Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          dyiDhMFShMPxuTstv+zE6FALVPgT6kDtuy7C9YANuSc=
Subject key identifier:   7E:86:A3:47:48:91:48:3D:5D:B1:B5:8A:55:4F:24:CC:8E:E1:1F:4F
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       20A7D4865FA692B3154B76886D3299A3320BB026
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Wed 19 Aug 2026 14:12:54 +0000
ROA not before:           Wed 19 Aug 2026 14:07:54 +0000
ROA not after:            Wed 18 Aug 2027 14:12:54 +0000
asID:                     200775
IP address blocks:        2602:fafd:f0d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a7:d4:86:5f:a6:92:b3:15:4b:76:88:6d:32:99:a3:32:0b:b0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 19 14:07:54 2026 GMT
            Not After : Aug 18 14:12:54 2027 GMT
        Subject: CN=7E86A3474891483D5DB1B58A554F24CC8EE11F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:c4:02:1a:1b:ab:ee:1b:f9:88:31:2b:0b:
                    0f:fe:a4:a1:dc:43:d9:9b:f3:40:bb:2a:6f:9c:88:
                    77:74:7f:c7:61:8e:28:56:75:06:ef:e5:99:58:40:
                    36:b4:4c:5f:38:fa:ff:4b:96:d7:29:f9:0f:98:dc:
                    c9:e4:a6:6a:b0:6d:49:4e:37:54:46:8d:f1:64:d2:
                    b2:48:6c:99:c5:0e:be:f4:7c:fc:40:dc:cb:78:28:
                    c5:90:ff:90:5b:fb:95:f2:ad:49:42:9a:96:1c:25:
                    60:b6:02:9f:0a:b8:3e:25:5e:de:6f:a3:cd:51:52:
                    65:6b:26:89:f4:a1:ac:c5:12:e0:b0:06:be:29:e4:
                    84:d4:b3:e3:a6:c5:4e:99:05:03:04:1d:50:ed:98:
                    56:bd:3c:5d:b8:13:c6:ce:83:fd:6b:de:9c:99:60:
                    50:59:7f:6a:e4:91:86:30:bb:0d:93:58:23:f7:bb:
                    c3:40:fc:97:fe:58:c1:d6:4b:c6:0e:d3:71:f8:12:
                    00:99:8e:fa:4d:2f:dd:e5:25:07:69:da:b7:47:3c:
                    c3:28:34:52:7e:4c:64:23:16:08:b6:67:f7:62:2a:
                    35:7b:73:37:3e:4c:3f:69:e3:5d:fe:47:b6:c6:ca:
                    bc:67:57:8a:ea:a9:2c:76:36:c7:fc:33:95:a4:fa:
                    ca:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:86:A3:47:48:91:48:3D:5D:B1:B5:8A:55:4F:24:CC:8E:E1:1F:4F
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630643a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:59:a8:69:45:50:44:e7:62:a0:08:43:3e:f2:57:9d:bf:dc:
         1d:24:7e:3a:6f:17:57:8f:0b:e4:51:e3:de:60:e5:62:9e:02:
         5a:64:99:22:dd:51:3c:31:7a:6f:6d:08:fd:22:10:5f:f9:59:
         13:db:82:77:8b:d1:82:cb:76:3c:76:3e:9f:c1:dd:32:a8:c2:
         da:2b:ba:a0:c4:0e:d5:36:ee:03:b4:55:bf:2f:16:39:9d:22:
         d3:06:aa:1b:85:f3:2a:13:2b:e9:fc:82:24:38:ba:f1:b7:ad:
         b3:83:b8:9c:c7:3d:09:00:c9:22:10:e4:6e:a5:b6:b0:1c:ca:
         04:4c:c5:e7:86:1a:ba:6a:e9:a5:1d:e9:ff:a6:c7:32:9d:fd:
         66:e3:3a:80:61:39:1b:11:36:a1:c1:f1:33:db:3b:5b:2f:6d:
         60:b1:8a:a5:f6:e6:cb:fc:bd:1a:a6:07:85:f8:4b:90:5e:68:
         d9:5d:50:19:f4:5d:f4:f9:ac:ec:08:bf:96:73:0d:cb:5e:55:
         f3:17:ea:56:7a:b7:5e:3e:48:e0:ed:4a:bd:7b:bc:f8:49:9d:
         37:a9:8b:40:6b:ad:ad:8a:85:27:fe:8c:18:dc:c6:cd:83:83:
         01:3b:d4:c2:89:20:09:a6:53:1b:de:e7:34:39:6d:d7:87:bc:
         05:84:4c:5c
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUIKfUhl+mkrMVS3aIbTKZozILsCYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjYwODE5MTQwNzU0WhcNMjcwODE4MTQxMjU0
WjAzMTEwLwYDVQQDEyg3RTg2QTM0NzQ4OTE0ODNENURCMUI1OEE1NTRGMjRDQzhF
RTExRjRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQDEAhobq+4b
+YgxKwsP/qSh3EPZm/NAuypvnIh3dH/HYY4oVnUG7+WZWEA2tExfOPr/S5bXKfkP
mNzJ5KZqsG1JTjdURo3xZNKySGyZxQ6+9Hz8QNzLeCjFkP+QW/uV8q1JQpqWHCVg
tgKfCrg+JV7eb6PNUVJlayaJ9KGsxRLgsAa+KeSE1LPjpsVOmQUDBB1Q7ZhWvTxd
uBPGzoP9a96cmWBQWX9q5JGGMLsNk1gj97vDQPyX/ljB1kvGDtNx+BIAmY76TS/d
5SUHadq3RzzDKDRSfkxkIxYItmf3Yio1e3M3Pkw/aeNd/ke2xsq8Z1eK6qksdjbH
/DOVpPrKtQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFH6Go0dIkUg9XbG1ilVPJMyO
4R9PMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMwNjQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzAzNzM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9Dw0w
DQYJKoZIhvcNAQELBQADggEBABFZqGlFUETnYqAIQz7yV52/3B0kfjpvF1ePC+RR
495g5WKeAlpkmSLdUTwxem9tCP0iEF/5WRPbgneL0YLLdjx2Pp/B3TKowtoruqDE
DtU27gO0Vb8vFjmdItMGqhuF8yoTK+n8giQ4uvG3rbODuJzHPQkAySIQ5G6ltrAc
ygRMxeeGGrpq6aUd6f+mxzKd/WbjOoBhORsRNqHB8TPbO1svbWCxiqX25sv8vRqm
B4X4S5BeaNldUBn0XfT5rOwIv5ZzDcteVfMX6lZ6t14+SODtSr17vPhJnTepi0Br
ra2KhSf+jBjcxs2DgwE71MKJIAmmUxve5zQ5bdeHvAWETFw=
-----END CERTIFICATE-----
Generated at Thu Sep 10 04:34:42 2026 by rpki-client