Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa
File:                     3231362e3134362e32342e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier:          0M3z+69sNp5u9ZKzMpOQLj2Hf3203INbvkCY71XrBhg=
Subject key identifier:   68:20:BD:2A:49:9C:67:B3:A8:B5:D3:7C:D5:36:AE:DC:90:89:8E:55
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       6BF4F2493B0AF62418C6E94B0A8B4DE828F763DA
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa
Signing time:             Thu 09 Apr 2026 00:12:07 +0000
ROA not before:           Thu 09 Apr 2026 00:07:07 +0000
ROA not after:            Thu 08 Apr 2027 00:12:07 +0000
asID:                     48925
IP address blocks:        216.146.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:f2:49:3b:0a:f6:24:18:c6:e9:4b:0a:8b:4d:e8:28:f7:63:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Apr  9 00:07:07 2026 GMT
            Not After : Apr  8 00:12:07 2027 GMT
        Subject: CN=6820BD2A499C67B3A8B5D37CD536AEDC90898E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:ba:71:ab:63:e9:e1:b5:bc:2a:51:ac:66:
                    f4:01:e2:26:07:de:dd:ba:93:5a:12:f3:c3:7c:d9:
                    79:ec:60:23:ca:0e:c4:d2:63:a1:e0:a1:14:c3:c4:
                    5b:28:e1:59:0a:0c:d1:65:a9:84:2e:66:8a:f2:f6:
                    5c:68:85:30:b4:07:e9:e0:a2:ca:b0:d4:5c:8f:c4:
                    ff:b4:0c:91:b7:14:48:73:8a:29:59:ff:f4:f5:97:
                    95:77:2d:33:dd:40:6c:7e:e3:98:07:a1:01:bf:31:
                    20:06:93:b5:e5:17:b5:69:40:d1:46:ee:80:12:05:
                    00:46:3a:63:48:c7:39:73:bf:a5:e1:16:4b:46:96:
                    49:95:38:c0:51:4d:5f:76:77:61:67:cf:f6:37:40:
                    90:0c:b6:84:b3:e4:17:b2:87:e0:1e:8b:ae:a0:49:
                    23:2f:ce:7c:a4:28:1d:64:06:94:07:96:92:4f:78:
                    12:94:03:65:76:49:e1:91:07:c8:24:18:34:7e:d5:
                    b6:bb:49:19:59:aa:68:9b:5c:34:7e:8f:cc:c8:18:
                    34:21:39:c8:c3:eb:5b:de:3b:ea:ec:f9:07:d8:e8:
                    a0:d0:b2:e9:dd:45:64:46:28:51:02:55:b7:53:83:
                    34:ab:db:fe:0c:cd:4c:0e:b5:02:3e:13:56:4a:a0:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:20:BD:2A:49:9C:67:B3:A8:B5:D3:7C:D5:36:AE:DC:90:89:8E:55
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e203438393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:bd:67:fc:d6:6c:bd:fc:fb:01:03:02:61:b8:0e:a0:56:
         bb:18:4e:0c:ba:00:c7:4f:7c:a5:9e:bb:3a:e6:a6:7b:28:78:
         bf:cf:e0:b5:1c:a0:63:58:22:66:2c:44:eb:2c:70:62:08:fc:
         9f:e5:f3:80:fa:92:31:86:b6:39:c4:d6:70:7d:6a:27:fc:a2:
         c8:19:09:6f:a7:29:64:ab:73:4e:85:f1:53:91:1d:b1:42:ed:
         2b:88:54:06:08:77:c0:00:e8:fb:34:d9:12:4c:15:4b:f6:f7:
         fc:3c:a2:9a:b1:d0:ad:28:d0:67:74:09:c4:9e:d2:2e:3f:60:
         07:20:66:54:cc:be:b4:d1:f2:7b:0d:ee:72:34:18:8d:6e:e5:
         47:6a:84:61:12:9f:58:b5:b4:8d:c1:aa:9b:68:55:f4:bc:48:
         37:8b:4c:b8:63:fe:2b:e8:59:f1:65:4b:d2:1e:9d:1a:4f:e2:
         8a:e8:1f:1a:23:f2:f0:45:ff:02:ed:29:7d:55:7d:61:6f:9f:
         07:2c:ff:1d:96:1f:e5:3e:4b:e4:2d:f4:ce:86:94:10:8d:be:
         89:70:7f:75:82:2f:d9:92:5d:fb:78:4a:06:eb:35:7e:5d:72:
         b1:c6:7c:ab:5f:f4:c2:f5:66:a6:50:1e:60:44:47:a2:0f:37:
         76:15:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:57:20 2026 by rpki-client