Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa
File:                     323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa (raw, json)
Hash identifier:          gr+BWFsd4zEfILNMqQATrOWSR5C5z4u4/W5fHIaC82E=
Subject key identifier:   AA:D2:0F:AF:63:7F:66:82:CA:7E:75:B3:AB:F2:28:3F:D1:45:77:67
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       7BF0DA2287F35C5059C51DBF0A6A062157D605BB
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa
Signing time:             Wed 19 Aug 2026 13:12:52 +0000
ROA not before:           Wed 19 Aug 2026 13:07:52 +0000
ROA not after:            Wed 18 Aug 2027 13:12:52 +0000
asID:                     204789
IP address blocks:        2602:fafd:f04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f0:da:22:87:f3:5c:50:59:c5:1d:bf:0a:6a:06:21:57:d6:05:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 19 13:07:52 2026 GMT
            Not After : Aug 18 13:12:52 2027 GMT
        Subject: CN=AAD20FAF637F6682CA7E75B3ABF2283FD1457767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:c9:92:1a:e8:34:00:8f:73:19:2c:ee:d1:
                    9a:b7:de:55:d1:88:19:30:34:c6:ed:f1:28:98:c5:
                    d8:f0:94:4d:97:8c:20:ec:1d:a9:7f:17:6f:1f:a5:
                    d5:9d:2d:af:98:72:1e:1e:37:54:5b:5e:30:37:09:
                    d0:58:74:05:9b:12:5e:2f:55:17:b9:1d:4e:25:13:
                    cc:f3:e0:05:ab:2f:49:46:0f:7b:29:d2:18:66:cb:
                    ea:c8:c6:12:9b:ea:1a:b2:f1:15:79:73:fb:14:46:
                    06:ea:2f:d6:3d:26:b7:fc:cb:7c:d8:26:1b:0f:b2:
                    6a:11:b8:d0:b4:23:d9:85:f0:86:0c:76:11:5e:fc:
                    aa:ef:ef:1b:b5:56:51:43:59:e8:ae:5f:eb:38:56:
                    c7:3b:57:13:a6:61:2b:fb:44:f7:bd:d3:3f:61:f9:
                    82:4e:c6:e9:b2:ed:8b:63:1c:d2:47:cf:e6:c2:7c:
                    a2:ca:6a:6d:34:64:c4:74:fc:c3:43:74:8d:e1:36:
                    9b:8f:2a:aa:7b:05:31:e5:5b:e5:d2:17:d5:e6:af:
                    fe:41:21:0d:72:2d:51:e7:87:aa:99:ae:2a:9e:fd:
                    ca:9f:87:23:1d:e9:d7:37:3f:2f:d5:45:84:b4:7e:
                    97:7a:e5:95:c8:88:35:9f:c4:57:9b:ed:f2:37:f2:
                    9c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D2:0F:AF:63:7F:66:82:CA:7E:75:B3:AB:F2:28:3F:D1:45:77:67
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630343a3a2f34382d3438203d3e20323034373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f04::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:20:d0:4f:73:5a:11:fe:bc:ae:9f:ab:98:1e:3d:7d:4b:
         b0:ea:76:16:81:d3:f1:b9:00:02:03:05:bf:16:6e:af:eb:c8:
         53:27:8a:6a:7d:19:53:90:3c:de:90:68:a9:73:e3:ad:c0:07:
         e6:2a:81:00:85:6f:42:87:dc:3e:7c:3b:4b:3b:7b:63:3e:95:
         e4:bc:d7:46:7a:68:f2:2a:9e:69:ed:ab:f1:d4:26:df:e1:ce:
         52:40:98:e7:3c:44:ca:49:25:e8:5e:d9:3b:7b:9c:13:4f:3b:
         a1:23:82:7b:7a:77:4b:4f:1d:a2:64:2d:82:14:b4:f5:57:10:
         27:e4:e4:d7:9c:d3:07:11:14:3c:7a:96:67:35:96:0d:be:5a:
         58:a3:f8:8d:34:57:e3:6d:0a:12:e4:12:8e:8c:ce:0b:4d:2f:
         1c:43:a9:b5:a4:43:28:b6:ea:f5:98:3c:61:9c:37:0c:4a:41:
         03:e3:30:a7:41:66:a7:f7:cd:62:d2:42:30:be:f1:75:75:52:
         8b:61:76:ff:95:54:93:26:d7:e4:ec:ec:54:fe:e5:71:ea:22:
         7b:5e:26:53:e4:2d:a7:f4:48:c4:2a:12:69:cc:19:1e:d3:0d:
         c2:0d:e7:5f:ac:17:11:c7:80:74:1c:31:ce:87:00:47:71:58:
         e3:7a:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:20:25 2026 by rpki-client