Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197815.roa
File:                     AS197815.roa (raw, json)
Hash identifier:          FlVlFJlEW+/0Vx8bPJu1RdWUtluYjP+2gK2Scz/kO+I=
Subject key identifier:   1B:42:77:F4:A3:7F:D1:A4:9E:11:79:EF:C5:23:36:6A:3F:2A:87:60
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       595B8E6A02278668C02488DC64B592DAC3A4F27B
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197815.roa
Signing time:             Fri 04 Jul 2025 06:52:54 +0000
ROA not before:           Fri 04 Jul 2025 06:47:54 +0000
ROA not after:            Fri 03 Jul 2026 06:52:54 +0000
asID:                     197815
IP address blocks:        2a05:dfc1:6800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5b:8e:6a:02:27:86:68:c0:24:88:dc:64:b5:92:da:c3:a4:f2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:47:54 2025 GMT
            Not After : Jul  3 06:52:54 2026 GMT
        Subject: CN=1B4277F4A37FD1A49E1179EFC523366A3F2A8760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:9a:b1:11:e2:4a:8e:6a:c9:a4:f2:64:3f:
                    f7:37:ee:f9:ed:94:6c:ce:94:4b:40:0a:ba:cf:f6:
                    65:20:a8:cf:e8:61:79:40:c0:d3:75:4b:d2:a2:1c:
                    b4:dc:a5:d3:2b:e5:dc:2e:47:bb:d7:69:88:6c:f0:
                    e8:67:50:d0:a6:f0:1b:cc:d4:4b:a2:d5:e0:96:0f:
                    61:26:7b:64:30:65:10:1e:07:f0:56:0f:21:1a:87:
                    f6:05:7f:4f:a9:06:59:61:bc:4a:d0:d6:e5:40:34:
                    a1:3b:f8:0b:79:09:53:83:10:a6:0e:68:b7:44:0b:
                    12:5b:04:10:b5:a5:3d:ac:be:4f:b8:02:1b:14:82:
                    47:b2:2e:1c:37:8a:58:4b:85:e4:30:b0:e1:75:cd:
                    a2:3b:ee:be:23:93:68:b5:c0:b8:69:f2:a7:30:eb:
                    96:fd:b5:f6:47:c8:68:95:ae:fc:81:61:bb:50:4d:
                    03:fc:d4:39:a6:8f:1a:7e:7a:de:d9:e0:0f:0a:b5:
                    f4:50:5b:8d:3a:00:33:b8:9d:fb:ba:d4:7d:95:27:
                    15:bf:cd:05:d2:2a:4e:8c:15:c9:3b:1e:8c:cb:b3:
                    a2:af:92:94:ca:a8:99:08:85:79:0b:db:33:95:b8:
                    6e:2f:65:7d:b3:63:d3:12:ec:d9:6e:da:48:ae:bc:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:42:77:F4:A3:7F:D1:A4:9E:11:79:EF:C5:23:36:6A:3F:2A:87:60
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197815.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:39:a6:98:19:22:fa:e7:84:9d:4c:d1:d4:5b:45:c9:71:
         c1:cb:78:5a:12:75:31:cb:91:67:5d:42:91:79:98:e5:02:96:
         80:99:06:1d:83:b0:39:e3:2d:01:d3:43:61:70:20:44:96:28:
         f2:3b:0b:89:ba:55:03:08:fc:24:7e:29:b9:c1:eb:08:08:ca:
         22:05:83:bb:46:83:37:3e:b8:33:30:33:33:dd:e2:e6:2a:56:
         a3:28:d5:97:e8:58:79:ce:b9:1c:6c:b0:76:ff:46:31:c6:2f:
         94:d7:08:7c:5a:0e:84:de:00:04:65:d1:0c:01:85:c1:f7:2c:
         ef:d4:94:13:bd:8e:06:75:31:16:69:5f:98:a8:00:5c:89:31:
         60:f0:06:e9:04:38:01:5e:24:8d:f8:8d:05:9b:f9:b6:03:7a:
         5a:f5:26:0e:99:23:d4:5f:b8:45:22:31:a3:b5:db:8c:df:b1:
         20:34:8f:e5:fe:af:58:aa:23:1d:3e:b4:0a:a4:17:d9:aa:77:
         8d:b6:a2:c7:3e:64:ed:48:29:0b:d9:13:c1:a5:63:bd:70:6a:
         50:cd:6e:70:df:35:df:a6:eb:01:d7:09:15:9a:a3:26:8f:f2:
         7f:e4:07:50:d4:df:c0:23:4f:b7:a4:9f:eb:49:60:5d:be:d5:
         f1:86:77:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:49:40 2025 by rpki-client