Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/XODOTECH/1/32332e3133352e3134382e302f32342d3234203d3e203434353730.roa
File:                     32332e3133352e3134382e302f32342d3234203d3e203434353730.roa (raw, json)
Hash identifier:          535bd71brGEXskT68xoZ05BMsXmlZ96+Uav/V9+gQUo=
Subject key identifier:   53:0B:41:1F:93:8B:A2:FD:C6:A9:0E:B6:B0:65:0C:AB:98:6D:8B:59
Certificate issuer:       /CN=b3bd10ae5f7dca7b61cb39946c59b66b68108a6385efa1caf3
Certificate serial:       5CE1792830890C98C0E5072B5D68B24D08468C8A
Authority key identifier: A8:D2:D3:F3:BC:D7:91:CA:86:42:29:77:5A:01:0A:2B:5B:0B:FE:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7/b3bd10ae5f7dca7b61cb39946c59b66b68108a6385efa1caf3.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/XODOTECH/1/32332e3133352e3134382e302f32342d3234203d3e203434353730.roa
Signing time:             Mon 02 Feb 2026 21:35:17 +0000
ROA not before:           Mon 02 Feb 2026 21:30:17 +0000
ROA not after:            Mon 01 Feb 2027 21:35:17 +0000
asID:                     44570
IP address blocks:        23.135.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/XODOTECH/1/A8D2D3F3BCD791CA864229775A010A2B5B0BFEBE.crl
                          rsync://cloudie-repo.rpki.app/repo/XODOTECH/1/A8D2D3F3BCD791CA864229775A010A2B5B0BFEBE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7/b3bd10ae5f7dca7b61cb39946c59b66b68108a6385efa1caf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7/a515cdae-d0e0-4b7f-80ab-8e73645644c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7/a515cdae-d0e0-4b7f-80ab-8e73645644c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 03:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e1:79:28:30:89:0c:98:c0:e5:07:2b:5d:68:b2:4d:08:46:8c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3bd10ae5f7dca7b61cb39946c59b66b68108a6385efa1caf3
        Validity
            Not Before: Feb  2 21:30:17 2026 GMT
            Not After : Feb  1 21:35:17 2027 GMT
        Subject: CN=530B411F938BA2FDC6A90EB6B0650CAB986D8B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:c1:d7:c1:7d:0c:9e:06:03:b1:03:6a:8e:
                    1b:4c:53:fc:c6:9d:9d:bf:93:72:0c:17:a9:33:f7:
                    f8:b2:60:e1:42:a1:4e:86:8a:78:11:fd:4e:8b:91:
                    aa:7a:32:6b:68:73:4f:91:3f:0e:d1:13:56:5a:0f:
                    b3:b5:d0:0e:6e:48:1b:e9:de:5f:3d:2b:83:15:fb:
                    78:e2:32:0e:58:73:3a:2f:68:98:c2:65:58:9d:17:
                    16:37:88:41:57:13:bf:00:c7:4b:1d:37:83:93:fa:
                    69:f1:a1:bd:91:84:60:ab:87:ed:fa:94:ab:ba:62:
                    0f:fd:a8:40:5e:e5:a0:1e:ad:6e:66:db:0b:3b:aa:
                    26:07:3f:d9:f0:ca:77:8d:63:b4:e2:a9:ef:cb:fa:
                    1b:04:bb:34:59:51:01:a6:b4:a8:6b:60:f4:e0:bf:
                    e6:c3:d4:43:3a:e5:4d:f1:a8:3b:14:28:59:69:a1:
                    a4:69:1d:f7:f2:30:9e:46:be:1d:24:6e:01:39:0a:
                    79:5e:fc:66:73:9f:8f:84:df:a4:89:1b:7c:74:30:
                    0a:2b:b8:92:a5:2a:91:14:7c:78:b7:45:cd:6f:c3:
                    dc:87:33:ac:f3:d2:15:e0:2d:81:99:c5:5e:82:38:
                    45:d0:e5:8d:84:bd:a6:12:b4:7d:79:6f:61:1c:b0:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:41:1F:93:8B:A2:FD:C6:A9:0E:B6:B0:65:0C:AB:98:6D:8B:59
            X509v3 Authority Key Identifier:
                keyid:A8:D2:D3:F3:BC:D7:91:CA:86:42:29:77:5A:01:0A:2B:5B:0B:FE:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/1/A8D2D3F3BCD791CA864229775A010A2B5B0BFEBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a515cdae-d0e0-4b7f-80ab-8e73645644c7/b3bd10ae5f7dca7b61cb39946c59b66b68108a6385efa1caf3.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/1/32332e3133352e3134382e302f32342d3234203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:8e:77:61:17:e8:15:04:2f:ee:8e:e1:95:4a:29:c9:58:
         d0:89:1c:2f:36:f0:a0:b1:26:44:84:f5:d7:7e:10:ed:eb:44:
         68:a5:6a:12:3a:2d:03:fe:eb:7c:f5:38:f1:3a:11:f9:fe:99:
         2b:91:1b:64:a3:62:b6:9e:3a:06:41:eb:a8:2e:eb:d7:7e:f4:
         6e:6e:c3:94:39:e6:11:8d:f2:f0:11:d7:b0:3d:02:8a:e8:89:
         ec:df:32:13:b2:e1:c0:32:bd:00:df:c3:cb:9e:ab:d9:da:13:
         40:59:1c:47:a9:12:34:b9:e8:73:a2:c2:af:44:40:1f:c1:4b:
         af:64:b1:49:a4:36:56:24:4e:d5:9b:7a:c4:b0:f1:34:57:2f:
         1f:77:0d:24:76:77:be:3b:64:d3:de:ba:98:13:63:73:04:e9:
         ee:c3:45:87:ff:88:a2:17:40:50:a4:7c:39:38:79:36:e3:f3:
         66:d7:da:73:65:b1:c0:bb:8c:91:df:0f:1e:82:32:13:a5:1d:
         fe:32:0d:6a:74:aa:10:e1:e8:ba:b6:e8:87:bb:a1:73:28:4b:
         0e:43:44:ce:a3:e9:a0:90:94:53:9e:4a:c8:00:31:2f:94:24:
         5a:c2:58:a4:c3:26:11:ec:be:c4:e4:53:4d:f4:7b:38:b5:99:
         67:30:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:45 2026 by rpki-client