Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638373a3a2f33322d3332203d3e203434353730.roa
File:                     326130363a396638373a3a2f33322d3332203d3e203434353730.roa (raw, json)
Hash identifier:          xubPahPGmor8jF4am4yF4D74tMW35vk8FxAmSU3wYx8=
Subject key identifier:   5E:A3:13:08:FB:23:B8:AB:C8:8E:6A:E4:F6:2D:8B:E6:EA:7B:AB:F0
Certificate issuer:       /CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
Certificate serial:       52A339F46B8987D3E1064FB2C2477B174D428F38
Authority key identifier: BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638373a3a2f33322d3332203d3e203434353730.roa
Signing time:             Fri 05 Jun 2026 20:35:18 +0000
ROA not before:           Fri 05 Jun 2026 20:30:18 +0000
ROA not after:            Fri 04 Jun 2027 20:35:18 +0000
asID:                     44570
IP address blocks:        2a06:9f87::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl
                          rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a3:39:f4:6b:89:87:d3:e1:06:4f:b2:c2:47:7b:17:4d:42:8f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
        Validity
            Not Before: Jun  5 20:30:18 2026 GMT
            Not After : Jun  4 20:35:18 2027 GMT
        Subject: CN=5EA31308FB23B8ABC88E6AE4F62D8BE6EA7BABF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:96:f3:e0:72:eb:60:f1:34:33:a2:5c:3a:
                    6e:3c:f7:3c:12:a8:3c:c8:07:be:90:14:af:12:9c:
                    63:4a:92:d1:c6:29:b8:71:85:5e:3d:88:da:26:28:
                    be:e8:42:25:c1:d6:84:74:4e:36:1a:d6:5a:2c:a0:
                    df:44:4e:1a:a2:8f:9a:6a:5e:b2:0c:c4:3f:eb:9a:
                    67:28:7b:ba:76:7b:dc:98:fa:be:74:4b:3c:95:c7:
                    d7:e5:b1:a9:d8:70:da:6f:9a:74:74:de:71:0f:33:
                    f2:1e:57:a9:87:52:ca:fd:7a:ac:58:99:5f:c9:45:
                    85:94:bf:2e:de:1c:aa:96:0e:34:58:0b:d2:78:5a:
                    f8:38:46:6f:75:c2:b2:8d:42:52:11:17:59:d2:66:
                    d9:84:45:f5:07:82:d7:80:90:fe:5c:b1:4f:5a:7d:
                    48:35:e2:0c:d2:fb:10:50:67:89:33:c2:46:ec:f4:
                    fb:3e:b2:35:35:d8:d6:7e:ea:4c:b6:4b:27:73:62:
                    51:71:2d:8c:b2:d2:78:15:8d:1a:04:1a:11:99:00:
                    46:41:25:c4:f3:4b:bd:f3:76:de:d2:52:69:72:10:
                    c3:5b:b0:3d:a5:4d:45:46:1f:16:19:0c:3c:a2:00:
                    e9:a8:a3:99:8b:75:ab:5b:80:55:e8:12:cd:68:61:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A3:13:08:FB:23:B8:AB:C8:8E:6A:E4:F6:2D:8B:E6:EA:7B:AB:F0
            X509v3 Authority Key Identifier:
                keyid:BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/326130363a396638373a3a2f33322d3332203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f87::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:0c:ee:32:b4:d0:6e:bd:dc:b6:03:d7:f9:be:a2:68:25:9b:
         47:7f:17:cb:c0:24:45:bb:cc:99:30:7b:f3:9b:a0:8b:6a:1f:
         a6:34:a1:6c:2b:90:89:97:2a:c5:46:02:50:b6:ac:b8:9b:fd:
         cb:6b:8f:ee:20:13:3b:bd:28:02:35:62:c1:f9:12:58:5b:02:
         21:06:e7:bf:51:20:29:9b:9b:47:c0:bd:87:33:25:62:60:11:
         db:ee:ad:f7:97:2d:1e:c6:d9:e4:6d:3a:e3:34:07:20:e3:cc:
         7a:36:7b:c1:21:c8:79:de:3d:64:64:32:e0:e8:96:23:70:d7:
         69:7a:e1:dc:db:88:7e:4b:50:2d:96:9b:21:13:44:34:5f:99:
         ca:c0:93:52:97:46:e5:10:c5:51:b1:77:1f:f8:58:4f:fb:20:
         25:a0:d3:f5:e8:b2:45:8a:4e:1a:81:93:e5:05:8e:b7:38:49:
         1a:aa:08:52:dd:14:33:8d:7c:cd:df:ae:8e:ee:4e:92:05:53:
         8a:1d:cf:40:ef:2e:26:86:15:9f:92:44:10:c7:bc:04:06:e3:
         79:67:c9:06:c8:fe:2a:f8:4e:24:e3:f5:0b:1c:6d:de:da:86:
         15:ee:a8:d5:67:32:3e:f7:e1:66:c6:e9:70:17:aa:18:b0:f4:
         2b:e1:f5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:15:48 2026 by rpki-client