Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31372e302f32342d3234203d3e203438393235.roa
File:                     3136322e3232322e31372e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier:          txIz+U8vOCnMNX+0mX3jTUImU2n9/+NnbdUbUIplfoY=
Subject key identifier:   01:E9:B6:68:48:BE:51:0E:59:09:A0:19:39:79:F8:A8:3C:04:90:9C
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       3644D1E828D89FA4F943990F4889878AD145FDEA
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31372e302f32342d3234203d3e203438393235.roa
Signing time:             Thu 09 Apr 2026 00:12:07 +0000
ROA not before:           Thu 09 Apr 2026 00:07:07 +0000
ROA not after:            Thu 08 Apr 2027 00:12:07 +0000
asID:                     48925
IP address blocks:        162.222.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:44:d1:e8:28:d8:9f:a4:f9:43:99:0f:48:89:87:8a:d1:45:fd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Apr  9 00:07:07 2026 GMT
            Not After : Apr  8 00:12:07 2027 GMT
        Subject: CN=01E9B66848BE510E5909A0193979F8A83C04909C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:bd:72:7b:fd:ee:45:27:e7:bd:5a:46:d1:
                    ef:b6:7f:fb:6c:77:47:18:9d:41:c9:eb:70:91:05:
                    7b:8e:0b:1e:f9:73:50:25:ef:a1:ad:c6:b8:80:16:
                    68:7b:fa:9b:5a:0e:34:a5:1e:93:f8:85:1b:c0:6c:
                    c8:47:e3:68:73:cf:62:56:69:3e:2f:57:f9:1a:f2:
                    1e:2b:6c:ba:e6:6a:df:05:ae:ec:25:61:16:7c:d5:
                    e2:d4:3c:ff:6c:83:71:16:17:fb:db:01:83:0e:4c:
                    9d:ec:e9:6e:ac:8a:3e:5b:bd:bf:95:61:74:c3:00:
                    ed:fd:21:41:4a:fa:de:93:bf:da:c7:da:86:50:65:
                    02:c7:91:4e:2a:94:ad:13:96:11:99:6b:27:b8:d8:
                    58:5c:80:5b:9a:21:05:1f:55:63:c0:a4:ad:0e:31:
                    5e:b9:2f:64:9b:66:81:b8:98:f3:2d:9a:96:ac:23:
                    66:6e:b1:86:dd:c6:4b:13:04:60:cf:53:a8:a6:13:
                    01:ad:7a:9a:62:e4:d0:9a:72:56:0b:a6:e7:2d:b2:
                    3f:cd:c5:e6:71:e3:8b:58:d9:e9:ae:73:d0:23:8f:
                    ca:a4:4d:6d:6a:a6:dc:a5:60:e3:e6:33:a2:b0:be:
                    03:8d:42:c8:ea:b3:f4:80:7e:69:36:82:a2:28:0c:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E9:B6:68:48:BE:51:0E:59:09:A0:19:39:79:F8:A8:3C:04:90:9C
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31372e302f32342d3234203d3e203438393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b1:ee:f2:16:3b:6e:60:3d:4d:fd:4a:17:42:9f:e6:90:2d:
         f6:ba:ae:0d:29:30:35:01:41:f6:55:3b:0b:38:a4:8f:fd:ee:
         5d:a7:0a:61:8e:57:7b:e1:2e:72:43:6b:ab:e4:97:f0:00:f5:
         71:69:8d:00:73:55:32:82:82:0e:6e:5b:81:1e:dd:54:3f:82:
         f3:b9:86:8c:aa:b5:3b:11:c9:7a:5a:b1:0b:1b:ae:2c:71:cf:
         ce:f3:60:0a:40:bd:e8:93:85:b7:ae:4b:e8:b9:23:41:68:ba:
         07:dc:69:a9:97:90:fb:fe:e0:d8:c8:9a:14:89:09:6c:6c:a8:
         14:fa:6e:9e:37:01:9e:31:81:ce:a4:ae:9c:6c:9f:01:8a:c7:
         2c:ca:0b:0e:fc:8e:59:1e:df:a3:fa:b3:d3:d8:fa:d3:a3:96:
         35:fd:10:29:be:59:55:8f:4d:bb:01:e1:3e:f7:6e:24:79:ca:
         19:95:24:52:9b:88:ea:cb:22:fc:9b:92:6e:e9:f9:a6:f9:68:
         2a:33:8a:b4:5d:ee:0e:04:5c:ce:30:5f:53:59:83:87:e4:5b:
         b1:1d:aa:11:b1:12:1e:25:52:19:5e:91:8c:14:b4:a0:fe:6e:
         20:c0:d6:20:3f:d1:3d:87:f3:5f:7a:80:0f:93:b7:77:4b:e1:
         04:45:8e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:15 2026 by rpki-client