Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200105.roa
File:                     AS200105.roa (raw, json)
Hash identifier:          VB5mcyZLMBbsnfHlWNiIq5ZFVAlsilDS785Jzxd52iI=
Subject key identifier:   ED:EA:FA:C3:3B:42:A1:63:2E:53:C5:3A:46:3F:0F:3B:62:E5:2A:EA
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       58C95F6F0A0C01132FA52DA354E27FE01D1A56A4
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200105.roa
Signing time:             Fri 04 Jul 2025 06:53:02 +0000
ROA not before:           Fri 04 Jul 2025 06:48:02 +0000
ROA not after:            Fri 03 Jul 2026 06:53:02 +0000
asID:                     200105
IP address blocks:        2a0a:6040:5300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c9:5f:6f:0a:0c:01:13:2f:a5:2d:a3:54:e2:7f:e0:1d:1a:56:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:02 2025 GMT
            Not After : Jul  3 06:53:02 2026 GMT
        Subject: CN=EDEAFAC33B42A1632E53C53A463F0F3B62E52AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:9f:07:e6:4d:f0:96:e2:b3:09:90:08:f1:
                    13:0e:4b:58:06:a7:e1:e2:c7:f3:18:8a:5d:6d:d8:
                    b4:33:cd:a6:32:9e:8a:08:8f:1b:3e:14:5c:04:11:
                    5d:d5:6d:04:8a:93:0c:cc:68:9c:c4:a3:2b:d7:cc:
                    1e:4f:6f:83:dd:49:c2:1b:72:5a:bc:f5:3b:73:57:
                    ef:e5:93:03:7a:a7:37:19:5a:4f:d6:12:ef:c7:38:
                    80:60:92:fd:21:cf:cd:4e:3e:ff:e0:dc:48:82:b9:
                    df:79:32:de:1f:e0:d4:6f:6b:b9:ec:3f:20:c0:08:
                    36:56:8f:03:38:6e:70:8c:87:3b:0c:05:75:6d:b5:
                    fe:a0:6d:c3:ce:42:40:4b:4d:f0:80:9f:94:8d:5d:
                    49:e7:2d:77:63:04:35:68:92:b5:00:63:72:64:a4:
                    6d:16:5e:d4:96:2f:f1:f9:e4:3e:2f:a0:7a:2f:84:
                    7a:50:b4:c9:8d:74:db:7a:28:7b:00:43:0b:1d:1a:
                    ba:cc:27:05:da:e5:cc:31:cb:8a:14:6d:33:92:4c:
                    d9:e2:af:5a:93:66:78:08:e0:cd:a7:44:45:84:40:
                    78:c6:a7:6c:94:58:af:89:5b:2f:c7:cd:11:c0:3a:
                    6d:bb:b7:46:06:10:dc:6d:fd:ef:79:be:c3:a5:89:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EA:FA:C3:3B:42:A1:63:2E:53:C5:3A:46:3F:0F:3B:62:E5:2A:EA
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:cf:3e:b5:c3:5a:97:8e:81:fa:fb:60:b2:5d:a7:d4:aa:
         bf:53:d5:0a:b3:7c:71:d9:64:96:27:6f:4f:9f:15:2c:a1:5a:
         88:ea:a8:3c:eb:02:5b:78:30:ea:5a:b0:1b:43:46:69:79:ad:
         6c:d9:07:2f:c4:8b:ea:6d:15:97:e8:e5:61:2f:dd:29:2b:70:
         78:40:d1:2a:f7:16:e6:ba:bd:74:ea:d7:37:0a:68:19:39:aa:
         96:f9:bf:73:71:a5:02:99:05:57:39:48:c5:b7:11:e4:81:75:
         19:4b:04:24:59:25:57:01:68:2f:aa:ab:53:99:58:95:9a:3d:
         96:14:89:b3:fc:09:aa:f3:0b:9c:d0:12:35:f0:f3:6b:46:7f:
         fd:2e:00:1b:fb:5f:10:c5:b7:b2:2f:c1:1d:92:49:9f:04:01:
         20:61:24:80:e7:c7:06:cd:03:5b:71:b0:12:cb:59:e8:74:7f:
         f6:65:b0:73:39:0a:59:4b:6c:7d:7b:29:7b:b9:c9:81:62:88:
         90:93:61:61:4f:59:f1:5f:d6:84:8b:c1:ca:b4:53:5f:2e:51:
         ea:5a:3d:33:54:09:59:07:a6:89:62:a0:02:c6:91:04:84:89:
         46:c3:0c:c2:6f:ef:c0:6b:28:3e:e3:ce:f5:b9:6b:36:97:f6:
         85:2e:d1:cf
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUWMlfbwoMARMvpS2jVOJ/4B0aVqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDJaFw0yNjA3MDMwNjUzMDJaMDMxMTAvBgNV
BAMTKEVERUFGQUMzM0I0MkExNjMyRTUzQzUzQTQ2M0YwRjNCNjJFNTJBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDL58H5k3wluKzCZAI8RMOS1gG
p+Hix/MYil1t2LQzzaYynooIjxs+FFwEEV3VbQSKkwzMaJzEoyvXzB5Pb4PdScIb
clq89TtzV+/lkwN6pzcZWk/WEu/HOIBgkv0hz81OPv/g3EiCud95Mt4f4NRva7ns
PyDACDZWjwM4bnCMhzsMBXVttf6gbcPOQkBLTfCAn5SNXUnnLXdjBDVokrUAY3Jk
pG0WXtSWL/H55D4voHovhHpQtMmNdNt6KHsAQwsdGrrMJwXa5cwxy4oUbTOSTNni
r1qTZngI4M2nREWEQHjGp2yUWK+JWy/HzRHAOm27t0YGENxt/e95vsOliYwnAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU7er6wztCoWMuU8U6Rj8PO2LlKuowHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwMTA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQFMwDQYJKoZIhvcNAQELBQADggEBAAob
zz61w1qXjoH6+2CyXafUqr9T1QqzfHHZZJYnb0+fFSyhWojqqDzrAlt4MOpasBtD
Rml5rWzZBy/Ei+ptFZfo5WEv3SkrcHhA0Sr3Fua6vXTq1zcKaBk5qpb5v3NxpQKZ
BVc5SMW3EeSBdRlLBCRZJVcBaC+qq1OZWJWaPZYUibP8CarzC5zQEjXw82tGf/0u
ABv7XxDFt7IvwR2SSZ8EASBhJIDnxwbNA1txsBLLWeh0f/ZlsHM5CllLbH17KXu5
yYFiiJCTYWFPWfFf1oSLwcq0U18uUepaPTNUCVkHpolioALGkQSEiUbDDMJv78Br
KD7jzvW5azaX9oUu0c8=
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:06:43 2025 by rpki-client