Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa
File:                     3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier:          FxnXkcG+3nJpQ3dS9BbhxsIYTr49r3JCtq4rWzJLQWE=
Subject key identifier:   99:04:48:6F:C6:38:77:16:53:60:25:AB:C3:B0:9E:4C:A5:15:04:A1
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       140CF55971C2DC367A045C789C8BF0B0C7C12C40
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa
Signing time:             Fri 09 Oct 2026 08:13:01 +0000
ROA not before:           Fri 09 Oct 2026 08:08:01 +0000
ROA not after:            Fri 08 Oct 2027 08:13:01 +0000
asID:                     396998
IP address blocks:        162.222.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 08:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0c:f5:59:71:c2:dc:36:7a:04:5c:78:9c:8b:f0:b0:c7:c1:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct  9 08:08:01 2026 GMT
            Not After : Oct  8 08:13:01 2027 GMT
        Subject: CN=9904486FC6387716536025ABC3B09E4CA51504A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:b5:c5:f8:67:6a:0c:2e:0e:81:0b:fd:c0:
                    54:7f:ad:ce:7f:0b:b6:c8:65:a3:b4:26:ce:3c:7d:
                    57:b3:79:b6:d9:1b:81:b0:4d:b8:fe:48:81:a0:72:
                    cb:32:9c:c3:b6:2f:20:1e:dd:ab:7e:8e:98:ac:c5:
                    82:2d:5f:46:46:6d:37:02:1c:bf:f9:5f:3b:2a:4d:
                    33:72:98:45:a5:50:fe:03:31:ba:ff:fb:46:07:bd:
                    31:80:76:d1:ab:68:4e:7e:1f:6b:79:38:26:16:7b:
                    65:1f:71:0f:f2:e9:2f:c3:6a:28:77:80:79:c6:d3:
                    ac:e6:0f:57:3e:41:30:0b:85:cf:e3:d6:86:57:5a:
                    a7:97:c9:88:13:bc:7a:8d:60:bb:38:cc:1a:7a:95:
                    7a:21:52:9f:29:a8:bd:78:58:3f:aa:5c:76:0d:57:
                    61:3f:e1:fd:9b:27:bb:0c:6f:4d:23:b5:23:39:b6:
                    ec:38:00:c3:ea:4c:e3:42:5f:51:dc:7d:0b:59:7c:
                    44:d7:0d:72:92:e7:be:d6:3c:ee:bd:b7:11:95:43:
                    2f:b4:9e:28:fb:54:ae:7c:58:09:88:74:ac:b7:88:
                    6e:9b:98:73:8c:07:0c:46:c0:9a:e5:f6:1a:02:14:
                    34:ba:27:1d:61:e1:8d:81:49:b7:86:5e:ab:58:48:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:04:48:6F:C6:38:77:16:53:60:25:AB:C3:B0:9E:4C:A5:15:04:A1
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20333936393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d7:41:e9:80:39:ef:b6:61:19:79:32:90:0c:ec:e7:a0:4f:
         b2:c5:0c:6e:a3:d8:4f:4c:b8:07:a1:4b:b0:dc:5d:c0:f2:40:
         81:00:cf:6d:56:eb:d9:46:61:47:a5:fe:db:f4:a9:e3:74:fe:
         6c:fb:4d:c3:6d:20:43:c7:22:7e:d6:b1:e7:71:23:0c:f6:b7:
         55:68:c5:e8:a7:28:64:49:f9:18:9c:5d:3f:ed:b9:eb:c2:6c:
         95:ff:1e:95:01:26:a0:6c:e4:05:f0:dc:4f:c2:39:1c:5b:b3:
         ef:ed:2f:a5:8d:4f:db:11:ec:86:62:e3:86:57:29:90:9b:c0:
         f7:df:a2:c8:65:aa:63:6f:59:d6:29:c6:ca:27:e3:33:c1:a2:
         85:25:e4:77:0f:7e:5a:9d:49:73:f5:57:0e:a7:ba:75:b2:62:
         27:16:0e:6b:cf:58:66:f0:72:c9:07:c4:7c:53:09:e6:5c:27:
         68:15:4d:13:2a:41:fd:e7:4f:85:75:a4:9e:ca:18:9f:fe:d5:
         1d:21:d8:2f:7d:c5:94:d2:31:0b:22:4f:e0:4d:c0:69:a9:8a:
         10:ab:ba:91:bb:e5:02:2a:d3:35:0a:c1:ee:f0:1b:9b:35:a1:
         60:b0:98:ae:d4:f4:64:e1:e9:31:a7:11:33:6b:5e:08:0c:ba:
         9c:12:03:b0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUFAz1WXHC3DZ6BFx4nIvwsMfBLEAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTExYWU5MjEz
YjUwNmI3OGJmOTkyNGFkNDIwHhcNMjYxMDA5MDgwODAxWhcNMjcxMDA4MDgxMzAx
WjAzMTEwLwYDVQQDEyg5OTA0NDg2RkM2Mzg3NzE2NTM2MDI1QUJDM0IwOUU0Q0E1
MTUwNEExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG+1xfhnagwu
DoEL/cBUf63Ofwu2yGWjtCbOPH1Xs3m22RuBsE24/kiBoHLLMpzDti8gHt2rfo6Y
rMWCLV9GRm03Ahy/+V87Kk0zcphFpVD+AzG6//tGB70xgHbRq2hOfh9reTgmFntl
H3EP8ukvw2ood4B5xtOs5g9XPkEwC4XP49aGV1qnl8mIE7x6jWC7OMwaepV6IVKf
Kai9eFg/qlx2DVdhP+H9mye7DG9NI7UjObbsOADD6kzjQl9R3H0LWXxE1w1ykue+
1jzuvbcRlUMvtJ4o+1SufFgJiHSst4hum5hzjAcMRsCa5fYaAhQ0uicdYeGNgUm3
hl6rWEiS+wIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFJkESG/GOHcWU2Alq8Ownkyl
FQShMB8GA1UdIwQYMBaAFGvsGu1lCLsHURsBsXdVF5La6yyQMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8yLzZCRUMxQUVENjUwOEJCMDc1MTFCMDFC
MTc3NTUxNzkyREFFQjJDOTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTMwMzVjZC1jNDZkLTQy
MWMtYjllMC1lNmQ0ZGQzMzZkMjEvY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTEx
YWU5MjEzYjUwNmI3OGJmOTkyNGFkNDIuY2VyMIGKBggrBgEFBQcBCwR+MHwwegYI
KwYBBQUHMAuGbnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzIvMzEzNjMyMmUzMjMyMzIyZTMxMzYyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMzM5MzYzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACi3hAwDQYJKoZIhvcNAQEL
BQADggEBAGzXQemAOe+2YRl5MpAM7OegT7LFDG6j2E9MuAehS7DcXcDyQIEAz21W
69lGYUel/tv0qeN0/mz7TcNtIEPHIn7WsedxIwz2t1VoxeinKGRJ+RicXT/tuevC
bJX/HpUBJqBs5AXw3E/CORxbs+/tL6WNT9sR7IZi44ZXKZCbwPffoshlqmNvWdYp
xson4zPBooUl5HcPflqdSXP1Vw6nunWyYicWDmvPWGbwcskHxHxTCeZcJ2gVTRMq
Qf3nT4V1pJ7KGJ/+1R0h2C99xZTSMQsiT+BNwGmpihCrupG75QIq0zUKwe7wG5s1
oWCwmK7U9GTh6TGnETNrXggMupwSA7A=
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:57:43 2026 by rpki-client