5a:ab:6e:b1:
         a9:38:3a:78:e8:43:0f:13:17:60:15:40:e6:4c:8a:3a:f4:9f:
         bf:c7:b6:cb:8e:d1:a4:1b:e4:eb:34:70:32:67:2a:c6:7d:10:
         a6:55:cf:31:a1:bf:fc:cb:c0:5d:3e:e3:06:68:72:8f:2d:2c:
         43:b4:3c:b5:61:69:9c:f9:65:4a:95:b8:f3:f7:91:e4:2f:2f:
         e5:bb:40:ea:39:33:36:37:50:5e:ee:1e:f5:20:db:c2:b7:6c:
         f7:f9:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:19:54 2026 by rpki-client