Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS135330.roa
File:                     AS135330.roa (raw, json)
Hash identifier:          wW+Y71ztaxlY5imTosw/yTW4PbxYjfFT1vmIfLz2rMI=
Subject key identifier:   69:9B:E5:0E:7F:83:1C:01:8C:7A:05:D6:4C:D6:D2:C3:BD:FE:3A:C1
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       307BCB8FDCD4AF9C8462F7E2FE98765EEB9C02E6
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS135330.roa
Signing time:             Fri 04 Jul 2025 06:53:05 +0000
ROA not before:           Fri 04 Jul 2025 06:48:05 +0000
ROA not after:            Fri 03 Jul 2026 06:53:05 +0000
asID:                     135330
IP address blocks:        2a05:dfc1:6e00::/40 maxlen: 48
                          2a05:dfc1:6e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7b:cb:8f:dc:d4:af:9c:84:62:f7:e2:fe:98:76:5e:eb:9c:02:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:05 2025 GMT
            Not After : Jul  3 06:53:05 2026 GMT
        Subject: CN=699BE50E7F831C018C7A05D64CD6D2C3BDFE3AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:31:1f:85:df:97:a7:a6:27:51:2e:53:f7:
                    66:df:bf:33:31:0c:5d:c4:be:64:da:d4:79:17:ca:
                    c9:5d:8d:b8:bd:22:3d:6a:d0:11:03:28:57:8a:a4:
                    c4:6f:4d:30:9a:d9:3d:0e:2b:66:a4:3f:1c:8e:98:
                    97:7e:69:e2:90:7a:a4:a6:28:68:36:5c:ba:a3:e5:
                    d0:23:bb:5a:7b:1f:14:bb:2b:90:56:db:d3:0d:e0:
                    1a:28:7e:66:20:54:67:7e:3c:8b:4a:50:72:35:62:
                    e4:f8:d3:51:1a:dc:a2:48:6f:3e:47:e3:17:a2:99:
                    97:b4:b4:48:c2:26:c7:51:69:bf:ed:a0:b3:00:2f:
                    af:ef:bd:a0:cd:58:c6:4c:21:9d:7d:b5:e4:d7:4c:
                    61:9c:fc:19:72:61:10:72:79:39:48:6d:a3:ff:ce:
                    fa:bc:87:da:cb:22:80:85:bf:43:f9:70:ce:9d:a0:
                    1c:5c:fd:e6:77:2d:63:60:0b:b7:e7:8b:e0:9e:fc:
                    82:8d:ad:7b:69:f0:60:9f:52:ed:23:1c:6a:2a:be:
                    7d:a9:2f:da:5d:2f:49:68:f8:6b:de:f7:bd:06:91:
                    38:77:e3:fd:8d:20:65:1b:e2:6a:8e:9e:4e:a9:a9:
                    47:cb:49:c3:d0:ca:b2:ef:40:46:40:8b:12:f4:c3:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9B:E5:0E:7F:83:1C:01:8C:7A:05:D6:4C:D6:D2:C3:BD:FE:3A:C1
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS135330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:12:a5:9c:50:b0:e3:fe:b7:46:26:90:30:36:de:20:ff:d8:
         d4:d5:59:95:16:23:9d:fa:b4:4c:5d:e3:e9:3c:a2:8d:61:3c:
         08:a9:7d:b6:e3:4e:05:1d:71:4b:21:8d:a2:dd:61:87:5c:db:
         e1:99:73:26:0b:b2:3d:8b:29:2a:01:9e:8a:e7:fb:91:52:b5:
         b6:23:eb:a2:8b:e0:2e:05:5c:88:89:97:1d:5f:c5:99:77:64:
         53:a5:68:33:6c:31:11:79:29:8f:86:fa:b4:ec:c1:fb:fe:99:
         a9:97:a9:6b:80:aa:30:fd:24:c5:6c:7e:42:2d:fa:53:2d:60:
         c5:25:97:27:d9:1a:14:98:e4:3e:17:60:4e:57:9e:a1:8e:60:
         f1:49:2c:d2:c4:05:6b:fc:e8:4d:12:1e:b5:41:5f:5e:e1:d8:
         b4:4e:df:5c:f2:03:b9:9d:09:24:33:46:15:2c:17:77:d6:2a:
         34:00:82:3c:ec:b9:16:c2:9d:3e:6a:06:3f:cd:56:ab:b6:82:
         8d:3d:26:d5:ff:3c:5e:59:3e:4e:b0:d0:c7:92:a1:d1:c9:65:
         4e:e9:40:b6:93:b4:c5:35:d5:a8:3e:83:b3:76:14:e8:20:2a:
         f9:69:11:8d:69:0d:65:7b:63:42:db:2f:b0:49:26:f2:70:74:
         2a:bf:8a:d1
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUMHvLj9zUr5yEYvfi/ph2XuucAuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDVaFw0yNjA3MDMwNjUzMDVaMDMxMTAvBgNV
BAMTKDY5OUJFNTBFN0Y4MzFDMDE4QzdBMDVENjRDRDZEMkMzQkRGRTNBQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9TEfhd+Xp6YnUS5T92bfvzMx
DF3EvmTa1HkXysldjbi9Ij1q0BEDKFeKpMRvTTCa2T0OK2akPxyOmJd+aeKQeqSm
KGg2XLqj5dAju1p7HxS7K5BW29MN4BoofmYgVGd+PItKUHI1YuT401Ea3KJIbz5H
4xeimZe0tEjCJsdRab/toLMAL6/vvaDNWMZMIZ19teTXTGGc/BlyYRByeTlIbaP/
zvq8h9rLIoCFv0P5cM6doBxc/eZ3LWNgC7fni+Ce/IKNrXtp8GCfUu0jHGoqvn2p
L9pdL0lo+Gve970GkTh34/2NIGUb4mqOnk6pqUfLScPQyrLvQEZAixL0w67FAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUaZvlDn+DHAGMegXWTNbSw73+OsEwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMTM1MzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwW4wDQYJKoZIhvcNAQELBQADggEBABAS
pZxQsOP+t0YmkDA23iD/2NTVWZUWI536tExd4+k8oo1hPAipfbbjTgUdcUshjaLd
YYdc2+GZcyYLsj2LKSoBnorn+5FStbYj66KL4C4FXIiJlx1fxZl3ZFOlaDNsMRF5
KY+G+rTswfv+mamXqWuAqjD9JMVsfkIt+lMtYMUllyfZGhSY5D4XYE5XnqGOYPFJ
LNLEBWv86E0SHrVBX17h2LRO31zyA7mdCSQzRhUsF3fWKjQAgjzsuRbCnT5qBj/N
Vqu2go09JtX/PF5ZPk6w0MeSodHJZU7pQLaTtMU11ag+g7N2FOggKvlpEY1pDWV7
Y0LbL7BJJvJwdCq/itE=
-----END CERTIFICATE-----
Generated at Sat Jul 5 03:42:14 2025 by rpki-client