Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa
File:                     323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa (raw, json)
Hash identifier:          7He0kFm0Kl4jqhoH4ojmkfQJKAvNlMIdUOCiTM8Mnno=
Subject key identifier:   B2:07:72:C9:AB:93:B4:C0:6F:36:73:98:C1:60:C2:20:C4:74:C1:A3
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       4F9CD7CB1D49B56DBC3F39A3FE14AD951CD5328F
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa
Signing time:             Mon 31 Aug 2026 08:12:58 +0000
ROA not before:           Mon 31 Aug 2026 08:07:58 +0000
ROA not after:            Mon 30 Aug 2027 08:12:58 +0000
asID:                     204340
IP address blocks:        2602:fafd:fb3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9c:d7:cb:1d:49:b5:6d:bc:3f:39:a3:fe:14:ad:95:1c:d5:32:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Aug 31 08:07:58 2026 GMT
            Not After : Aug 30 08:12:58 2027 GMT
        Subject: CN=B20772C9AB93B4C06F367398C160C220C474C1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:1f:5a:0c:b0:a5:cf:42:99:2a:7c:fe:c1:
                    2b:80:53:f1:cf:83:3c:32:58:0d:4f:3d:33:fa:45:
                    77:3d:51:a8:ea:72:35:7d:63:9f:1c:5c:ec:51:ed:
                    68:80:f9:03:c6:28:34:e4:f3:f8:53:4e:9d:d3:3f:
                    82:ad:a5:7c:48:58:34:6b:84:a9:24:e7:70:c7:ea:
                    f9:20:bf:17:32:f3:68:dd:8c:c1:5c:54:23:fb:4e:
                    a7:2d:5e:fb:9b:eb:a9:29:56:51:ed:22:a9:7c:b9:
                    ed:6f:a2:b3:ce:c6:13:73:1f:fa:8f:f5:d6:0e:ba:
                    1e:c9:6e:6f:59:6c:4c:d4:96:eb:f2:b4:e0:52:cf:
                    72:68:08:1a:66:6e:71:ee:8e:cf:80:90:2c:cb:bb:
                    9c:46:44:5d:f0:ef:c4:37:ed:71:29:7e:28:2a:22:
                    b1:df:51:94:2e:df:49:ad:c7:d3:9d:d0:57:77:4d:
                    9d:f8:c0:f4:4b:c0:98:14:e6:67:05:4f:ed:eb:e6:
                    90:40:03:74:62:fc:b7:e4:e9:6c:a3:9e:7e:01:ad:
                    40:1e:6d:09:9f:54:78:1c:0d:b6:04:be:a0:fe:ac:
                    54:69:03:af:81:91:9c:7b:8d:84:f0:de:e9:77:27:
                    6c:c8:ed:f6:52:2a:92:03:5f:7e:ed:62:fd:fb:f4:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:07:72:C9:AB:93:B4:C0:6F:36:73:98:C1:60:C2:20:C4:74:C1:A3
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662333a3a2f34382d3438203d3e20323034333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb3::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:07:e4:b6:f9:7b:91:cf:c4:7b:d4:a6:27:90:da:cb:9f:be:
         cf:72:56:ce:c9:57:86:c8:a5:e4:fc:69:b5:80:2e:ea:b5:b3:
         46:e5:44:ed:91:cb:84:f6:d4:31:e6:f1:2e:70:d0:2b:c3:08:
         7f:66:79:dd:da:2a:aa:2a:72:ee:da:5f:1d:85:3c:59:ad:64:
         42:eb:69:9a:7f:62:c9:cf:55:9e:ce:49:ae:d5:6c:a0:46:6d:
         55:10:2b:11:3b:7d:22:83:64:c5:4c:62:09:b4:90:6a:12:6f:
         f4:ab:39:44:b7:dd:ee:7a:65:19:c5:9c:12:80:d1:44:11:ee:
         c2:1b:b7:20:0f:75:e5:4f:b0:d8:f3:a3:78:1e:74:0a:66:f7:
         b7:3d:c5:f9:89:20:69:ed:ec:4c:96:bc:0a:e6:3e:af:59:f1:
         89:83:d6:0d:7a:d6:09:73:1a:dd:c6:1a:66:ca:7d:d3:35:78:
         14:0d:07:8a:3e:a4:b8:6e:7e:64:67:9f:bb:18:29:3e:2f:ef:
         a1:d0:a0:d8:4d:10:36:fc:fe:a2:39:81:cf:dc:f1:a8:bb:38:
         2d:ef:b0:0e:b2:cc:43:8f:bd:fa:c0:c1:7a:59:4f:3e:52:9b:
         2c:7b:a2:ea:da:b2:8e:28:47:66:a9:74:ec:80:72:a3:d4:99:
         72:80:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:19:42 2026 by rpki-client