Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa
File:                     323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa (raw, json)
Hash identifier:          df4UkjqL7ssfI6YbV2T3onq9GxddynS4vMKj7OGLScU=
Subject key identifier:   C4:6D:22:AE:7B:9B:1A:B6:26:EE:57:9F:15:17:48:C3:F7:2B:85:B5
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       69459B5854F509572CE868871A75D49893747C66
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa
Signing time:             Wed 19 Aug 2026 13:12:53 +0000
ROA not before:           Wed 19 Aug 2026 13:07:53 +0000
ROA not after:            Wed 18 Aug 2027 13:12:53 +0000
asID:                     201398
IP address blocks:        2602:fafd:f05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:45:9b:58:54:f5:09:57:2c:e8:68:87:1a:75:d4:98:93:74:7c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 19 13:07:53 2026 GMT
            Not After : Aug 18 13:12:53 2027 GMT
        Subject: CN=C46D22AE7B9B1AB626EE579F151748C3F72B85B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:c3:17:b5:70:1a:42:ae:c3:9f:a0:f8:e7:
                    3a:7a:73:84:f7:ce:b4:b7:6e:54:ce:3b:c4:03:1e:
                    0d:60:ae:68:35:c5:0d:e9:d4:67:02:13:ec:d8:f1:
                    21:80:2e:d7:c7:c8:93:8c:8f:ff:15:4f:24:87:c4:
                    49:2f:b5:0f:98:76:ba:9a:72:2d:c0:46:68:dd:99:
                    c4:4d:25:ea:5d:3e:fc:1b:c6:b8:38:bc:4d:56:28:
                    f0:5a:36:a3:dc:5f:e8:d2:59:64:eb:46:92:74:7b:
                    cc:53:1c:7d:3b:0f:9e:ef:33:2b:38:11:93:c4:01:
                    f7:99:37:62:01:67:08:17:1e:0c:8a:00:fd:ef:5c:
                    38:dd:2f:e2:4d:80:57:55:44:ea:23:3f:87:d1:ad:
                    ef:ce:65:41:38:35:a2:e5:e3:56:b5:25:26:08:eb:
                    19:8d:69:3f:3c:b0:6d:b9:a7:f5:23:9d:64:bf:d9:
                    b6:50:7e:ff:19:93:d1:54:be:e4:84:ff:00:65:e6:
                    92:e5:de:99:b0:4f:51:9d:18:03:39:a0:9c:25:77:
                    e2:a0:9e:e7:d0:1f:76:bf:3d:41:bf:e7:db:2c:a9:
                    f0:41:7a:90:84:7d:a1:ec:12:6d:7e:8f:e5:8c:4a:
                    04:e3:09:44:61:9a:67:b3:da:60:49:3b:e0:65:07:
                    aa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:22:AE:7B:9B:1A:B6:26:EE:57:9F:15:17:48:C3:F7:2B:85:B5
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630353a3a2f34382d3438203d3e20323031333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f05::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:3a:24:0c:1c:a0:d2:92:ec:af:30:f9:53:b6:23:2c:70:20:
         d2:3f:a3:cf:ec:31:1b:91:ec:10:d5:aa:64:f3:63:4a:00:09:
         67:98:9f:1a:0f:d4:8a:01:5a:39:00:a3:04:b4:d2:d9:be:36:
         19:00:7f:61:09:b3:c9:db:fe:9d:c3:46:ac:b7:75:a8:de:3e:
         41:9a:68:9e:bd:c4:ba:8b:5c:b0:6f:22:0f:eb:1a:e5:9d:09:
         7b:62:d3:67:a9:b8:b9:57:d6:2c:46:e6:06:75:42:51:56:bf:
         2e:09:a5:4d:14:17:7b:59:26:2a:3c:ab:e1:75:6f:bc:d9:e1:
         8f:83:26:3c:93:0d:d4:5c:d1:18:ca:87:06:9c:e1:c7:0a:2c:
         71:27:c2:bd:62:d8:69:85:4d:bb:79:dd:b4:2a:cd:46:e2:37:
         e7:f3:7a:f8:c5:79:5e:f7:77:d6:01:8e:76:cf:17:c3:61:e6:
         26:a2:da:a8:d8:94:9e:c1:ee:6f:ca:e7:ba:da:ac:74:bf:fd:
         8a:92:da:d5:ad:c6:5a:1f:84:44:4e:24:4b:e2:15:75:60:5c:
         27:5a:e4:fb:8d:aa:46:74:dc:b8:8b:aa:1f:10:e1:37:c2:7f:
         c8:f4:68:14:e3:10:ee:8b:d4:40:90:15:f4:e0:42:ce:15:28:
         ec:0b:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:44:03 2026 by rpki-client