Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199762.roa
File:                     AS199762.roa (raw, json)
Hash identifier:          Rm5X120ojSg2TdScsCbQ6vBK1g11Pp771scA/B8+eQg=
Subject key identifier:   82:D6:02:1B:C8:54:40:EA:F4:95:86:1B:E3:54:57:DD:4B:6C:90:C3
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       14208D53B95D8341DAFAA439D54347CEBB32599D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199762.roa
Signing time:             Fri 04 Jul 2025 06:53:09 +0000
ROA not before:           Fri 04 Jul 2025 06:48:09 +0000
ROA not after:            Fri 03 Jul 2026 06:53:09 +0000
asID:                     199762
IP address blocks:        2a0a:6040:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:20:8d:53:b9:5d:83:41:da:fa:a4:39:d5:43:47:ce:bb:32:59:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:09 2025 GMT
            Not After : Jul  3 06:53:09 2026 GMT
        Subject: CN=82D6021BC85440EAF495861BE35457DD4B6C90C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:2a:27:6d:93:67:e9:d3:0c:50:7c:d3:62:
                    18:2c:bd:0f:a9:20:b6:37:72:00:18:2d:cc:9f:f2:
                    70:0f:c9:97:d7:b8:ea:14:4c:de:a3:be:f5:b8:9f:
                    83:33:70:19:b2:59:89:31:08:e2:55:82:08:68:9e:
                    78:9d:fe:fe:44:be:31:1a:0f:15:06:e0:be:7e:95:
                    27:6a:b6:12:f4:7e:eb:6c:bd:23:52:3e:4d:39:3a:
                    6f:bc:2c:13:30:e8:49:5c:aa:25:c7:34:15:2c:7c:
                    f6:46:42:1e:9a:5f:56:b3:08:ae:d8:89:a9:c8:f0:
                    8b:53:ca:7d:c3:fa:e1:13:29:e7:d0:7c:43:24:71:
                    cc:8e:7f:f7:98:6c:c7:e5:1b:53:59:97:fc:5d:f7:
                    fd:37:fc:1c:85:3e:a0:4a:a7:e1:a8:29:9d:f8:5f:
                    1c:5c:47:a2:22:e5:5c:36:61:6f:49:b6:87:7b:3c:
                    ed:2c:0f:bf:fb:8a:fa:e4:54:7e:c5:92:f7:44:84:
                    eb:75:73:f1:19:52:2e:85:b0:73:76:84:ab:39:96:
                    49:4c:eb:7c:2b:1c:ce:ac:c1:65:e8:50:71:ae:80:
                    91:1a:a6:29:f9:63:6b:02:a8:43:10:4b:9b:f2:25:
                    4c:76:01:ad:12:6e:c4:1f:3b:94:af:47:6f:8a:f3:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:02:1B:C8:54:40:EA:F4:95:86:1B:E3:54:57:DD:4B:6C:90:C3
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:90:70:4f:bd:fd:07:9e:0a:19:18:c9:f0:0c:c0:7a:2f:b1:
         96:48:85:fa:e2:3f:47:ff:db:26:77:c4:30:4a:7e:88:12:31:
         ce:1a:12:1a:c9:84:34:e5:9f:b0:c6:ae:d8:c3:98:a7:78:db:
         8c:e0:02:ed:33:31:4c:da:db:41:28:75:18:35:79:46:c7:13:
         c3:4d:6b:ba:97:08:2b:3d:b7:ea:54:4d:48:70:be:8f:1a:6d:
         0c:21:9a:c5:bb:7d:18:ed:8f:e4:97:59:f4:77:21:24:92:d5:
         4a:d9:2f:cf:ac:51:fb:f2:29:97:ea:d3:3f:a5:bf:0a:91:ee:
         f4:83:14:11:4e:15:6d:f6:ab:29:ca:94:16:18:ae:4e:ef:7f:
         0f:2f:c8:e9:b8:53:ab:6b:42:49:ce:d2:ee:8f:b5:23:30:f6:
         e1:92:14:bd:8f:24:d7:b2:22:2e:ed:31:8d:1e:69:e8:71:3e:
         16:1f:12:21:6d:59:12:20:91:39:bf:a5:c0:0b:2c:fa:91:f6:
         53:d9:cf:5e:ed:f0:58:89:44:74:ca:55:e5:d3:b1:cf:c8:41:
         d1:21:d3:41:c3:5f:c3:43:33:bf:5d:d8:5b:70:bf:8e:70:8f:
         51:8f:77:68:e9:b7:29:bb:0b:1a:9a:c5:cc:f2:bc:ec:2e:da:
         17:4f:b5:d2
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUFCCNU7ldg0Ha+qQ51UNHzrsyWZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDlaFw0yNjA3MDMwNjUzMDlaMDMxMTAvBgNV
BAMTKDgyRDYwMjFCQzg1NDQwRUFGNDk1ODYxQkUzNTQ1N0RENEI2QzkwQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfoConbZNn6dMMUHzTYhgsvQ+p
ILY3cgAYLcyf8nAPyZfXuOoUTN6jvvW4n4MzcBmyWYkxCOJVgghonnid/v5EvjEa
DxUG4L5+lSdqthL0futsvSNSPk05Om+8LBMw6ElcqiXHNBUsfPZGQh6aX1azCK7Y
ianI8ItTyn3D+uETKefQfEMkccyOf/eYbMflG1NZl/xd9/03/ByFPqBKp+GoKZ34
XxxcR6Ii5Vw2YW9Jtod7PO0sD7/7ivrkVH7FkvdEhOt1c/EZUi6FsHN2hKs5lklM
63wrHM6swWXoUHGugJEapin5Y2sCqEMQS5vyJUx2Aa0SbsQfO5SvR2+K8+2/AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUgtYCG8hUQOr0lYYb41RX3UtskMMwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMTk5NzYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDAwDQYJKoZIhvcNAQELBQADggEBAH+Q
cE+9/QeeChkYyfAMwHovsZZIhfriP0f/2yZ3xDBKfogSMc4aEhrJhDTln7DGrtjD
mKd424zgAu0zMUza20EodRg1eUbHE8NNa7qXCCs9t+pUTUhwvo8abQwhmsW7fRjt
j+SXWfR3ISSS1UrZL8+sUfvyKZfq0z+lvwqR7vSDFBFOFW32qynKlBYYrk7vfw8v
yOm4U6trQknO0u6PtSMw9uGSFL2PJNeyIi7tMY0eaehxPhYfEiFtWRIgkTm/pcAL
LPqR9lPZz17t8FiJRHTKVeXTsc/IQdEh00HDX8NDM79d2Ftwv45wj1GPd2jptym7
CxqaxczyvOwu2hdPtdI=
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:03:29 2025 by rpki-client