Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638333a3a2f33322d3332203d3e203434353730.roa
File:                     326130363a396638333a3a2f33322d3332203d3e203434353730.roa (raw, json)
Hash identifier:          Z1W9me8vnWGd9Olqg4oiY5gSwO+socOUsF2RVPQVawo=
Subject key identifier:   5B:ED:8A:18:74:74:5C:30:D9:A3:8C:F7:30:BD:58:45:1D:3D:34:B6
Certificate issuer:       /CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
Certificate serial:       6521F5F7C8844046A07D35FD0811DC10479C9642
Authority key identifier: BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638333a3a2f33322d3332203d3e203434353730.roa
Signing time:             Fri 04 Jul 2025 19:44:57 +0000
ROA not before:           Fri 04 Jul 2025 19:39:57 +0000
ROA not after:            Fri 03 Jul 2026 19:44:57 +0000
asID:                     44570
IP address blocks:        2a06:9f83::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl
                          rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 20:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:21:f5:f7:c8:84:40:46:a0:7d:35:fd:08:11:dc:10:47:9c:96:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
        Validity
            Not Before: Jul  4 19:39:57 2025 GMT
            Not After : Jul  3 19:44:57 2026 GMT
        Subject: CN=5BED8A1874745C30D9A38CF730BD58451D3D34B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:21:0b:8b:b3:0c:82:d9:a0:d3:a9:16:2c:
                    da:8b:c5:dd:c1:59:1f:b0:6b:8d:35:b3:15:ee:64:
                    73:2b:b6:21:4d:38:2c:75:ec:ce:4f:ca:6f:80:4f:
                    9c:19:c1:1a:7d:27:0a:91:9a:30:e5:37:b6:92:d2:
                    d8:c8:0c:69:b0:dd:85:78:0f:40:e9:2c:3e:41:fa:
                    dd:aa:93:b9:af:22:91:c6:41:0e:9d:d2:d1:0c:e3:
                    4b:12:48:e2:67:15:51:24:5c:a1:86:eb:60:5a:4f:
                    12:ee:e8:95:0b:92:57:82:f5:b4:73:a7:b8:29:93:
                    d4:c6:51:1f:6a:42:e0:ad:7b:48:23:28:56:4e:a9:
                    27:d8:ae:da:64:e1:11:b0:30:c0:2a:73:c7:e0:eb:
                    52:84:ab:0c:9d:32:16:a8:4b:8a:76:08:5b:dd:cc:
                    26:b5:d5:e4:35:fd:f1:98:4c:bb:51:6f:d5:9d:b8:
                    32:90:15:14:67:e7:d1:e8:ac:1a:90:12:d0:55:16:
                    19:21:a9:95:00:c1:5d:33:77:8e:3c:ce:3d:73:6a:
                    53:d7:e3:b4:c3:e7:81:6b:56:d1:31:4b:cd:20:7f:
                    fd:22:30:56:1d:a3:04:25:47:e8:ec:1c:0e:33:3e:
                    74:22:5e:2c:9c:80:fe:08:9a:37:98:83:03:ed:f6:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:ED:8A:18:74:74:5C:30:D9:A3:8C:F7:30:BD:58:45:1D:3D:34:B6
            X509v3 Authority Key Identifier:
                keyid:BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638333a3a2f33322d3332203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f83::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:ef:47:1d:2e:da:e1:d1:f0:44:31:67:46:e0:8f:79:92:
         c4:22:f8:ef:e2:d3:4f:c9:90:4e:30:2c:bd:c8:de:2c:6d:72:
         a2:37:e0:7f:24:bf:2b:26:f0:c3:b1:94:d6:ef:f1:85:75:e8:
         7f:ee:45:ca:9c:b6:5d:b5:e3:ae:0e:74:e6:32:00:26:9c:0b:
         a1:e9:2b:98:3b:e0:88:55:b5:3c:d5:79:19:18:71:5c:40:72:
         63:0c:7a:65:98:61:67:4b:2a:96:a8:2a:92:98:37:c3:35:c6:
         25:e8:29:83:e3:ab:d6:ae:2a:b4:7f:67:81:45:95:ac:6c:4a:
         f9:fe:43:90:5c:93:f6:64:a4:b0:a6:52:f9:0b:f2:7b:63:d7:
         a8:32:6e:39:47:f8:d1:26:2f:54:0e:47:d0:16:28:40:29:8d:
         2b:c8:8c:43:bb:5c:c3:0d:44:73:b8:37:3f:eb:83:73:87:f5:
         db:9e:55:b1:9f:8a:b7:7b:5d:ca:09:61:17:5f:52:a0:d0:7a:
         ea:ab:b7:d8:e7:e7:31:c3:d9:c6:36:02:73:9c:36:a5:42:3c:
         d4:10:12:72:8a:fe:c3:3f:35:3e:62:57:16:52:69:87:37:ca:
         a3:8e:71:67:08:50:d2:a4:11:bb:37:ae:08:73:14:8a:16:d5:
         a5:ba:b1:6d
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUZSH198iEQEagfTX9CBHcEEeclkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI4RkZDODVDOTRENjZGMTk3RkUzOUM2MEM3QkU1RTY3
RDIwREIyRDAeFw0yNTA3MDQxOTM5NTdaFw0yNjA3MDMxOTQ0NTdaMDMxMTAvBgNV
BAMTKDVCRUQ4QTE4NzQ3NDVDMzBEOUEzOENGNzMwQkQ1ODQ1MUQzRDM0QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YCELi7MMgtmg06kWLNqLxd3B
WR+wa401sxXuZHMrtiFNOCx17M5Pym+AT5wZwRp9JwqRmjDlN7aS0tjIDGmw3YV4
D0DpLD5B+t2qk7mvIpHGQQ6d0tEM40sSSOJnFVEkXKGG62BaTxLu6JULkleC9bRz
p7gpk9TGUR9qQuCte0gjKFZOqSfYrtpk4RGwMMAqc8fg61KEqwydMhaoS4p2CFvd
zCa11eQ1/fGYTLtRb9WduDKQFRRn59HorBqQEtBVFhkhqZUAwV0zd448zj1zalPX
47TD54FrVtExS80gf/0iMFYdowQlR+jsHA4zPnQiXiycgP4ImjeYgwPt9uvvAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQUW+2KGHR0XDDZo4z3ML1YRR09NLYwHwYDVR0j
BBgwFoAUu4/8hclNZvGX/jnGDHvl5n0g2y0wDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
WE9ET1RFQ0gvMi9CQjhGRkM4NUM5NEQ2NkYxOTdGRTM5QzYwQzdCRTVFNjdEMjBE
QjJELmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xv
dWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvQkI4RkZDODVD
OTRENjZGMTk3RkUzOUM2MEM3QkU1RTY3RDIwREIyRC5jZXIwgYIGCCsGAQUFBwEL
BHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAv
cmVwby9YT0RPVEVDSC8yLzMyNjEzMDM2M2EzOTY2MzgzMzNhM2EyZjMzMzIyZDMz
MzIyMDNkM2UyMDM0MzQzNTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqBp+DMA0GCSqGSIb3DQEB
CwUAA4IBAQBzpu9HHS7a4dHwRDFnRuCPeZLEIvjv4tNPyZBOMCy9yN4sbXKiN+B/
JL8rJvDDsZTW7/GFdeh/7kXKnLZdteOuDnTmMgAmnAuh6SuYO+CIVbU81XkZGHFc
QHJjDHplmGFnSyqWqCqSmDfDNcYl6CmD46vWriq0f2eBRZWsbEr5/kOQXJP2ZKSw
plL5C/J7Y9eoMm45R/jRJi9UDkfQFihAKY0ryIxDu1zDDURzuDc/64Nzh/XbnlWx
n4q3e13KCWEXX1Kg0Hrqq7fY5+cxw9nGNgJznDalQjzUEBJyiv7DPzU+YlcWUmmH
N8qjjnFnCFDSpBG7N64IcxSKFtWlurFt
-----END CERTIFICATE-----
Generated at Sat Jul 5 08:32:06 2025 by rpki-client