Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          b+o1SVU0Ci4T3iJouqIp18Jkbe6Tu/dNaP+RfuZ/Aig=
Subject key identifier:   EE:04:2E:9B:B2:87:53:5C:C8:89:1D:69:1F:49:64:72:1B:0B:40:35
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       03F0E79A19FA73EA36EDFA2A01DDF737E0DB8330
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Wed 19 Aug 2026 14:12:54 +0000
ROA not before:           Wed 19 Aug 2026 14:07:54 +0000
ROA not after:            Wed 18 Aug 2027 14:12:54 +0000
asID:                     200775
IP address blocks:        2602:fafd:f0c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f0:e7:9a:19:fa:73:ea:36:ed:fa:2a:01:dd:f7:37:e0:db:83:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 19 14:07:54 2026 GMT
            Not After : Aug 18 14:12:54 2027 GMT
        Subject: CN=EE042E9BB287535CC8891D691F4964721B0B4035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1f:e0:3f:d8:c1:1d:b0:83:41:2c:25:ce:28:
                    ff:da:90:e9:de:d4:23:26:f9:da:2e:19:c6:8e:1b:
                    70:22:53:0b:dd:42:e4:8c:19:58:33:bf:2e:e0:4a:
                    da:f9:db:77:9d:8c:91:b4:34:0d:0e:da:bd:87:e8:
                    cc:28:50:4b:75:43:f9:4c:ef:da:28:ea:5a:a9:1c:
                    57:23:a5:20:11:5a:e3:6a:ab:f2:2d:ca:df:41:c8:
                    c3:61:a9:c2:75:b5:67:51:57:89:fb:88:88:cd:5f:
                    a5:10:4c:fa:58:d0:41:64:39:7d:d2:61:21:1a:9c:
                    aa:37:af:3c:91:aa:7b:df:9a:7f:0c:ac:1d:7a:ec:
                    8a:6f:9a:dd:bb:09:d3:1d:5c:fe:d0:d8:84:2e:f7:
                    18:6a:41:bc:d1:5b:a5:50:a3:07:88:79:7b:2c:c7:
                    e1:6f:0e:a3:2c:63:10:6a:0d:25:07:d7:5d:a2:48:
                    0c:a5:ce:ba:67:75:e7:84:af:2f:62:6a:d9:aa:b5:
                    73:74:09:8e:7f:99:ac:cd:41:7f:8d:c6:39:14:2c:
                    da:5e:de:1c:0e:b3:5a:64:70:52:4f:40:00:79:48:
                    78:52:e0:be:95:c6:b4:f9:a6:13:e0:53:73:7c:d1:
                    c8:38:be:c6:38:ea:14:b6:90:f0:33:ad:86:5e:85:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:04:2E:9B:B2:87:53:5C:C8:89:1D:69:1F:49:64:72:1B:0B:40:35
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:7d:13:75:5e:6a:46:65:40:ae:33:0c:35:96:e9:65:1e:55:
         95:b2:2c:25:8e:68:0b:95:2a:3f:d6:b2:11:5b:8f:11:ee:59:
         89:59:54:e7:25:0e:fe:f2:ea:5a:1c:05:0f:5e:49:71:fc:44:
         6e:6f:88:a0:bd:ae:6c:39:96:c7:74:06:64:f1:ad:dd:fe:aa:
         f6:27:3a:ba:30:a7:94:7f:ac:8b:66:61:5c:62:fc:e7:14:e1:
         12:ea:12:be:ee:e3:21:06:d9:1c:2d:6d:f9:36:1e:af:79:6a:
         6e:6c:3d:d2:ff:a7:ae:e2:c9:74:28:3b:aa:84:d1:f2:ad:fb:
         8e:96:8f:99:b3:fb:e8:cc:d7:60:bf:ea:0c:f5:b6:b8:61:59:
         82:a2:07:4d:49:09:c6:ef:16:b6:88:ca:25:a9:39:7d:ca:9e:
         fd:33:05:12:36:3b:d5:96:8c:87:39:fd:08:68:30:2f:ed:e3:
         cc:e3:7f:35:39:d2:0f:2c:9b:e2:5f:59:47:30:7a:3c:fd:ac:
         6d:bf:08:63:21:85:f8:0b:1c:c2:e7:ab:c3:3f:a7:4d:18:46:
         95:04:e2:77:95:a9:a7:35:8e:7b:4c:cb:24:64:31:a6:59:b7:
         d4:9f:ef:60:39:cc:3e:92:c9:b4:a6:7f:d4:61:63:ff:7b:bd:
         bc:89:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:51:35 2026 by rpki-client