Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          kL4i3Df2jaQW/q0UgB7thEQbUrkWCbEaloW8D0vNO4c=
Subject key identifier:   5E:9B:2C:E5:C0:24:73:F2:A6:60:7C:3D:69:AF:3C:08:2E:11:6E:E9
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       61587ED9D532EE360EB313F80CF451BCD220E69B
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f34342d3438203d3e203334393237.roa
Signing time:             Fri 10 Apr 2026 16:12:08 +0000
ROA not before:           Fri 10 Apr 2026 16:07:08 +0000
ROA not after:            Fri 09 Apr 2027 16:12:08 +0000
asID:                     34927
IP address blocks:        2602:fafd::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:58:7e:d9:d5:32:ee:36:0e:b3:13:f8:0c:f4:51:bc:d2:20:e6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Apr 10 16:07:08 2026 GMT
            Not After : Apr  9 16:12:08 2027 GMT
        Subject: CN=5E9B2CE5C02473F2A6607C3D69AF3C082E116EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:7e:f5:cf:0e:17:f7:98:40:c1:f8:db:80:
                    c3:05:5b:29:0e:06:bd:6e:c5:d9:d5:5e:17:bc:aa:
                    a6:84:95:33:50:60:cf:38:aa:f4:32:31:96:8d:0e:
                    9b:90:44:01:20:e7:11:ac:88:35:f6:75:ea:89:60:
                    cd:4c:f0:eb:6f:96:92:3d:a8:59:1b:2b:50:22:65:
                    12:4a:b5:b3:78:6a:85:37:64:0e:0f:c8:b0:80:ab:
                    97:1f:1b:e9:98:41:c4:7b:a4:06:1a:d8:af:0c:11:
                    6f:00:be:8d:af:f0:c0:b9:7f:a1:95:38:c5:26:96:
                    cf:fa:da:6f:ca:3d:cc:1f:20:0f:bb:f1:41:36:ba:
                    29:55:1f:ec:d9:6d:14:ea:e5:05:04:e3:17:68:9e:
                    32:50:8e:3d:4a:74:d0:4d:08:26:ea:ad:e5:9e:92:
                    60:92:a0:e8:92:c6:87:b9:bd:c9:b1:28:3e:87:75:
                    a1:0c:8d:b3:fa:24:e2:d9:e6:f8:24:8c:cf:15:d7:
                    88:21:71:36:e3:51:7f:a7:9c:b5:2e:a2:41:c3:a3:
                    a9:fc:af:8f:77:3d:d6:c8:a0:f0:30:ff:06:b5:c2:
                    08:cb:ec:07:f5:c4:61:e8:f1:6f:33:3f:1c:ca:10:
                    7d:e7:18:9a:c8:0f:1b:2d:5a:b5:f8:5b:61:af:e3:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:2C:E5:C0:24:73:F2:A6:60:7C:3D:69:AF:3C:08:2E:11:6E:E9
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:d4:95:8e:e2:0f:f9:16:28:8c:8b:8b:60:1b:95:c9:57:
         05:2d:db:a7:04:f2:f2:d1:06:3a:f0:b4:9b:f4:ed:fe:b5:d4:
         b0:34:22:c1:6c:f4:26:cf:a0:06:9d:fa:38:7a:5f:8d:4a:e2:
         fb:41:cb:aa:13:7c:72:8a:50:25:e8:84:95:7e:44:be:62:57:
         73:90:56:b1:df:ba:5b:21:f5:24:dd:c2:36:2c:b7:89:f1:78:
         49:54:97:fb:2d:f7:55:60:25:62:6b:ad:91:5e:4f:14:fc:60:
         15:7b:88:9e:b7:b2:f2:e9:fa:02:76:19:3f:2e:ad:85:8a:06:
         80:50:d0:16:09:76:ef:c5:aa:4c:bc:0e:4c:52:d3:7d:44:33:
         f2:4a:4c:d4:9c:9f:2d:f7:72:b9:b0:a6:0f:08:50:a1:2c:c6:
         97:b8:7d:83:2b:4e:82:ca:c6:08:66:30:0c:61:d5:7d:74:d9:
         7e:a7:f6:d3:19:ce:ce:0f:2b:b5:be:09:b9:be:9a:6f:f0:c0:
         23:f8:96:c1:02:8b:b8:ff:84:7f:2c:58:97:4e:5c:17:71:e2:
         23:6e:ce:e4:eb:91:73:2d:f2:69:71:45:ba:8c:f3:47:f4:4d:
         b1:5c:6c:15:86:a4:32:b5:82:fc:d9:71:c4:1b:d8:8d:65:de:
         58:86:1b:c0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIUYVh+2dUy7jYOsxP4DPRRvNIg5pswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjYwNDEwMTYwNzA4WhcNMjcwNDA5MTYxMjA4
WjAzMTEwLwYDVQQDEyg1RTlCMkNFNUMwMjQ3M0YyQTY2MDdDM0Q2OUFGM0MwODJF
MTE2RUU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqJ+9c8OF/eY
QMH424DDBVspDga9bsXZ1V4XvKqmhJUzUGDPOKr0MjGWjQ6bkEQBIOcRrIg19nXq
iWDNTPDrb5aSPahZGytQImUSSrWzeGqFN2QOD8iwgKuXHxvpmEHEe6QGGtivDBFv
AL6Nr/DAuX+hlTjFJpbP+tpvyj3MHyAPu/FBNropVR/s2W0U6uUFBOMXaJ4yUI49
SnTQTQgm6q3lnpJgkqDoksaHub3JsSg+h3WhDI2z+iTi2eb4JIzPFdeIIXE241F/
p5y1LqJBw6Op/K+Pdz3WyKDwMP8GtcIIy+wH9cRh6PFvMz8cyhB95xiayA8bLVq1
+Fthr+O78wIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFF6bLOXAJHPypmB8PWmvPAgu
EW7pMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYI
KwYBBQUHMAuGanJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xP
VURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2EzYTJmMzQzNDJkMzQzODIw
M2QzZTIwMzMzNDM5MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC+v0AADANBgkqhkiG9w0BAQsF
AAOCAQEAWofUlY7iD/kWKIyLi2AblclXBS3bpwTy8tEGOvC0m/Tt/rXUsDQiwWz0
Js+gBp36OHpfjUri+0HLqhN8copQJeiElX5EvmJXc5BWsd+6WyH1JN3CNiy3ifF4
SVSX+y33VWAlYmutkV5PFPxgFXuInrey8un6AnYZPy6thYoGgFDQFgl278WqTLwO
TFLTfUQz8kpM1JyfLfdyubCmDwhQoSzGl7h9gytOgsrGCGYwDGHVfXTZfqf20xnO
zg8rtb4Jub6ab/DAI/iWwQKLuP+EfyxYl05cF3HiI27O5OuRcy3yaXFFuozzR/RN
sVxsFYakMrWC/NlxxBvYjWXeWIYbwA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:10 2026 by rpki-client