Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          pER54kUUE1j8FqLCztUZP9y9H9u+4j60Tbd7MevqrTI=
Subject key identifier:   5D:81:87:68:53:0C:8C:AB:25:EE:BF:6D:E1:01:5A:6D:F7:74:52:6E
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       3A2DEAC6EF6BF2D5EF3B8916057A1ABCCB30C8A7
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa
Signing time:             Wed 30 Sep 2026 07:13:00 +0000
ROA not before:           Wed 30 Sep 2026 07:08:00 +0000
ROA not after:            Wed 29 Sep 2027 07:13:00 +0000
asID:                     23470
IP address blocks:        2602:fafd:902::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 10:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2d:ea:c6:ef:6b:f2:d5:ef:3b:89:16:05:7a:1a:bc:cb:30:c8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 30 07:08:00 2026 GMT
            Not After : Sep 29 07:13:00 2027 GMT
        Subject: CN=5D818768530C8CAB25EEBF6DE1015A6DF774526E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bf:86:9d:83:2c:f3:5c:65:56:2e:2d:3a:49:
                    c9:35:3e:02:ff:8d:e2:7f:dc:58:fa:ed:6e:2d:5c:
                    df:d3:b1:bf:81:de:a3:23:ec:e5:a3:c1:13:66:1c:
                    66:9d:6e:78:3c:b2:c2:d2:14:ac:2a:5a:a3:17:15:
                    2e:79:f6:e8:f5:7e:ff:c6:30:40:aa:f8:c7:e2:bc:
                    de:1c:f2:20:81:9b:19:cc:83:70:8e:59:cf:97:c5:
                    51:39:ce:38:d5:3a:03:84:c3:23:78:a5:8b:7d:27:
                    7d:dc:d8:6e:cf:a2:0f:08:31:9d:63:3a:3e:73:51:
                    6c:b9:6b:dc:4b:ef:b4:d8:f1:37:4b:5f:0f:16:b0:
                    a5:cb:2d:b1:29:1a:16:47:04:c5:96:e5:89:52:8c:
                    f4:e2:91:8b:70:ac:b2:c9:44:42:b2:86:99:20:14:
                    27:a3:58:47:33:55:12:ec:76:b9:fd:da:5c:19:f8:
                    f8:3c:ff:52:a0:34:88:bb:2e:d0:68:99:96:e9:d5:
                    56:a7:60:39:14:7e:40:0c:72:3f:ab:f3:91:28:8b:
                    c2:43:c7:cc:ba:e1:73:05:c2:54:b7:fd:6b:61:cd:
                    5c:0b:2a:6a:d6:c1:73:35:67:4e:aa:5a:a6:e7:16:
                    23:cb:5e:05:27:e5:e9:32:ce:91:63:c7:5c:26:c2:
                    dd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:87:68:53:0C:8C:AB:25:EE:BF:6D:E1:01:5A:6D:F7:74:52:6E
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3930323a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:902::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:eb:32:9e:95:21:4e:09:d1:91:ac:06:1f:40:15:5b:90:73:
         fc:ea:d5:46:40:71:9e:e4:80:7f:35:a6:fd:bf:0f:a3:c2:ca:
         07:d3:1b:bc:b9:66:a1:78:38:fb:db:cc:5e:41:89:f0:08:4c:
         c0:20:25:51:0d:01:99:2c:46:62:bc:73:38:77:2b:56:c7:8c:
         56:c0:44:e1:06:a2:28:21:87:f2:45:75:f1:51:a3:5d:bc:67:
         53:8d:f1:60:74:7f:b8:b1:e7:47:66:f8:4a:8f:c8:fe:4c:12:
         90:6c:89:92:ae:7a:c5:8e:94:64:db:af:26:14:02:1b:4b:b7:
         15:de:c4:82:84:e9:a8:c0:99:da:2d:6f:08:7b:46:3d:89:e7:
         ec:4e:a9:1e:17:8c:e1:b6:c7:65:f8:15:91:cb:0b:87:ba:88:
         a2:11:5b:32:43:73:bb:bb:fe:c2:8b:71:a3:dd:05:e1:5e:77:
         61:88:7e:4f:bc:4d:6e:9f:ba:b5:02:27:79:7a:a7:1c:32:d3:
         8e:26:49:95:03:97:c3:08:7e:a0:21:21:ad:5c:de:65:6f:12:
         b3:d3:a8:73:46:6a:c4:16:07:3a:da:10:0f:36:af:d7:f5:56:
         9b:27:58:c1:76:ac:20:fb:86:aa:75:7a:48:df:95:31:af:b0:
         e4:34:c0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:36:43 2026 by rpki-client