Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20333936393938.roa
File:                     3231362e3134362e32342e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier:          0lmPmKq6e0FxZZ9o6SylvrnghNziEkNl8JJFS9L2b9U=
Subject key identifier:   8B:87:46:20:89:22:BA:52:4C:E9:CA:5D:4B:43:EA:11:88:BC:17:B7
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       3B535B5855B09834BD9B7D50FAC955F40DC52869
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20333936393938.roa
Signing time:             Sat 14 Jun 2025 01:46:36 +0000
ROA not before:           Sat 14 Jun 2025 01:41:36 +0000
ROA not after:            Sat 13 Jun 2026 01:46:36 +0000
asID:                     396998
IP address blocks:        216.146.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:53:5b:58:55:b0:98:34:bd:9b:7d:50:fa:c9:55:f4:0d:c5:28:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jun 14 01:41:36 2025 GMT
            Not After : Jun 13 01:46:36 2026 GMT
        Subject: CN=8B8746208922BA524CE9CA5D4B43EA1188BC17B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:72:29:e4:4f:e1:1a:49:4c:b4:2d:ad:7f:
                    8e:d9:8c:86:16:4c:18:ce:03:6d:04:b7:e4:a9:d1:
                    da:37:0c:47:66:8e:f8:4d:3e:47:2e:c3:e9:ae:21:
                    e0:71:dd:4a:09:2f:4a:92:11:2a:99:e0:5a:c5:99:
                    bd:44:d8:67:f0:72:bb:47:c7:23:57:21:32:a5:1b:
                    0e:93:80:69:5b:4e:fd:3f:f5:4a:d6:13:1f:ed:b2:
                    ba:2c:63:30:07:d2:87:b3:65:70:31:85:7d:b1:0f:
                    e2:50:fc:4c:c9:91:34:14:2d:5a:66:df:e1:a4:18:
                    84:55:1a:fd:08:4c:9d:76:41:d5:9d:7a:bb:41:58:
                    ab:17:a4:b5:ce:92:64:78:c9:50:3d:2c:70:4e:53:
                    44:1b:17:0b:5f:08:69:87:da:64:4b:41:88:fd:db:
                    3d:13:38:fb:5a:2a:a0:be:96:fa:ff:85:84:50:3c:
                    ae:49:a9:e1:30:0f:3a:6e:5b:1b:8b:83:4a:95:a7:
                    d9:69:d3:a0:be:e5:c5:e4:4a:bf:b2:af:2b:f9:c7:
                    b6:ab:9e:3f:cc:00:d4:a6:7d:57:cb:da:27:cb:9d:
                    ba:c5:75:55:96:af:ff:1d:f5:43:a2:fc:e3:b3:4c:
                    e0:e8:95:c7:4f:34:f1:62:98:a8:b9:12:9f:aa:18:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:87:46:20:89:22:BA:52:4C:E9:CA:5D:4B:43:EA:11:88:BC:17:B7
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20333936393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:de:5e:e1:ca:a0:da:c8:1d:35:08:05:58:02:f8:9a:b5:e5:
         a0:ec:55:86:ba:07:cf:1a:38:02:6b:9b:93:ce:48:5f:d6:6e:
         7d:ee:15:5b:a8:db:0d:44:03:56:d2:47:fa:88:f4:af:81:a6:
         ac:9f:dc:80:8a:0a:aa:1e:0c:e4:a8:72:e5:e6:1e:cd:ae:07:
         8b:ca:82:37:e2:66:4d:17:99:1f:e2:e3:e3:6f:2a:79:a2:cf:
         de:94:dc:66:bd:a4:6f:6a:bb:a2:d3:01:f8:52:6f:91:8d:84:
         27:01:d1:91:48:af:62:1b:7c:26:c4:c8:19:73:18:c1:31:83:
         2b:05:57:ed:cc:b9:af:2e:31:e5:ab:d7:52:b7:ed:2f:e7:16:
         19:0b:e7:42:82:1b:1b:f7:2b:41:5b:39:a7:55:36:69:b6:82:
         b3:76:6b:26:55:92:06:c6:5e:c4:87:ed:f3:9f:fa:15:9c:59:
         be:67:54:48:f0:a9:83:5c:65:02:b2:44:77:dd:96:52:b2:29:
         76:82:3e:0f:27:25:4a:a4:aa:c0:f4:6b:d9:60:9f:2c:c4:cb:
         55:35:61:01:e3:ac:42:a7:61:4d:3a:56:c8:10:aa:9f:fb:e6:
         ec:10:97:d0:d3:26:61:80:34:0b:a7:21:db:05:26:2c:3d:9e:
         cf:6c:d4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:07:44 2025 by rpki-client