Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32352e302f32342d3234203d3e203633303138.roa
File:                     3231362e3134362e32352e302f32342d3234203d3e203633303138.roa (raw, json)
Hash identifier:          lgJt6Kxb9WHn0nu7YN+dzf87rf/cAssdrdkVaIXRBds=
Subject key identifier:   49:6E:E5:48:AF:D7:38:64:F4:D2:FB:B3:5E:F6:10:EE:6E:7E:66:FF
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       79E133B14CF49A4D1C6A2D3AFECB2D21B898648A
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32352e302f32342d3234203d3e203633303138.roa
Signing time:             Wed 26 Aug 2026 23:12:57 +0000
ROA not before:           Wed 26 Aug 2026 23:07:57 +0000
ROA not after:            Wed 25 Aug 2027 23:12:57 +0000
asID:                     63018
IP address blocks:        216.146.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e1:33:b1:4c:f4:9a:4d:1c:6a:2d:3a:fe:cb:2d:21:b8:98:64:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Aug 26 23:07:57 2026 GMT
            Not After : Aug 25 23:12:57 2027 GMT
        Subject: CN=496EE548AFD73864F4D2FBB35EF610EE6E7E66FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:e7:b7:24:31:df:2a:fd:38:d7:a5:38:f0:
                    36:2d:31:41:25:34:7b:f4:8a:53:b4:25:07:8c:b4:
                    9a:ad:b6:d1:e6:ff:ef:65:d7:46:43:84:4a:39:f0:
                    fa:b6:a3:23:3e:54:19:73:4a:d7:3c:5f:7d:54:d4:
                    d9:a4:8f:5e:45:bf:88:0c:30:89:a9:69:17:d6:df:
                    d7:6f:77:67:41:cd:ed:76:c7:11:51:12:cd:d8:b2:
                    82:79:c0:8d:dd:b1:db:c6:44:bf:38:a5:7a:bd:22:
                    d0:ca:c9:be:5b:80:a3:9c:02:84:0a:72:8f:1e:13:
                    a9:db:25:88:66:4f:44:28:64:9b:b3:0f:f7:f0:b8:
                    ba:02:ad:61:64:2c:bd:0c:21:3e:8a:1e:d7:58:09:
                    ef:19:d2:8e:5c:73:da:f6:fc:db:7c:4f:0c:c7:68:
                    4a:bf:a4:23:8b:84:54:ec:4a:4e:a4:25:5c:57:a1:
                    c5:60:c0:66:73:a4:4c:00:3a:21:b5:a5:52:98:66:
                    3c:70:2f:a2:0e:05:5a:51:c5:b3:21:b9:57:a2:da:
                    17:48:4b:fd:3f:6b:eb:ae:6e:52:10:6b:20:d3:d1:
                    c0:5e:fb:9d:33:77:0e:88:59:ff:04:b3:32:06:70:
                    16:17:68:0e:31:bf:05:d1:53:78:07:bb:58:84:0c:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6E:E5:48:AF:D7:38:64:F4:D2:FB:B3:5E:F6:10:EE:6E:7E:66:FF
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32352e302f32342d3234203d3e203633303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:d0:49:44:91:20:06:6c:37:f6:a7:5c:43:20:4e:4c:07:b8:
         4f:6f:14:ab:c4:3a:95:24:0c:f9:f8:fb:81:85:16:1e:3d:7d:
         3b:e2:82:7e:f8:33:34:49:ad:a0:b0:42:08:49:ad:fa:88:62:
         d3:eb:2b:a0:9d:16:e3:45:68:b7:01:59:3f:8e:e8:3d:eb:6b:
         0e:ec:09:6d:f7:77:92:0f:60:67:5a:93:60:e8:d9:c4:5f:65:
         d3:9d:7f:1d:8d:c1:00:f6:73:6c:69:6b:cc:ac:ba:23:d8:fd:
         a5:68:19:31:15:3b:9f:44:c4:59:a5:63:4c:c8:40:2e:d6:a9:
         72:35:9c:2f:26:1a:a3:52:e7:31:8a:a9:a9:a7:36:2b:3c:7b:
         89:0a:04:90:3f:6f:87:48:d4:ed:77:15:4d:01:5f:01:a3:d9:
         60:b3:55:3c:84:3b:1d:38:1e:f2:e3:bb:2d:01:2a:4d:7a:4f:
         49:b4:00:14:c9:d1:90:54:7f:60:7e:8c:b9:99:79:8d:c4:a3:
         ef:04:ed:b8:66:22:3c:85:65:f2:39:b6:78:2e:bd:0d:6d:08:
         cb:7c:a3:47:b1:56:e7:a8:4a:0e:c0:c2:be:af:07:03:0b:0e:
         91:8d:c9:5e:4c:90:a6:a2:3f:6c:7f:36:d1:54:5c:ae:03:9c:
         a9:68:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:16:23 2026 by rpki-client