Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197841.roa
File:                     AS197841.roa (raw, json)
Hash identifier:          Vghz+esB1ICFp8XihBHOPY58JusMqREh3hnYJd+sfw8=
Subject key identifier:   80:E4:29:23:15:57:24:83:2F:6E:39:49:B7:51:3C:41:D5:55:DB:5B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       7CF70660BF6147FEB07156F7DA5800762DA05FDE
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197841.roa
Signing time:             Fri 04 Jul 2025 06:53:14 +0000
ROA not before:           Fri 04 Jul 2025 06:48:14 +0000
ROA not after:            Fri 03 Jul 2026 06:53:14 +0000
asID:                     197841
IP address blocks:        2a05:dfc1:a00::/40 maxlen: 48
                          2a05:dfc1:6b00::/40 maxlen: 48
                          2a05:dfc1:9700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f7:06:60:bf:61:47:fe:b0:71:56:f7:da:58:00:76:2d:a0:5f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:14 2025 GMT
            Not After : Jul  3 06:53:14 2026 GMT
        Subject: CN=80E42923155724832F6E3949B7513C41D555DB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:87:3e:0e:d1:42:e6:b0:42:99:b7:9b:a6:
                    eb:46:21:db:11:aa:74:ed:cd:f3:ed:48:ed:b4:89:
                    fc:b6:16:48:da:e9:ed:a3:63:ad:ed:23:35:dc:5e:
                    e0:f5:e1:87:ff:36:e1:b6:cb:4b:60:c9:a8:5e:aa:
                    db:83:d2:19:45:9e:e8:c2:ed:8d:43:8b:7a:24:45:
                    f1:d4:66:f7:e3:5c:b3:40:fc:ca:e7:52:e8:3e:65:
                    bf:52:0a:49:76:33:45:8b:4e:25:36:32:d2:47:f7:
                    81:e1:e3:94:86:da:03:a7:b1:af:cd:9e:93:44:c6:
                    c9:b8:82:56:15:4f:7b:2a:ed:fb:91:9f:01:ab:0a:
                    e5:4e:fb:0b:b6:e7:1f:15:f8:fd:7e:60:ad:f7:78:
                    a3:78:8e:93:89:b2:d4:54:33:01:45:bd:32:5d:42:
                    de:e0:02:52:85:5e:e9:9b:04:c2:ab:eb:08:11:03:
                    cc:58:a6:35:d4:86:2d:b9:28:60:55:c5:9e:3a:c7:
                    0f:18:dd:18:a7:2f:c9:26:98:d0:ea:ac:07:a1:ce:
                    94:56:ff:46:5d:a2:0c:89:ad:74:68:0f:26:c5:d0:
                    4e:42:54:b8:b9:75:ba:29:0b:a1:13:c3:3c:97:b4:
                    a3:cd:94:49:74:96:67:3a:a1:6d:48:e2:c7:7f:1c:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E4:29:23:15:57:24:83:2F:6E:39:49:B7:51:3C:41:D5:55:DB:5B
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197841.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:a00::/40
                  2a05:dfc1:6b00::/40
                  2a05:dfc1:9700::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:78:63:c9:3f:b0:e3:39:1f:ec:cc:68:2a:f6:14:2a:52:b0:
         3b:1c:63:70:aa:5f:7b:ea:42:14:e4:49:91:52:09:d3:b1:3f:
         a2:50:ff:16:bb:b3:7f:ff:c0:aa:90:3c:f5:fc:22:ed:db:0d:
         7f:46:55:0a:c3:7f:10:af:84:65:76:22:11:0c:d2:3e:26:c9:
         73:69:d7:56:01:ef:e6:b2:0a:3d:f4:b3:b9:dc:4b:ee:2c:6e:
         c3:50:7b:bb:19:de:4a:ef:1a:97:72:8d:e7:cc:49:8d:98:78:
         bb:ea:5e:05:5a:2e:e5:1b:f6:2f:48:bf:f7:c0:f7:76:a5:c2:
         71:a6:2b:05:88:d5:78:f2:9f:40:5c:2d:d0:47:a6:cb:b8:c7:
         56:a0:f0:0c:c6:67:f9:86:dc:41:42:4e:8b:1c:1f:b0:37:5a:
         6b:98:e1:ec:5c:2a:d3:8c:4e:33:78:f8:3f:2c:22:49:6d:f0:
         8c:61:03:65:a9:21:5c:e7:f3:f5:be:25:b1:b1:f0:73:b8:66:
         fc:f5:d6:7f:29:47:20:1b:62:d7:70:9c:cc:65:27:c1:42:60:
         8e:4d:cf:44:a3:b2:25:a1:5f:57:05:dc:2c:6a:e8:55:c0:3d:
         b3:97:b5:1e:7d:b4:e4:e7:b7:6e:68:bc:2f:b3:c5:38:9a:80:
         00:f7:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:03:31 2025 by rpki-client