Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638323a3a2f33322d3332203d3e203434353730.roa
File:                     326130363a396638323a3a2f33322d3332203d3e203434353730.roa (raw, json)
Hash identifier:          jqb8esN2KfXaI+km9pWLj9wHeXc/USjA7fdNLYHfqj8=
Subject key identifier:   65:A1:A7:E9:88:E9:17:C8:18:65:FE:94:60:1D:73:F9:BC:FD:C1:B4
Certificate issuer:       /CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
Certificate serial:       7E7D90AC1575FD7EA6335E1F47DBF92A9A559D74
Authority key identifier: BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638323a3a2f33322d3332203d3e203434353730.roa
Signing time:             Fri 04 Jul 2025 19:44:57 +0000
ROA not before:           Fri 04 Jul 2025 19:39:57 +0000
ROA not after:            Fri 03 Jul 2026 19:44:57 +0000
asID:                     44570
IP address blocks:        2a06:9f82::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl
                          rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 20:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7d:90:ac:15:75:fd:7e:a6:33:5e:1f:47:db:f9:2a:9a:55:9d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
        Validity
            Not Before: Jul  4 19:39:57 2025 GMT
            Not After : Jul  3 19:44:57 2026 GMT
        Subject: CN=65A1A7E988E917C81865FE94601D73F9BCFDC1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:d3:6b:ed:44:50:3d:95:21:41:84:8f:8f:
                    8a:55:67:ea:ba:76:24:61:81:43:33:18:73:6f:51:
                    a4:89:9a:c0:3a:8b:5a:2d:1e:7c:f5:02:f7:1a:a1:
                    c9:de:ac:56:e9:8e:43:a8:c1:3c:f2:6a:04:0a:6a:
                    f7:c3:68:be:8a:d4:71:d2:f7:1c:07:01:6f:a0:95:
                    86:ae:71:fd:71:df:9b:0d:91:ff:96:bc:86:63:1d:
                    c0:41:30:b9:8f:11:bb:76:ef:1f:df:e5:63:ea:47:
                    8a:5c:da:c0:b3:f8:3d:08:b8:d4:55:e4:c3:c6:4f:
                    f6:d5:30:36:a4:ba:6f:96:c9:21:05:ec:71:78:14:
                    b0:92:e8:76:31:22:5f:ab:35:b8:77:7b:eb:69:4a:
                    89:68:2d:31:ee:4c:f2:88:a6:f6:84:77:9c:e8:d1:
                    f5:8d:33:43:61:79:ee:15:1b:2c:67:ad:7d:ee:f6:
                    dd:39:65:02:6c:6c:86:67:f1:48:ee:a1:e1:a0:19:
                    70:8f:51:8d:99:e5:f7:0c:e9:2e:cd:31:28:45:c2:
                    ce:58:ef:86:00:f4:3e:f6:fc:52:92:94:90:8e:52:
                    91:78:d7:6a:56:e5:b3:b0:ea:12:bd:c6:6c:bd:1b:
                    88:c5:ae:9a:f2:a4:5f:e0:fd:ab:c8:f0:1b:ee:a0:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A1:A7:E9:88:E9:17:C8:18:65:FE:94:60:1D:73:F9:BC:FD:C1:B4
            X509v3 Authority Key Identifier:
                keyid:BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638323a3a2f33322d3332203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f82::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:1d:3a:ea:5b:d9:0f:29:c2:9d:ce:29:13:48:12:41:d2:63:
         85:7c:c8:13:a9:35:21:9b:0d:0c:d3:56:1b:33:91:0a:19:1d:
         59:f9:89:36:96:8b:bf:e8:85:6a:0f:7e:9a:e4:75:dc:58:70:
         55:d6:3a:19:6d:a1:e0:ee:81:45:be:10:8b:1f:82:9a:54:bf:
         da:ba:07:d8:85:06:79:dc:a1:23:03:90:2f:06:4d:20:ed:57:
         f3:d7:39:49:5f:59:16:c2:ea:46:96:ce:73:6c:6c:53:70:0e:
         06:11:55:65:70:6d:18:40:dd:9f:d4:63:f1:a2:1e:f0:25:98:
         83:3e:2c:73:31:32:4b:d2:90:1c:50:24:67:35:4c:cc:1c:8c:
         fa:72:56:ec:7e:5e:62:7f:7b:8b:4d:38:fd:c7:67:d5:64:db:
         7d:8c:16:62:2d:de:3e:cd:11:9f:85:4f:7c:42:25:68:21:03:
         95:9b:f9:55:15:2b:cd:39:f0:35:6a:da:b1:94:eb:98:7b:9f:
         bd:f3:ef:ca:e6:f7:78:7f:5c:db:60:f4:69:c7:8a:c3:59:0a:
         68:89:2d:f9:45:c3:0f:ed:f0:b9:2d:26:76:30:94:67:35:d2:
         63:2b:e8:01:72:d0:c8:54:c2:99:21:9c:36:96:7b:90:f5:07:
         71:d3:43:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:30:26 2025 by rpki-client