Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa
File:                     323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa (raw, json)
Hash identifier:          QrqV6gMMPgy5EaxO6+9Gqrzsv9DWp5wdd31j1ZwzeYg=
Subject key identifier:   AC:D2:3A:EA:84:41:EA:DA:E9:D8:C6:D8:D2:A8:C7:76:3C:0A:5A:97
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       4E7B85D49044924F721F5ECBF0A0A75785014183
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa
Signing time:             Wed 19 Aug 2026 13:12:53 +0000
ROA not before:           Wed 19 Aug 2026 13:07:53 +0000
ROA not after:            Wed 18 Aug 2027 13:12:53 +0000
asID:                     202952
IP address blocks:        2602:fafd:f06::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7b:85:d4:90:44:92:4f:72:1f:5e:cb:f0:a0:a7:57:85:01:41:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 19 13:07:53 2026 GMT
            Not After : Aug 18 13:12:53 2027 GMT
        Subject: CN=ACD23AEA8441EADAE9D8C6D8D2A8C7763C0A5A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:df:26:99:d0:16:52:31:52:36:71:18:7f:
                    30:fe:aa:53:c8:96:59:1a:51:d8:45:a1:99:4c:88:
                    e1:f6:bd:ab:17:1c:3f:54:ed:2e:d0:5f:9c:2c:10:
                    1f:f4:8c:12:4a:62:89:9b:96:9b:a7:c2:7f:a8:03:
                    9c:0a:f4:c2:e7:54:39:d8:9f:6f:45:e5:a3:6b:24:
                    64:7e:05:4e:c1:dc:e0:bc:e9:6b:fc:59:7b:b2:45:
                    b2:f1:78:e7:4a:a9:7f:ec:a1:08:54:3a:a4:a6:b2:
                    ef:17:c1:e9:df:94:ce:07:46:7c:fd:bc:03:fa:d2:
                    de:3f:e8:9c:e3:00:cc:57:4b:fc:44:40:ac:fa:13:
                    85:0e:66:3b:d6:2a:1b:e4:39:cd:96:2e:25:2b:89:
                    83:49:9a:36:48:6c:c1:0b:f5:09:7e:f7:d1:ab:98:
                    ed:b3:a6:19:7e:78:a1:32:69:5e:6f:fd:58:55:6f:
                    63:68:95:60:78:ab:53:2d:31:b7:32:25:d2:06:61:
                    b2:81:41:0b:75:66:c6:93:38:43:99:bd:a4:9d:65:
                    d1:81:4c:97:75:bd:cc:f8:30:a8:31:09:6d:3c:e6:
                    98:64:d5:6c:12:56:a8:1a:19:ee:f8:a7:99:04:fa:
                    06:82:45:3b:43:70:34:54:f0:b1:3f:61:19:f3:fd:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D2:3A:EA:84:41:EA:DA:E9:D8:C6:D8:D2:A8:C7:76:3C:0A:5A:97
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630363a3a2f34382d3438203d3e20323032393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f06::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:c2:55:bd:20:f7:0d:2b:43:fd:4c:48:31:48:65:a9:d5:c9:
         2f:e5:72:80:6f:6f:9b:09:e6:e1:ae:93:83:aa:27:33:b3:61:
         c8:ee:5a:12:d7:8c:c3:88:8b:73:9a:19:9e:c9:a0:de:e4:e1:
         28:a4:46:3c:1e:ea:3a:10:68:48:21:7b:48:cf:35:41:a1:ca:
         79:6c:b1:06:b9:74:f0:57:a1:17:f3:52:cf:f6:e3:1f:5e:86:
         1b:2a:b1:1d:51:94:fa:b5:24:41:8a:ec:56:a1:9e:3a:ae:56:
         2d:c5:4e:27:a5:1e:15:ec:9e:23:0b:81:d0:ae:00:47:27:fe:
         ed:9d:ec:e0:39:cf:0e:01:c5:ef:2e:04:83:0c:07:d7:7e:56:
         e9:be:3d:87:6a:ba:8e:ea:68:56:76:aa:31:1f:26:66:2f:7f:
         05:1b:55:78:28:4e:d0:5a:cb:0c:86:5f:71:7c:92:f6:69:78:
         e8:06:71:8e:0f:52:ac:60:e1:57:c1:34:6f:7c:31:c4:d5:8a:
         46:2a:01:cc:21:a1:d9:73:d5:fa:76:a7:3f:f8:f8:73:e1:f6:
         dd:ef:7a:e1:d6:9f:b0:8d:b4:ee:67:68:13:5d:41:56:83:67:
         3f:5c:96:2e:69:67:c0:f4:d0:22:85:64:8d:55:70:76:e3:73:
         66:f7:53:07
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUTnuF1JBEkk9yH17L8KCnV4UBQYMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjYwODE5MTMwNzUzWhcNMjcwODE4MTMxMjUz
WjAzMTEwLwYDVQQDEyhBQ0QyM0FFQTg0NDFFQURBRTlEOEM2RDhEMkE4Qzc3NjND
MEE1QTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyrfJpnQFlIx
UjZxGH8w/qpTyJZZGlHYRaGZTIjh9r2rFxw/VO0u0F+cLBAf9IwSSmKJm5abp8J/
qAOcCvTC51Q52J9vReWjayRkfgVOwdzgvOlr/Fl7skWy8XjnSql/7KEIVDqkprLv
F8Hp35TOB0Z8/bwD+tLeP+ic4wDMV0v8RECs+hOFDmY71iob5DnNli4lK4mDSZo2
SGzBC/UJfvfRq5jts6YZfnihMmleb/1YVW9jaJVgeKtTLTG3MiXSBmGygUELdWbG
kzhDmb2knWXRgUyXdb3M+DCoMQltPOaYZNVsElaoGhnu+KeZBPoGgkU7Q3A0VPCx
P2EZ8/2BQwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFKzSOuqEQera6djG2NKox3Y8
ClqXMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMwMzYzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzIzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9DwYw
DQYJKoZIhvcNAQELBQADggEBAHbCVb0g9w0rQ/1MSDFIZanVyS/lcoBvb5sJ5uGu
k4OqJzOzYcjuWhLXjMOIi3OaGZ7JoN7k4SikRjwe6joQaEghe0jPNUGhynlssQa5
dPBXoRfzUs/24x9ehhsqsR1RlPq1JEGK7FahnjquVi3FTielHhXsniMLgdCuAEcn
/u2d7OA5zw4Bxe8uBIMMB9d+Vum+PYdquo7qaFZ2qjEfJmYvfwUbVXgoTtBaywyG
X3F8kvZpeOgGcY4PUqxg4VfBNG98McTVikYqAcwhodlz1fp2pz/4+HPh9t3veuHW
n7CNtO5naBNdQVaDZz9cli5pZ8D00CKFZI1VcHbjc2b3Uwc=
-----END CERTIFICATE-----
Generated at Thu Sep 10 05:20:07 2026 by rpki-client