Route Origin Authorization

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e20393234.roa
File:                     32332e3133342e38382e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          mPZv/lQWCqvO75hTtEfKw11/GmjVhDGwCqaJyskta5s=
Subject key identifier:   09:9F:EC:F5:E0:80:FE:5C:B0:EC:FA:49:ED:7A:CD:3E:24:E5:B4:CE
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       0FD2712BC002F7C744E877141F6C3E1B9B926684
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e20393234.roa
Signing time:             Wed 26 Aug 2026 23:12:57 +0000
ROA not before:           Wed 26 Aug 2026 23:07:57 +0000
ROA not after:            Wed 25 Aug 2027 23:12:57 +0000
asID:                     924
IP address blocks:        23.134.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d2:71:2b:c0:02:f7:c7:44:e8:77:14:1f:6c:3e:1b:9b:92:66:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Aug 26 23:07:57 2026 GMT
            Not After : Aug 25 23:12:57 2027 GMT
        Subject: CN=099FECF5E080FE5CB0ECFA49ED7ACD3E24E5B4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:05:3c:5c:4f:ec:90:b5:45:cb:be:35:95:
                    3c:33:89:2d:b4:20:4b:6b:d3:39:d3:db:0c:9b:99:
                    04:cd:2a:fa:c8:0c:76:28:e0:64:5e:68:32:86:23:
                    d2:e9:1e:a1:b6:15:52:79:07:f1:bc:b4:c7:99:6c:
                    1a:e8:26:c0:31:ae:d4:dc:21:86:d5:b8:bd:41:c6:
                    ed:5b:0f:f2:bb:28:d5:af:b9:15:fb:46:b1:9d:26:
                    8e:1d:eb:f4:14:a2:d7:b7:61:e7:a8:29:01:85:ef:
                    97:eb:14:d9:16:07:ce:9f:a8:80:41:2d:0f:d7:f6:
                    c2:e5:58:fe:78:93:e6:ee:fc:45:ad:41:91:fe:d1:
                    6b:9d:22:70:a0:e9:4c:e7:ae:b6:a3:b5:c4:e9:4d:
                    7b:ce:da:cb:af:f3:98:85:1b:3e:2e:29:9c:10:cb:
                    42:7f:23:3f:ed:3d:47:21:69:cc:41:d1:4d:6a:2c:
                    61:e5:ec:ef:bf:6c:92:d7:ae:1d:e2:d8:11:25:94:
                    20:50:97:58:8d:1c:06:ab:b9:2b:6f:89:77:a8:ec:
                    d8:3e:93:9b:e5:50:c3:4a:dc:53:af:74:f2:54:91:
                    f3:1b:3d:79:92:72:24:54:26:03:69:75:4e:d0:9d:
                    16:5a:1c:93:bb:9a:c5:74:36:ec:93:bf:9b:f7:67:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9F:EC:F5:E0:80:FE:5C:B0:EC:FA:49:ED:7A:CD:3E:24:E5:B4:CE
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:72:9d:63:4c:cf:bf:6d:4c:6f:9a:8d:4d:c5:4f:84:3c:b2:
         14:86:12:98:05:14:c9:d5:a4:16:e1:9e:95:1b:ec:90:d3:65:
         76:6d:48:f1:1c:e3:39:f0:e4:b2:35:d7:c3:47:7c:59:c5:cd:
         e2:25:aa:e7:bf:56:c3:14:03:3b:37:02:b6:e4:57:61:c9:ac:
         d3:00:14:53:cc:3c:48:31:5c:9c:8d:1e:e5:9e:95:64:42:89:
         45:99:c3:5e:1f:9a:56:14:b0:db:47:dc:55:71:32:82:09:60:
         c9:14:f4:20:18:36:1a:e3:89:b3:10:5e:99:94:99:f3:63:ac:
         40:e4:03:d3:ea:15:99:d5:ee:fa:2e:9b:87:52:24:7c:d1:ec:
         9d:43:3b:99:5c:b1:81:01:e1:92:82:97:ab:22:89:8a:3d:9f:
         b1:46:55:f0:30:f9:c9:63:c2:59:da:a0:26:4a:50:7d:c1:04:
         ca:70:f5:8c:32:e0:18:8a:11:28:58:6e:5e:7f:f2:4d:54:23:
         10:bf:9d:9b:3c:a6:c6:63:82:74:78:6e:13:db:5e:2d:48:a3:
         e7:56:b4:28:ef:e1:bf:b5:de:31:e0:b4:4a:55:53:9f:64:1a:
         e5:8b:3e:bc:64:4a:da:8f:da:e2:95:dd:d4:4a:b0:8c:08:6b:
         be:61:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:55:13 2026 by rpki-client