Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638343a3a2f33322d3332203d3e203434353730.roa
File:                     326130363a396638343a3a2f33322d3332203d3e203434353730.roa (raw, json)
Hash identifier:          6Uzj5vetRC5AVK07RAe/g5KZXhn95BhfI6liw76dvdE=
Subject key identifier:   45:D2:E0:62:82:1C:B9:63:AE:F1:59:AC:81:3D:83:65:1B:41:13:F9
Certificate issuer:       /CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
Certificate serial:       0311AAFF08716936EB698B3B662E7F77407413D4
Authority key identifier: BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638343a3a2f33322d3332203d3e203434353730.roa
Signing time:             Fri 04 Jul 2025 19:44:56 +0000
ROA not before:           Fri 04 Jul 2025 19:39:56 +0000
ROA not after:            Fri 03 Jul 2026 19:44:56 +0000
asID:                     44570
IP address blocks:        2a06:9f84::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl
                          rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 20:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:11:aa:ff:08:71:69:36:eb:69:8b:3b:66:2e:7f:77:40:74:13:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
        Validity
            Not Before: Jul  4 19:39:56 2025 GMT
            Not After : Jul  3 19:44:56 2026 GMT
        Subject: CN=45D2E062821CB963AEF159AC813D83651B4113F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3a:5b:e4:1f:54:58:5f:4b:d2:fd:48:1d:4b:
                    2a:d1:e4:ea:ca:cb:fa:65:a6:c4:3a:81:c2:bb:45:
                    88:fa:4f:e2:79:06:58:be:f1:d7:70:8c:9a:bf:1c:
                    51:e9:1b:d5:0d:77:84:52:04:d0:44:7e:0c:f4:20:
                    45:d0:34:3e:8d:5b:39:bf:56:d5:b0:d7:f3:45:aa:
                    78:d2:3a:49:64:73:c0:1c:9f:cc:05:cd:73:f5:89:
                    73:d7:e7:0f:2e:cf:d9:3c:6f:6d:15:ce:45:0b:50:
                    f9:56:55:26:e3:f3:fa:17:5d:37:25:40:4c:a2:a1:
                    dd:be:b8:23:90:b7:6a:c5:db:5f:8f:e3:d6:f8:af:
                    93:19:fb:73:e4:1f:d8:f1:0d:32:2a:b2:06:ba:a1:
                    2d:b2:ba:57:55:62:a7:72:ca:1a:bd:70:0e:2c:02:
                    cc:ce:19:39:b8:4f:27:7b:dc:3d:03:dd:49:ff:c7:
                    24:7c:3e:9e:06:27:eb:bf:fd:a5:7c:ba:a1:d4:e9:
                    e0:f8:e3:d9:57:e8:63:f3:ab:bf:13:55:df:34:93:
                    9f:8b:fa:9d:08:4f:06:2f:d0:86:09:7a:52:b7:24:
                    8e:c8:95:46:38:ca:2e:55:6e:61:6a:08:a7:88:56:
                    71:b5:5b:e1:30:a9:fe:b5:ac:b2:46:ff:cd:3a:a7:
                    e1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D2:E0:62:82:1C:B9:63:AE:F1:59:AC:81:3D:83:65:1B:41:13:F9
            X509v3 Authority Key Identifier:
                keyid:BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638343a3a2f33322d3332203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f84::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:ec:86:66:d6:ba:95:97:3d:fb:43:e7:74:b4:94:36:21:f2:
         43:4e:84:8a:2b:ea:03:cc:19:06:fe:b6:00:cf:6c:92:c1:0d:
         7d:09:59:e9:9f:c3:4d:50:43:a6:8c:32:40:1b:bc:ee:7a:47:
         f1:98:87:66:e7:2d:d7:d6:0a:c5:71:67:b6:06:1c:b5:27:7f:
         83:26:f2:ac:59:73:66:81:92:e5:01:24:28:06:13:9f:ac:f6:
         c2:5f:01:14:b4:e1:e4:a8:44:0d:f7:31:38:36:f4:56:bf:7e:
         d6:ca:ed:95:14:58:e6:6a:1a:ee:74:8f:74:d6:86:a2:ca:27:
         9e:60:a2:c7:5f:c4:b5:c7:e4:c6:4c:27:0d:c0:33:5c:94:3a:
         59:46:1b:2d:86:e5:a3:93:f0:f9:9c:b8:57:8d:78:18:e7:18:
         12:e8:b2:a8:93:bb:3a:11:de:ed:54:00:ef:60:d7:29:5e:f5:
         c3:66:12:6c:bc:bf:f0:37:1c:bb:40:d5:5a:c8:24:de:4d:99:
         62:ca:62:3d:37:30:f9:a2:07:33:57:86:a0:7f:23:e7:81:af:
         1d:62:4a:09:89:b2:b2:d6:f1:e9:cd:73:5b:81:34:c1:89:17:
         6c:9e:87:08:63:fb:81:70:70:1e:f1:8a:53:43:39:41:82:51:
         5b:85:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:30:25 2025 by rpki-client