Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa
File:                     323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa (raw, json)
Hash identifier:          NFT0n2UVUrvgwEeYDA6LReuKL+BxZkLoivQxJYKh1Fs=
Subject key identifier:   4F:F5:40:BB:B0:FE:C4:2F:3F:4D:96:B2:EC:EB:BD:E2:B4:08:F2:1A
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       4DB771EF0A2B4416E77F8ABE06AC849C845853B8
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa
Signing time:             Wed 16 Sep 2026 16:13:00 +0000
ROA not before:           Wed 16 Sep 2026 16:08:00 +0000
ROA not after:            Wed 15 Sep 2027 16:13:00 +0000
asID:                     200226
IP address blocks:        2602:fafd:fb5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b7:71:ef:0a:2b:44:16:e7:7f:8a:be:06:ac:84:9c:84:58:53:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Sep 16 16:08:00 2026 GMT
            Not After : Sep 15 16:13:00 2027 GMT
        Subject: CN=4FF540BBB0FEC42F3F4D96B2ECEBBDE2B408F21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:04:81:a9:50:eb:26:92:c4:d8:70:d1:8e:
                    60:06:59:06:c4:9e:e8:04:5b:df:56:47:ac:77:d0:
                    c5:24:7c:2f:63:48:9a:35:ff:57:68:a3:89:1c:69:
                    13:79:b2:74:6d:8d:5d:02:85:bf:9b:22:e6:a0:33:
                    1e:e5:8d:97:ff:77:97:ed:5e:9d:56:f1:bd:b0:96:
                    43:4f:3b:85:5f:f7:8e:51:64:dd:06:b6:53:2a:d5:
                    71:80:f9:0d:45:00:33:29:5f:ae:52:9b:4e:0a:01:
                    96:24:d1:9e:17:2b:76:f3:92:0a:0e:11:d4:a3:23:
                    7d:c5:a7:b6:83:b3:87:65:ab:10:6b:67:df:5b:ba:
                    67:e1:c4:7b:77:ab:6e:f0:46:10:f3:0a:ac:15:21:
                    51:a4:a5:d3:26:8b:a9:71:80:07:20:97:85:6a:3e:
                    42:ce:a7:84:31:3b:19:77:ba:cc:75:32:8e:59:3e:
                    b1:99:cb:5e:c7:9a:80:04:58:4b:36:12:a4:51:4f:
                    2c:b4:52:bf:e4:b3:82:c3:1f:09:0c:65:bc:3e:17:
                    9f:e7:28:0b:6c:5e:ba:90:f9:c7:c4:c9:6e:00:fc:
                    ae:c4:45:ed:9f:fa:52:fe:e9:65:d5:65:b4:19:c2:
                    78:76:3f:d1:f6:d9:2d:a2:d6:00:b9:a8:94:1b:65:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F5:40:BB:B0:FE:C4:2F:3F:4D:96:B2:EC:EB:BD:E2:B4:08:F2:1A
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662353a3a2f34382d3438203d3e20323030323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb5::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:d5:5b:ff:19:70:08:f4:fb:1e:6e:61:45:9e:7b:d6:23:52:
         de:0f:9d:c9:78:33:74:82:ab:67:a0:00:18:77:89:e6:ed:91:
         0f:fb:7f:ef:0b:64:bf:a0:3e:a5:4f:1f:49:25:64:2c:f4:1f:
         3a:fe:b9:b5:5c:f1:16:e8:3d:e9:94:81:0c:f5:13:94:79:02:
         60:67:53:ea:65:ff:4e:21:fe:fe:19:97:a2:a6:62:cb:c7:30:
         eb:5d:9f:ac:fa:c3:7b:47:44:11:7a:ce:4c:e2:b6:af:61:85:
         a7:ac:d5:5d:cb:c1:da:a6:21:fb:f0:69:b4:b1:cd:df:56:b4:
         4a:ba:af:56:a2:99:5b:f1:16:0a:76:74:60:c5:e7:09:56:c5:
         4a:70:f5:43:81:b5:d9:27:1a:9a:2b:02:0d:f7:1f:7a:6b:f0:
         d1:5c:c3:78:4d:be:e4:d0:59:58:76:6d:ad:b2:42:c7:81:5c:
         c2:d0:68:ac:49:e4:9e:96:14:23:49:94:93:18:28:1c:f9:d0:
         26:52:89:cd:82:4f:3f:0f:9d:8a:6a:45:a2:ef:f9:a4:da:da:
         64:9a:40:8e:7d:b1:96:d3:aa:25:a0:2a:44:d0:86:50:19:a0:
         15:46:66:70:38:0f:35:ab:c4:5a:61:89:c5:9f:95:40:a9:1a:
         e9:eb:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:59:53 2026 by rpki-client