Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e203438393235.roa
File:                     3136322e3232322e31362e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier:          NHFDdmLlv+r/gOXuVqY94LMlfiTnguk7MVqm0Ycoerg=
Subject key identifier:   34:7C:7D:DA:44:DD:04:81:1A:2B:28:7D:77:8F:D5:65:FC:92:98:C0
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       30781B18F29AD64C5F6402B3C28BF4D15A826D2B
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e203438393235.roa
Signing time:             Thu 09 Apr 2026 00:12:07 +0000
ROA not before:           Thu 09 Apr 2026 00:07:07 +0000
ROA not after:            Thu 08 Apr 2027 00:12:07 +0000
asID:                     48925
IP address blocks:        162.222.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:78:1b:18:f2:9a:d6:4c:5f:64:02:b3:c2:8b:f4:d1:5a:82:6d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Apr  9 00:07:07 2026 GMT
            Not After : Apr  8 00:12:07 2027 GMT
        Subject: CN=347C7DDA44DD04811A2B287D778FD565FC9298C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:02:69:5e:cd:7a:b5:70:4e:4b:8d:e7:ae:61:
                    d5:26:86:53:e8:45:e6:49:5b:14:b4:ec:8c:cb:b6:
                    dc:1f:af:f6:76:08:3f:e4:0f:2b:2d:65:08:a4:1a:
                    9f:f1:b7:4c:46:57:1c:26:02:94:8a:c2:c3:f4:ff:
                    b0:19:5e:ff:7f:c6:2b:f3:86:b3:8e:ba:b1:52:49:
                    ae:7f:e2:24:c7:9c:68:a9:23:5d:da:5b:50:a9:4b:
                    bf:0b:3a:a0:b0:5b:48:6c:0f:d9:fa:92:a2:ad:f8:
                    ac:4d:cd:f9:06:4d:4f:28:0f:1c:22:86:d2:d6:f7:
                    ad:7d:07:20:f6:e6:7d:e8:55:2a:2a:b0:fd:50:f1:
                    59:0e:6b:76:1b:9b:2a:b9:66:57:2d:ac:2e:67:4e:
                    c2:23:03:33:23:f5:93:d5:97:3b:19:7c:37:2b:e5:
                    91:cb:b2:53:02:75:1d:3c:70:71:9e:ca:02:81:c7:
                    29:87:7f:21:0b:bb:18:7c:b9:9b:cf:ca:35:76:7c:
                    15:7d:3d:56:cd:1c:15:cf:fa:98:87:ae:d8:e8:ef:
                    aa:28:7d:e2:2f:4e:ed:61:1a:a1:60:72:45:5f:37:
                    35:39:03:da:d3:95:0d:a5:83:fc:95:0b:48:00:da:
                    52:43:0e:cc:0b:ff:72:31:58:3e:08:af:d4:3d:e5:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7C:7D:DA:44:DD:04:81:1A:2B:28:7D:77:8F:D5:65:FC:92:98:C0
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e203438393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:3b:7d:cd:98:be:d7:2b:21:34:e6:98:17:42:bd:31:16:c3:
         4e:0f:b7:94:ef:03:39:bb:82:e4:9c:6a:f8:ad:b4:20:1f:5c:
         36:20:15:d7:b7:44:a6:27:35:4a:79:fd:5a:96:55:54:9c:6a:
         34:c5:91:89:2f:6a:39:69:76:cb:b9:dc:c1:52:d2:71:82:23:
         1d:d6:9b:a7:f4:42:07:ad:ef:d5:ac:1f:21:73:91:84:e7:1b:
         b1:73:7f:08:69:64:48:2d:8f:27:3d:ad:9e:d6:2f:a7:ac:57:
         e2:44:e1:bb:16:21:8e:22:9c:bf:88:13:ef:02:13:9e:0f:ed:
         c6:c8:6b:c5:89:72:74:7f:61:21:ea:f7:84:0e:eb:24:c2:83:
         a4:bb:88:7d:c4:ab:88:80:50:5d:f6:9f:4e:de:9d:8f:b2:40:
         a7:11:8a:cd:ce:5a:0a:dd:db:e8:dd:8d:f2:9f:a1:57:31:b5:
         3d:4e:07:06:49:7d:c0:3f:1f:ba:0e:52:05:8a:ae:1d:0b:58:
         99:5c:d4:cc:f1:41:ff:89:d9:38:7f:f7:98:53:01:c1:78:12:
         92:4c:e4:c5:98:4c:e6:aa:18:78:5b:19:2f:69:80:7c:3b:49:
         22:b9:f7:89:df:b8:34:eb:73:e7:d8:de:fa:cb:91:4d:b0:0e:
         d5:ff:ad:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:19 2026 by rpki-client