Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638353a3a2f33322d3332203d3e203434353730.roa
File:                     326130363a396638353a3a2f33322d3332203d3e203434353730.roa (raw, json)
Hash identifier:          GWEvldrKHmcOOXRi6MJU5Co/PoNcU7YfMgWoe2yAXPo=
Subject key identifier:   3B:A9:83:9B:EC:8F:36:55:C2:96:D6:78:F9:F2:D7:80:FD:17:A1:62
Certificate issuer:       /CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
Certificate serial:       416E6AEF79259FA42CC6B37BAE0940E661252C88
Authority key identifier: BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638353a3a2f33322d3332203d3e203434353730.roa
Signing time:             Fri 04 Jul 2025 19:44:56 +0000
ROA not before:           Fri 04 Jul 2025 19:39:56 +0000
ROA not after:            Fri 03 Jul 2026 19:44:56 +0000
asID:                     44570
IP address blocks:        2a06:9f85::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl
                          rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 20:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6e:6a:ef:79:25:9f:a4:2c:c6:b3:7b:ae:09:40:e6:61:25:2c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
        Validity
            Not Before: Jul  4 19:39:56 2025 GMT
            Not After : Jul  3 19:44:56 2026 GMT
        Subject: CN=3BA9839BEC8F3655C296D678F9F2D780FD17A162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:80:fb:db:e9:8f:5e:cc:e9:59:f0:51:58:
                    8a:42:b5:e5:09:f9:05:e5:03:ab:de:e1:d1:19:c1:
                    97:7d:96:cd:fe:a5:7d:1c:2a:22:98:e5:dc:d7:e9:
                    22:f1:cf:bd:05:76:89:9c:c8:57:c0:bd:e1:43:08:
                    72:31:46:f7:26:d2:95:16:03:8d:1c:51:82:88:61:
                    ee:79:5f:32:bb:d9:4f:b4:a6:ce:31:90:63:c4:46:
                    21:52:ce:ee:dc:b5:a6:e3:77:76:05:d2:6b:a0:58:
                    4b:00:59:96:3c:30:4f:7c:2e:31:c7:b6:83:4f:e3:
                    53:46:82:aa:c7:86:de:8e:36:fc:34:fe:b6:81:a1:
                    a9:3e:60:45:68:13:0b:bc:cc:dd:91:b3:a7:33:63:
                    84:29:05:94:df:a4:a6:2c:a9:36:13:fc:c5:c3:97:
                    75:b4:fc:ee:49:44:c3:d3:1e:89:62:60:11:5a:c7:
                    5a:5e:17:40:05:3b:36:5e:9a:36:23:a8:71:31:ec:
                    91:e0:2f:b9:e6:1d:96:12:6a:5a:0c:4d:ca:34:15:
                    de:03:56:6d:7a:da:9d:e3:6b:a5:04:c1:d0:52:b3:
                    96:6f:9f:64:53:a3:9f:a3:f9:8f:19:45:14:8c:a8:
                    34:1a:de:d0:ba:8d:20:ac:45:de:dd:d0:2d:8d:6b:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A9:83:9B:EC:8F:36:55:C2:96:D6:78:F9:F2:D7:80:FD:17:A1:62
            X509v3 Authority Key Identifier:
                keyid:BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638353a3a2f33322d3332203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f85::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:6e:10:de:62:76:9f:d0:9d:b5:7d:96:8e:fd:16:71:58:d3:
         ad:9a:81:fc:bd:fa:67:0e:16:27:a3:27:91:6b:92:48:04:eb:
         9f:d4:44:8e:a7:11:e2:5a:b1:f3:86:2e:67:d8:9b:0b:53:64:
         eb:29:82:eb:35:79:09:04:25:59:31:8b:c6:2c:1e:d4:8d:1e:
         c7:aa:b8:8f:27:b5:08:14:af:0c:c9:e3:82:f7:92:ab:20:69:
         e7:26:8e:94:39:fa:64:c6:79:fe:44:39:56:a1:dd:bc:27:d9:
         9f:90:ef:c7:0c:a4:dd:73:07:9f:48:f8:e0:ff:f8:1c:ec:9a:
         7c:7a:b0:e2:c4:a5:8f:f6:05:0d:86:b2:54:32:1c:1f:d6:53:
         99:1c:4e:e5:8e:72:2f:59:db:e1:88:7a:e6:95:73:7e:ec:b6:
         a5:72:73:b3:49:75:02:7d:e4:4b:a0:e4:cf:37:d2:08:24:8c:
         4f:b7:7b:a9:8b:38:a0:0a:2d:72:67:52:2a:f1:bc:ac:a0:46:
         25:37:80:86:09:53:5b:4b:33:cd:ca:e5:36:29:c2:6c:fc:c6:
         f2:c2:c7:d3:e3:99:13:97:2e:4c:d2:57:a1:b5:3d:77:39:7d:
         39:c9:2f:41:71:02:97:da:58:7a:f3:be:03:ab:cf:e4:0c:6a:
         5d:db:74:e5
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUQW5q73kln6QsxrN7rglA5mElLIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI4RkZDODVDOTRENjZGMTk3RkUzOUM2MEM3QkU1RTY3
RDIwREIyRDAeFw0yNTA3MDQxOTM5NTZaFw0yNjA3MDMxOTQ0NTZaMDMxMTAvBgNV
BAMTKDNCQTk4MzlCRUM4RjM2NTVDMjk2RDY3OEY5RjJENzgwRkQxN0ExNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelID72+mPXszpWfBRWIpCteUJ
+QXlA6ve4dEZwZd9ls3+pX0cKiKY5dzX6SLxz70FdomcyFfAveFDCHIxRvcm0pUW
A40cUYKIYe55XzK72U+0ps4xkGPERiFSzu7ctabjd3YF0mugWEsAWZY8ME98LjHH
toNP41NGgqrHht6ONvw0/raBoak+YEVoEwu8zN2Rs6czY4QpBZTfpKYsqTYT/MXD
l3W0/O5JRMPTHoliYBFax1peF0AFOzZemjYjqHEx7JHgL7nmHZYSaloMTco0Fd4D
Vm162p3ja6UEwdBSs5Zvn2RTo5+j+Y8ZRRSMqDQa3tC6jSCsRd7d0C2NazCRAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQUO6mDm+yPNlXCltZ4+fLXgP0XoWIwHwYDVR0j
BBgwFoAUu4/8hclNZvGX/jnGDHvl5n0g2y0wDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
WE9ET1RFQ0gvMi9CQjhGRkM4NUM5NEQ2NkYxOTdGRTM5QzYwQzdCRTVFNjdEMjBE
QjJELmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xv
dWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvQkI4RkZDODVD
OTRENjZGMTk3RkUzOUM2MEM3QkU1RTY3RDIwREIyRC5jZXIwgYIGCCsGAQUFBwEL
BHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAv
cmVwby9YT0RPVEVDSC8yLzMyNjEzMDM2M2EzOTY2MzgzNTNhM2EyZjMzMzIyZDMz
MzIyMDNkM2UyMDM0MzQzNTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqBp+FMA0GCSqGSIb3DQEB
CwUAA4IBAQA5bhDeYnaf0J21fZaO/RZxWNOtmoH8vfpnDhYnoyeRa5JIBOuf1ESO
pxHiWrHzhi5n2JsLU2TrKYLrNXkJBCVZMYvGLB7UjR7HqriPJ7UIFK8MyeOC95Kr
IGnnJo6UOfpkxnn+RDlWod28J9mfkO/HDKTdcwefSPjg//gc7Jp8erDixKWP9gUN
hrJUMhwf1lOZHE7ljnIvWdvhiHrmlXN+7LalcnOzSXUCfeRLoOTPN9IIJIxPt3up
izigCi1yZ1Iq8bysoEYlN4CGCVNbSzPNyuU2KcJs/MbywsfT45kTly5M0lehtT13
OX05yS9BcQKX2lh6874Dq8/kDGpd23Tl
-----END CERTIFICATE-----
Generated at Sat Jul 5 08:30:26 2025 by rpki-client