Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa
File:                     323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa (raw, json)
Hash identifier:          sIVe9XgvCtgNlSkQJsZnigCzrw1VXzTntoaSFjQtrVY=
Subject key identifier:   4A:D9:D4:DA:52:D7:E8:8A:45:2E:E7:EE:BB:2E:66:2A:BD:6B:C2:CD
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       6431E5B9BB0C9D8F4E18ACCC5F6DFC92AD599231
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa
Signing time:             Wed 19 Aug 2026 13:12:53 +0000
ROA not before:           Wed 19 Aug 2026 13:07:53 +0000
ROA not after:            Wed 18 Aug 2027 13:12:53 +0000
asID:                     204268
IP address blocks:        2602:fafd:f09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:31:e5:b9:bb:0c:9d:8f:4e:18:ac:cc:5f:6d:fc:92:ad:59:92:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 19 13:07:53 2026 GMT
            Not After : Aug 18 13:12:53 2027 GMT
        Subject: CN=4AD9D4DA52D7E88A452EE7EEBB2E662ABD6BC2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:1b:d9:69:85:53:d3:66:6a:6d:f1:f5:09:
                    ea:2d:32:24:ef:85:53:16:62:43:7f:05:66:9a:55:
                    c8:54:7e:18:1f:26:a4:be:8d:62:3b:fd:b6:8d:31:
                    61:8e:3b:16:87:18:e0:19:6b:f7:20:6f:51:5a:5a:
                    01:d2:79:38:76:15:8e:6c:78:8e:a7:6b:95:cc:4b:
                    8d:87:6c:3d:39:4e:50:fa:f1:7f:97:e8:89:36:c9:
                    8a:cc:2b:b4:3f:3d:6f:5b:43:57:c9:62:cb:d0:89:
                    78:5b:a1:d4:81:48:d5:d8:7d:e7:74:74:22:e4:ca:
                    8c:96:18:8c:47:cf:48:0d:ae:94:a0:ad:41:b5:75:
                    bd:d2:94:22:cc:bf:be:55:7b:f9:b8:9e:63:34:33:
                    71:1f:66:3c:c5:d8:60:42:11:67:58:b4:95:8b:25:
                    9e:2f:26:b3:5a:a8:f9:de:37:dd:56:bb:cc:4d:f5:
                    dc:7f:51:97:88:9d:b0:00:4e:b2:c8:45:73:35:f0:
                    05:af:4e:44:be:db:9a:1d:fa:56:ab:fd:4a:44:62:
                    00:8f:70:28:51:72:2a:a1:73:b2:6f:8e:82:bb:25:
                    14:e1:51:e1:27:dd:7b:51:1b:40:f6:75:ec:81:45:
                    53:5b:d5:fe:27:ea:84:a9:fd:55:a3:02:02:c2:35:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D9:D4:DA:52:D7:E8:8A:45:2E:E7:EE:BB:2E:66:2A:BD:6B:C2:CD
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630393a3a2f34382d3438203d3e20323034323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f09::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:70:15:ca:98:20:fa:6f:f1:23:be:e6:5a:a2:87:33:9f:
         66:78:66:c7:79:81:02:f0:f6:01:14:04:51:1c:62:d9:a5:c3:
         7a:36:12:ab:c8:70:6a:25:f6:72:92:70:e8:dc:98:9a:11:95:
         49:ca:ec:ba:ae:37:1f:f0:ca:7a:99:27:62:18:c5:ea:3a:33:
         00:18:3e:aa:10:e4:13:f2:ca:7a:93:f4:94:44:e7:a6:84:b9:
         21:04:ee:00:aa:d5:6f:6e:45:e9:0c:66:99:7a:a6:41:55:1c:
         e8:7a:a6:0b:b2:aa:80:69:b9:73:20:ee:fa:9c:72:91:6f:71:
         3c:74:8f:9a:59:31:2a:90:26:7f:fe:99:f1:f5:90:97:81:1f:
         1d:cb:bb:30:20:bc:23:4e:df:43:a7:6d:79:55:27:51:23:de:
         2c:99:8e:ff:17:bc:00:d7:3a:26:98:d9:f0:40:3c:82:47:ed:
         9a:b9:4f:d5:3b:9d:c8:7f:40:1b:5c:49:63:8a:d0:3c:08:fb:
         a2:1c:d5:d6:aa:74:18:de:ab:f8:ca:79:ed:94:8d:7f:32:e0:
         f4:33:04:c0:0b:4d:1d:e0:77:31:fb:48:47:8c:77:75:30:a1:
         09:35:e8:7f:ad:37:c6:e3:32:32:de:11:88:9a:94:e0:92:64:
         f9:a5:70:c4
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUZDHlubsMnY9OGKzMX238kq1ZkjEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjYwODE5MTMwNzUzWhcNMjcwODE4MTMxMjUz
WjAzMTEwLwYDVQQDEyg0QUQ5RDREQTUyRDdFODhBNDUyRUU3RUVCQjJFNjYyQUJE
NkJDMkNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4kb2WmFU9Nm
am3x9QnqLTIk74VTFmJDfwVmmlXIVH4YHyakvo1iO/22jTFhjjsWhxjgGWv3IG9R
WloB0nk4dhWObHiOp2uVzEuNh2w9OU5Q+vF/l+iJNsmKzCu0Pz1vW0NXyWLL0Il4
W6HUgUjV2H3ndHQi5MqMlhiMR89IDa6UoK1BtXW90pQizL++VXv5uJ5jNDNxH2Y8
xdhgQhFnWLSViyWeLyazWqj53jfdVrvMTfXcf1GXiJ2wAE6yyEVzNfAFr05Evtua
HfpWq/1KRGIAj3AoUXIqoXOyb46CuyUU4VHhJ917URtA9nXsgUVTW9X+J+qEqf1V
owICwjV+FwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFErZ1NpS1+iKRS7n7rsuZiq9
a8LNMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMwMzkzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzQzMjM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9Dwkw
DQYJKoZIhvcNAQELBQADggEBAAT7cBXKmCD6b/EjvuZaooczn2Z4Zsd5gQLw9gEU
BFEcYtmlw3o2EqvIcGol9nKScOjcmJoRlUnK7LquNx/wynqZJ2IYxeo6MwAYPqoQ
5BPyynqT9JRE56aEuSEE7gCq1W9uRekMZpl6pkFVHOh6pguyqoBpuXMg7vqccpFv
cTx0j5pZMSqQJn/+mfH1kJeBHx3LuzAgvCNO30OnbXlVJ1Ej3iyZjv8XvADXOiaY
2fBAPIJH7Zq5T9U7nch/QBtcSWOK0DwI+6Ic1daqdBjeq/jKee2UjX8y4PQzBMAL
TR3gdzH7SEeMd3UwoQk16H+tN8bjMjLeEYialOCSZPmlcMQ=
-----END CERTIFICATE-----
Generated at Thu Sep 10 04:35:16 2026 by rpki-client