Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638303a3a2f33322d3438203d3e203434353730.roa
File:                     326130363a396638303a3a2f33322d3438203d3e203434353730.roa (raw, json)
Hash identifier:          VWw1QFQxH8sl8dgmy3iCAaMn1yRZo60ofblqS9VnTHM=
Subject key identifier:   F3:36:D6:10:7B:64:21:64:B2:B5:7C:CC:61:14:8E:FF:80:DD:37:E1
Certificate issuer:       /CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
Certificate serial:       0F191CCFF66E43D0FF6DAB704167C5A347B38839
Authority key identifier: BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638303a3a2f33322d3438203d3e203434353730.roa
Signing time:             Fri 04 Jul 2025 19:44:56 +0000
ROA not before:           Fri 04 Jul 2025 19:39:56 +0000
ROA not after:            Fri 03 Jul 2026 19:44:56 +0000
asID:                     44570
IP address blocks:        2a06:9f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl
                          rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 20:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:19:1c:cf:f6:6e:43:d0:ff:6d:ab:70:41:67:c5:a3:47:b3:88:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
        Validity
            Not Before: Jul  4 19:39:56 2025 GMT
            Not After : Jul  3 19:44:56 2026 GMT
        Subject: CN=F336D6107B642164B2B57CCC61148EFF80DD37E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:09:7c:9d:03:92:ce:fe:5f:3e:20:56:b7:15:
                    c8:44:db:77:12:e2:bd:25:03:6d:7e:e5:6f:59:03:
                    c3:64:34:91:49:64:fa:72:e2:4b:cf:5c:6c:70:55:
                    0f:5d:fc:83:ad:53:81:92:2a:f0:d4:bd:0b:72:10:
                    4e:96:a5:1d:33:3f:f9:89:f1:22:cd:b6:2e:5e:04:
                    79:39:e1:74:37:e6:46:43:15:a2:8b:91:47:49:87:
                    ea:22:10:42:20:71:41:e6:a3:b9:aa:66:5d:b5:9d:
                    d4:dd:ce:d9:27:42:e8:86:39:b5:1f:e3:f1:5d:42:
                    9c:70:0f:10:c6:5c:19:c1:a8:b1:bf:22:41:f1:6c:
                    b9:52:78:89:b0:f9:0f:0d:f5:4c:ff:4e:e1:7d:65:
                    47:ca:8f:96:23:63:4d:e1:32:9a:da:32:92:8f:57:
                    28:b3:19:53:3c:22:05:dc:a6:08:b1:84:1f:58:fb:
                    a2:0e:22:57:15:80:df:83:e4:27:3a:9b:9b:2f:71:
                    93:1f:d1:eb:c6:88:40:20:6c:7c:3e:a7:cd:93:18:
                    d6:c4:96:a2:b2:51:25:28:6d:e6:b0:eb:10:b0:7b:
                    32:65:e2:11:81:42:97:28:4f:f6:56:76:89:70:32:
                    22:df:28:ed:1b:08:32:91:2f:ee:10:4d:03:10:3f:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:36:D6:10:7B:64:21:64:B2:B5:7C:CC:61:14:8E:FF:80:DD:37:E1
            X509v3 Authority Key Identifier:
                keyid:BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638303a3a2f33322d3438203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:74:c3:84:4c:18:26:9c:2b:44:84:b9:3f:d3:3a:a2:22:cb:
         a8:da:e6:95:fe:db:3e:1a:b5:f1:2e:3a:c0:f7:81:dd:ca:92:
         eb:3e:e2:60:cd:26:92:bc:b2:68:12:11:49:ed:33:9c:5a:14:
         0a:23:27:9e:94:d0:62:f6:8f:74:00:be:74:3a:78:0a:61:97:
         02:36:71:db:45:29:3a:b5:81:04:73:b3:1a:b0:4c:a5:1b:60:
         7e:79:dd:61:73:35:1f:00:ff:b6:5e:44:4e:c0:73:3d:f9:f9:
         ba:02:9e:f4:21:37:50:b4:ca:fe:07:d6:20:d9:cf:ca:38:5d:
         da:ba:10:80:9f:88:64:88:74:77:d8:d9:4e:cd:2f:e3:00:a3:
         a3:bb:c4:dc:ab:23:eb:78:49:8f:0f:94:0c:3d:d5:a1:8d:e6:
         fc:6f:3d:e7:7c:6a:62:54:23:8f:cf:84:79:0f:64:8c:42:03:
         bb:65:a3:c8:df:7f:49:8f:f2:d2:9c:a4:3f:7f:4b:1b:ef:e5:
         ec:b0:a0:82:7d:b6:3c:19:88:71:80:86:bb:96:0b:9c:62:30:
         0e:f5:7d:f1:47:65:26:2d:ed:b8:c7:5a:d9:6b:a4:e4:a9:4b:
         4e:27:df:29:d1:a5:75:1f:bd:49:a6:90:9b:e7:db:d3:2b:4d:
         67:3b:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:31:12 2025 by rpki-client