Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197510.roa
File:                     AS197510.roa (raw, json)
Hash identifier:          +sE/m4n7lvlR7A7mnSQ7sj6e0WzbW+UJPB3coesLPXI=
Subject key identifier:   35:6F:F4:79:5A:67:02:2C:11:D6:FC:6F:74:E4:07:08:0E:3D:C4:A0
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5D14F174082855BF205F0553F64E6440816D7F4A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197510.roa
Signing time:             Fri 30 May 2025 07:46:30 +0000
ROA not before:           Fri 30 May 2025 07:41:30 +0000
ROA not after:            Fri 29 May 2026 07:46:30 +0000
asID:                     197510
IP address blocks:        2a05:dfc1:7600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:14:f1:74:08:28:55:bf:20:5f:05:53:f6:4e:64:40:81:6d:7f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: May 30 07:41:30 2025 GMT
            Not After : May 29 07:46:30 2026 GMT
        Subject: CN=356FF4795A67022C11D6FC6F74E407080E3DC4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:75:44:03:da:c5:be:48:83:f5:9c:70:df:
                    89:f8:3d:03:42:d4:0d:26:46:9f:6b:ad:8d:79:22:
                    2a:90:c3:d9:4e:7a:80:6b:6b:13:e2:8a:e0:e7:c3:
                    a6:0d:07:08:19:46:18:d7:77:34:d8:b2:76:df:5c:
                    7a:33:ca:3e:16:34:ec:8a:35:d7:9e:bd:43:40:6f:
                    84:89:48:27:89:9b:0c:40:51:63:22:2c:d6:40:94:
                    4e:1c:7d:5d:c9:04:8c:37:bc:72:d5:7c:e3:76:32:
                    1f:06:57:8e:c8:dc:17:87:fc:16:b7:2c:7d:ad:b9:
                    dc:15:44:b0:43:5f:3d:06:28:39:a5:ab:dd:f9:70:
                    e9:34:03:86:18:15:b2:d8:78:33:98:94:fe:e2:cf:
                    79:4c:e8:fc:23:c2:26:9f:69:a1:f9:80:eb:f0:94:
                    b2:57:fd:f6:4f:7c:9d:a9:a6:04:e9:74:4f:73:fa:
                    03:a5:2b:be:a7:1e:b6:f9:4e:95:71:08:3b:dd:ca:
                    3c:f3:ed:a9:39:60:a5:85:91:99:60:1a:5d:47:97:
                    33:06:82:dd:44:69:a9:78:d9:a1:3e:30:43:77:ad:
                    08:a1:21:fa:1d:b1:4a:3b:db:b6:89:df:77:33:ec:
                    6d:fb:eb:ba:01:93:fc:d5:88:cb:dd:68:ce:7d:81:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:F4:79:5A:67:02:2C:11:D6:FC:6F:74:E4:07:08:0E:3D:C4:A0
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197510.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:7600::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:78:76:50:e3:a6:37:c9:56:d1:20:96:87:87:6a:bd:7f:07:
         78:d9:ee:6f:84:8a:bb:7f:bb:99:e6:82:81:27:61:14:b1:ae:
         ea:21:0a:1b:55:c9:d2:82:49:05:b9:22:6e:01:a5:cf:3d:9e:
         cb:40:62:8c:57:83:f1:8d:d9:0f:6a:36:0f:9c:dd:ef:9e:5e:
         a0:cf:b7:9f:89:6b:59:cf:e7:0e:4d:65:c1:a8:7b:98:a2:81:
         17:17:17:87:0a:da:e2:dc:8f:f2:ed:61:6e:4e:fd:4d:59:2d:
         85:73:aa:bc:06:88:b8:87:a9:07:9b:59:c3:5c:81:eb:8a:91:
         36:83:77:52:01:97:50:3a:2b:4f:e3:4c:ff:5f:c9:eb:13:ad:
         02:ac:23:9e:27:58:b7:33:79:5b:b8:02:c6:d7:b0:57:0b:0c:
         51:df:55:f2:72:bb:98:25:7d:b0:a2:82:68:98:d9:19:79:76:
         37:e6:19:61:be:61:f3:a1:ec:c4:58:41:aa:fb:dc:b1:69:8b:
         c2:6f:5b:e5:85:d3:93:c7:c9:4b:35:d8:cd:32:e1:65:8a:f7:
         54:63:0c:56:58:8a:33:a5:f1:75:e6:75:09:7c:8d:7d:bb:57:
         17:91:2d:f6:b8:d5:2b:e3:a7:47:c0:14:54:70:5b:83:c4:cc:
         9d:1b:df:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:52:14 2025 by rpki-client