Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          +mT6FkZ4eMGPVw+U3gtfomTMrv1NfvDmCw6KoR3QYMA=
Subject key identifier:   D4:8C:41:84:AA:85:AC:35:BD:B3:EB:32:FA:86:99:EA:5A:CE:4A:DD
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       7A4DA5F9E717FFF79248D52778E77D9C95357294
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa
Signing time:             Thu 29 May 2025 09:46:29 +0000
ROA not before:           Thu 29 May 2025 09:41:29 +0000
ROA not after:            Thu 28 May 2026 09:46:29 +0000
asID:                     34927
IP address blocks:        2602:fafd:f40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4d:a5:f9:e7:17:ff:f7:92:48:d5:27:78:e7:7d:9c:95:35:72:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: May 29 09:41:29 2025 GMT
            Not After : May 28 09:46:29 2026 GMT
        Subject: CN=D48C4184AA85AC35BDB3EB32FA8699EA5ACE4ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3d:41:c2:7a:d3:5a:05:be:11:69:4b:30:4b:
                    d4:2c:c0:83:f7:d8:5a:55:ef:44:9c:b0:9b:1f:ed:
                    bb:3a:5b:e2:33:ab:40:75:46:c6:83:ff:4a:24:b6:
                    14:46:67:bc:4f:88:c4:88:9f:ac:5d:a1:cd:a6:79:
                    ef:3d:ad:d2:b4:40:22:8a:ee:63:c2:8f:88:98:de:
                    b2:9e:48:78:a4:73:dd:8f:12:05:99:f6:b2:d3:6c:
                    cd:21:7e:0c:cf:07:56:de:4d:de:52:31:02:85:a6:
                    9c:9c:2f:ea:ef:47:98:27:b4:e2:8f:70:68:0d:0d:
                    0c:48:8a:4d:99:a9:5f:5a:29:fb:18:62:21:de:10:
                    44:40:d6:75:ed:83:46:59:9a:a0:05:ec:da:6e:5a:
                    20:8f:c1:de:cc:c6:be:20:6f:a9:59:29:34:4b:1f:
                    af:61:ea:67:5c:33:87:ef:95:89:45:5b:d5:82:b1:
                    81:26:97:28:ea:b4:79:30:e6:c5:38:a4:cd:9f:b3:
                    1a:67:a1:d7:98:8f:76:47:9b:33:e6:c1:9a:25:02:
                    9d:07:38:0a:21:7b:14:b9:05:20:c4:10:0a:df:a4:
                    5c:b6:d2:be:cd:35:3c:ec:6c:a4:d7:aa:a5:50:fb:
                    77:0d:eb:6d:9c:03:26:5c:38:41:63:f9:22:ab:c0:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8C:41:84:AA:85:AC:35:BD:B3:EB:32:FA:86:99:EA:5A:CE:4A:DD
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f40::/44

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:3f:89:6c:2c:42:47:54:f9:64:9f:5d:1a:f6:14:7d:14:
         88:4d:31:bd:8e:0a:3d:90:a5:08:ef:10:d9:ff:51:7b:39:e1:
         43:d9:c0:7b:a2:24:c1:5a:77:46:da:8b:2a:d5:fc:5b:d4:52:
         a8:76:c1:87:45:ab:8e:b1:a7:39:57:d3:53:8d:16:38:1a:4b:
         c5:ae:c3:85:d9:c1:5f:99:32:93:11:19:9c:ca:39:39:05:dd:
         5a:e8:d0:0e:31:c6:5c:46:e6:84:3f:5a:cd:85:3d:33:45:65:
         ff:e0:cd:c5:d0:9b:a5:49:05:68:d2:fa:03:f1:54:ae:2a:7f:
         68:8b:4d:b8:cc:f2:0c:e9:03:ed:2c:93:e6:e2:b0:00:36:14:
         3d:33:3a:31:fc:73:f4:79:4b:10:3a:ca:b8:21:13:60:67:f5:
         11:61:d0:23:ba:2c:c9:05:67:cc:2b:d0:d1:59:2a:32:65:bc:
         fd:bc:73:f8:71:67:80:8d:7e:b7:3d:05:97:97:ce:76:00:fe:
         b7:bc:5a:4e:ef:f3:e6:6f:63:49:01:cd:b5:ef:11:3c:d0:98:
         04:9d:ea:ec:18:3e:57:bd:b6:69:66:01:10:1a:98:39:aa:b0:
         b6:0f:a7:ed:d7:d4:dc:a7:b5:1a:ca:3d:06:5f:ed:d3:91:01:
         44:8e:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:25:19 2025 by rpki-client