Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS139311.roa
File:                     AS139311.roa (raw, json)
Hash identifier:          7pZu2nm7NFLiyn0a5+E/BoZSE3mRqPngKElK8MxYHUA=
Subject key identifier:   54:E8:D7:B7:CF:26:DE:11:92:07:09:72:17:37:48:11:A8:B2:C8:85
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       0F14D5810A05013F50E4D4A2D0AEBBF52115EAF0
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS139311.roa
Signing time:             Fri 04 Jul 2025 06:53:11 +0000
ROA not before:           Fri 04 Jul 2025 06:48:11 +0000
ROA not after:            Fri 03 Jul 2026 06:53:11 +0000
asID:                     139311
IP address blocks:        2a06:9f81:5200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:14:d5:81:0a:05:01:3f:50:e4:d4:a2:d0:ae:bb:f5:21:15:ea:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:11 2025 GMT
            Not After : Jul  3 06:53:11 2026 GMT
        Subject: CN=54E8D7B7CF26DE119207097217374811A8B2C885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:0b:df:0d:d5:bc:4d:0b:8e:26:51:f0:a3:
                    30:26:ee:3e:74:46:7a:66:39:54:65:4a:81:6d:7a:
                    35:20:21:a4:99:1f:da:99:1d:1c:a6:3a:77:34:19:
                    fc:56:a4:52:80:a9:bf:35:86:7b:69:69:7c:1f:04:
                    eb:1a:9a:7b:2a:82:bf:74:ae:81:3c:04:66:e0:5f:
                    26:a1:16:00:e7:45:4c:4f:6e:cd:22:f5:fa:c8:18:
                    8c:c9:ad:18:65:a1:5b:f4:04:f1:5f:89:d7:41:06:
                    ee:a5:82:ce:4f:ee:0a:fe:04:06:f6:8a:65:c4:e1:
                    62:f1:5f:51:b4:dc:32:99:ad:21:27:84:af:2a:2b:
                    2c:ac:7d:91:fe:36:00:76:e8:a9:fe:be:53:79:ea:
                    21:00:f0:4c:44:3f:aa:57:bd:4c:6a:43:43:a1:0b:
                    14:26:02:55:cf:85:bc:94:d5:a0:eb:ac:bb:3a:bf:
                    ea:5b:d4:f7:38:06:9d:15:80:e6:6a:a8:d7:88:32:
                    28:06:16:60:90:29:12:a8:6c:bf:89:e7:2d:bb:e7:
                    61:c2:58:68:72:cd:5e:55:37:8b:78:29:83:76:10:
                    ff:ac:3b:8b:91:72:dd:30:61:77:91:ae:f4:1b:8f:
                    31:9a:6c:08:9b:73:ac:09:95:66:71:37:07:87:83:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E8:D7:B7:CF:26:DE:11:92:07:09:72:17:37:48:11:A8:B2:C8:85
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS139311.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:f5:33:2f:4f:72:42:45:d9:70:bd:9b:6a:4a:e2:9b:21:
         7b:a3:90:3d:87:d4:62:ce:1f:e4:25:0f:75:a2:c8:34:36:fd:
         d4:57:dd:6e:22:b1:4b:3b:2e:37:ac:3b:7c:84:a2:1d:37:fa:
         72:9e:07:fe:86:8f:20:7f:ca:d8:c6:81:af:e8:a0:21:93:1c:
         f1:f7:72:9a:69:dc:37:fc:88:b3:3f:e1:d8:65:39:6a:c6:9f:
         53:f0:50:a6:bb:db:bd:e3:3f:23:06:47:cc:32:bf:4c:4d:dd:
         f2:16:72:76:4e:19:b6:fd:a7:e6:22:1a:84:44:dc:aa:7b:01:
         96:52:6a:51:c2:cd:e2:c6:7e:cf:98:60:29:cc:26:69:ec:99:
         65:93:0d:70:9a:a1:a4:94:45:46:aa:df:70:9b:14:f0:97:e5:
         36:fa:ed:17:fd:20:10:99:b8:bd:8f:65:c0:1f:54:75:79:35:
         55:34:18:10:ad:e5:b4:7f:2f:ed:d4:f1:7d:94:7d:a5:69:bd:
         69:7a:12:57:98:56:06:47:6a:96:58:27:41:d6:ff:29:ce:fa:
         e7:b9:a9:d3:6a:bb:d8:63:d7:5c:cf:85:7e:da:ac:c3:be:58:
         f6:8c:a1:ca:95:3b:9f:78:fe:f9:17:a0:ce:e0:36:74:8e:d5:
         ab:79:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:47:28 2025 by rpki-client