Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630653a3a2f34382d3438203d3e203633303138.roa
File:                     323630323a666166643a6630653a3a2f34382d3438203d3e203633303138.roa (raw, json)
Hash identifier:          8Rt/baAeCOZMH5IrBZ/3963SC0HvHGH3WAsyWcyNScE=
Subject key identifier:   D4:A6:E1:84:C8:1B:CA:47:89:B5:9D:2D:97:DA:39:5E:80:A4:40:43
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       76524FB8F8DFCB8444971CDFE315B3C89C545D15
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630653a3a2f34382d3438203d3e203633303138.roa
Signing time:             Sat 29 Aug 2026 06:12:58 +0000
ROA not before:           Sat 29 Aug 2026 06:07:58 +0000
ROA not after:            Sat 28 Aug 2027 06:12:58 +0000
asID:                     63018
IP address blocks:        2602:fafd:f0e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 20:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:52:4f:b8:f8:df:cb:84:44:97:1c:df:e3:15:b3:c8:9c:54:5d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 29 06:07:58 2026 GMT
            Not After : Aug 28 06:12:58 2027 GMT
        Subject: CN=D4A6E184C81BCA4789B59D2D97DA395E80A44043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:52:7c:26:44:b0:89:d9:51:f8:d8:21:76:
                    35:b0:c9:91:5d:4d:4e:19:12:5d:d3:da:46:25:64:
                    72:d2:43:5b:7a:9c:ab:bd:25:8d:a0:d8:01:be:e6:
                    c6:8d:79:cd:f1:83:72:98:78:d5:12:6c:6a:a3:b3:
                    03:f4:61:92:a2:f9:1f:cd:ec:fc:49:54:4f:ab:8f:
                    3e:b7:cc:5a:a3:a8:c6:12:1d:f7:ae:c9:a7:ef:9d:
                    1d:2f:49:3c:a4:57:40:06:97:aa:d0:85:ba:16:68:
                    63:ab:29:5c:76:de:ff:ec:cd:9c:83:f4:ba:9e:4c:
                    12:d7:9e:c5:2c:09:65:e8:75:20:c2:b1:b0:d9:77:
                    dc:12:7f:d9:8f:47:7c:c1:fa:53:95:63:2e:f1:4f:
                    6b:69:2c:76:bf:68:a0:8b:47:c6:98:c4:80:ca:5e:
                    7e:c9:8a:4d:0b:e2:f9:26:91:22:fd:61:f9:a3:d8:
                    b3:93:4b:c6:cf:b4:e3:3a:fb:ed:d8:b1:06:e4:c9:
                    10:95:fb:a2:9a:c6:4d:9e:76:ff:e7:51:96:f0:bb:
                    6d:5b:63:7d:f4:e1:b1:88:ab:87:bf:bb:39:fb:c9:
                    84:0f:1d:e5:87:b4:3d:ab:6d:d1:72:d9:f9:87:00:
                    3a:f4:6e:32:35:cb:00:3a:c6:fe:2e:64:7d:08:c9:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A6:E1:84:C8:1B:CA:47:89:B5:9D:2D:97:DA:39:5E:80:A4:40:43
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630653a3a2f34382d3438203d3e203633303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0e::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:c3:ac:e4:eb:3c:52:e6:23:f5:b3:b3:6c:88:ef:05:d3:96:
         6e:d6:9b:51:1f:84:95:2b:9b:f9:e1:bf:d0:6b:60:77:37:59:
         81:5b:2f:04:c4:e6:ea:d7:a4:1e:9e:de:f7:e8:ab:95:2a:70:
         48:82:73:0d:41:01:b7:a4:91:e4:12:78:73:f8:18:e3:76:37:
         a4:42:1a:2b:83:ed:de:9d:08:16:a3:07:fa:a9:c3:00:e6:3f:
         b3:bf:35:5e:37:96:86:b6:3a:df:a3:dd:fe:ad:eb:1d:3a:f7:
         bf:73:a5:e5:7e:66:74:ef:c4:5a:21:6c:8c:fd:c9:0a:e1:d9:
         7f:6e:18:b4:24:12:85:91:df:e2:68:33:8e:71:a1:bd:53:9c:
         27:b6:f7:a7:af:e9:c7:e6:02:c8:f7:cc:a7:37:59:01:42:5a:
         8e:0e:89:0f:15:4a:64:ea:96:67:32:eb:d5:54:e7:da:ce:0c:
         33:93:a7:0f:41:d2:46:36:14:ca:45:10:fb:da:ce:7f:69:cd:
         39:de:35:83:4e:b1:85:04:a5:85:b1:0a:1e:73:8f:6e:ae:35:
         8a:6c:d2:7b:5b:a8:94:9a:50:ff:56:24:6a:a9:33:c2:ac:09:
         37:ce:ed:03:28:d4:6a:d4:57:54:cc:20:4b:fc:2e:40:2d:d5:
         b3:32:61:c3
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIUdlJPuPjfy4RElxzf4xWzyJxUXRUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjYwODI5MDYwNzU4WhcNMjcwODI4MDYxMjU4
WjAzMTEwLwYDVQQDEyhENEE2RTE4NEM4MUJDQTQ3ODlCNTlEMkQ5N0RBMzk1RTgw
QTQ0MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugxSfCZEsInZ
UfjYIXY1sMmRXU1OGRJd09pGJWRy0kNbepyrvSWNoNgBvubGjXnN8YNymHjVEmxq
o7MD9GGSovkfzez8SVRPq48+t8xao6jGEh33rsmn750dL0k8pFdABpeq0IW6Fmhj
qylcdt7/7M2cg/S6nkwS157FLAll6HUgwrGw2XfcEn/Zj0d8wfpTlWMu8U9raSx2
v2igi0fGmMSAyl5+yYpNC+L5JpEi/WH5o9izk0vGz7TjOvvt2LEG5MkQlfuimsZN
nnb/51GW8LttW2N99OGxiKuHv7s5+8mEDx3lh7Q9q23Rctn5hwA69G4yNcsAOsb+
LmR9CMlCSQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFNSm4YTIG8pHibWdLZfaOV6A
pEBDMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGQBggrBgEFBQcBCwSBgzCBgDB+
BggrBgEFBQcwC4ZycnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9D
TE9VRElFLVJQS0kvMS8zMjM2MzAzMjNhNjY2MTY2NjQzYTY2MzA2NTNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDM2MzMzMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9Dw4wDQYJ
KoZIhvcNAQELBQADggEBAKvDrOTrPFLmI/Wzs2yI7wXTlm7Wm1EfhJUrm/nhv9Br
YHc3WYFbLwTE5urXpB6e3vfoq5UqcEiCcw1BAbekkeQSeHP4GON2N6RCGiuD7d6d
CBajB/qpwwDmP7O/NV43loa2Ot+j3f6t6x06979zpeV+ZnTvxFohbIz9yQrh2X9u
GLQkEoWR3+JoM45xob1TnCe296ev6cfmAsj3zKc3WQFCWo4OiQ8VSmTqlmcy69VU
59rODDOTpw9B0kY2FMpFEPvazn9pzTneNYNOsYUEpYWxCh5zj26uNYps0ntbqJSa
UP9WJGqpM8KsCTfO7QMo1GrUV1TMIEv8LkAt1bMyYcM=
-----END CERTIFICATE-----
Generated at Thu Sep 10 01:54:39 2026 by rpki-client