Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638303a3a2f33322d3438203d3e203434353730.roa
File:                     326130363a396638303a3a2f33322d3438203d3e203434353730.roa (raw, json)
Hash identifier:          dAOL+uC0v9juoJ1K/O7z4FEfKZCIDQPy8/GeaJxfcOc=
Subject key identifier:   BE:68:D6:B9:BB:7F:1D:56:FD:48:E2:4B:C0:93:EE:9E:CB:9B:78:AA
Certificate issuer:       /CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
Certificate serial:       1244873478DF8E70F8551628435CC6274928510D
Authority key identifier: BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638303a3a2f33322d3438203d3e203434353730.roa
Signing time:             Fri 05 Jun 2026 20:35:17 +0000
ROA not before:           Fri 05 Jun 2026 20:30:17 +0000
ROA not after:            Fri 04 Jun 2027 20:35:17 +0000
asID:                     44570
IP address blocks:        2a06:9f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl
                          rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:44:87:34:78:df:8e:70:f8:55:16:28:43:5c:c6:27:49:28:51:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
        Validity
            Not Before: Jun  5 20:30:17 2026 GMT
            Not After : Jun  4 20:35:17 2027 GMT
        Subject: CN=BE68D6B9BB7F1D56FD48E24BC093EE9ECB9B78AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:89:57:7a:f2:12:18:f4:42:c2:46:78:19:
                    64:82:35:a3:cc:08:d3:2b:4f:ca:f6:9d:04:a6:bd:
                    74:81:f6:b5:d4:f6:c1:fa:07:da:f9:1a:56:c0:04:
                    07:9b:d6:25:d0:df:6a:f7:2f:16:26:55:07:65:d2:
                    0e:a7:8e:b2:a1:8f:22:b8:54:3f:42:14:98:63:37:
                    c6:12:b3:88:c4:07:f9:14:5a:14:3d:89:26:2d:f3:
                    f1:1a:c8:2b:62:6c:bd:8f:f3:35:df:c4:44:bc:2d:
                    47:42:e7:1d:de:dc:5c:c7:ff:24:70:27:47:a1:e0:
                    91:34:49:0b:e5:ff:0b:66:83:8a:fc:3d:12:84:73:
                    cd:4e:de:29:d5:74:bf:20:d8:d5:53:e4:ee:e8:86:
                    c4:8e:5a:0f:d3:54:d6:6d:79:b2:d1:38:24:69:d6:
                    8c:2f:2f:e3:d1:6e:e8:ed:cb:a6:50:d1:7f:a6:b0:
                    32:c7:5f:b0:d2:b9:d5:f6:30:a9:b7:75:5b:ce:96:
                    ea:15:e6:09:fa:c8:e9:5f:8e:c7:1e:1a:d8:e4:cd:
                    0d:50:c3:3e:c0:2b:8e:ac:bf:e7:fa:b6:e5:41:72:
                    29:3c:82:4f:ac:97:3d:96:17:3a:2e:66:5d:2e:ce:
                    08:67:70:4e:28:c8:af:71:63:60:8e:99:87:52:ee:
                    1d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:68:D6:B9:BB:7F:1D:56:FD:48:E2:4B:C0:93:EE:9E:CB:9B:78:AA
            X509v3 Authority Key Identifier:
                keyid:BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638303a3a2f33322d3438203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:a6:cf:69:cc:1f:b9:01:c6:04:85:cb:93:2a:68:7c:11:73:
         30:6d:c0:ae:64:7c:7d:c3:55:03:8c:c7:b2:c7:0d:93:0d:fa:
         71:ce:cf:bf:de:7f:80:ce:15:2b:c5:60:c5:fb:a1:31:f9:12:
         bf:12:19:d7:ad:12:99:84:e4:06:94:5a:dc:45:de:e8:0e:29:
         16:90:20:77:ac:09:e1:0b:7e:33:2a:6b:20:7b:2d:3f:41:4a:
         a0:04:7f:31:e6:8a:45:24:f1:1c:38:b4:c7:5f:6a:34:8b:d7:
         fd:d1:c0:6b:15:32:2f:47:07:ec:43:38:18:a3:a8:b4:09:45:
         3e:33:b9:6e:bd:cb:8a:3f:e5:5f:59:4a:eb:c8:52:cf:70:52:
         c3:5c:da:f7:e4:6b:11:20:16:e9:e3:82:69:6e:b9:7d:0e:09:
         43:ee:a5:31:16:6f:77:d6:59:38:95:72:84:5f:73:e7:57:3d:
         30:5e:4a:eb:d8:f3:fe:e7:11:eb:90:dc:fe:25:b2:d7:5b:ff:
         da:59:0b:b9:4c:7f:69:7b:3e:7c:f9:dc:5e:15:ff:6d:18:b5:
         53:1c:8c:30:94:67:04:98:2f:e1:64:a5:dc:11:6d:0d:d8:9c:
         8e:ef:13:1c:f9:b5:b4:32:54:2c:02:a9:a2:5b:04:88:7f:d3:
         e0:b9:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:47:02 2026 by rpki-client