Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200454.roa
File:                     AS200454.roa (raw, json)
Hash identifier:          MbU08kWdsACKugiYHAkuiL2tT8cilNWGqRLhPU9EYxA=
Subject key identifier:   92:BF:5A:FB:DB:05:6B:AE:A6:19:AA:FD:6E:19:5E:BB:5B:D4:45:34
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       5DAF809C66A601FCF5FD58F74D4CAC74BD20D22E
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200454.roa
Signing time:             Fri 04 Jul 2025 06:53:28 +0000
ROA not before:           Fri 04 Jul 2025 06:48:28 +0000
ROA not after:            Fri 03 Jul 2026 06:53:28 +0000
asID:                     200454
IP address blocks:        2a0a:6040:aa00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:af:80:9c:66:a6:01:fc:f5:fd:58:f7:4d:4c:ac:74:bd:20:d2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:28 2025 GMT
            Not After : Jul  3 06:53:28 2026 GMT
        Subject: CN=92BF5AFBDB056BAEA619AAFD6E195EBB5BD44534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:9f:44:68:1f:59:5d:28:2c:a7:25:65:fa:
                    5a:19:52:04:b3:1d:e3:88:90:07:10:06:60:2e:43:
                    8a:13:c7:71:dd:5b:ec:22:2a:63:60:56:ec:94:51:
                    18:5f:8f:28:16:1b:0c:58:12:00:11:98:8f:8e:93:
                    6d:ef:01:ad:b2:06:ae:e0:9e:09:a7:93:d2:75:58:
                    14:89:ec:83:95:4c:e8:1b:1c:5c:01:ba:8b:86:89:
                    cf:db:61:86:01:8a:ca:ae:cd:cb:77:0b:74:1c:8b:
                    21:08:43:f1:d9:84:52:30:30:a9:db:3e:66:4a:d3:
                    75:c3:0a:7c:56:ba:cd:91:2f:59:63:4e:6d:30:2b:
                    b0:56:9a:8b:23:8d:24:d5:e4:f9:ec:27:60:e8:0c:
                    eb:50:01:44:78:e4:1e:4b:fb:b5:d2:9f:28:e6:ba:
                    d5:de:d4:0c:b1:52:ac:d6:fc:e8:65:c1:cd:37:80:
                    96:6d:79:c4:de:47:ad:6f:04:38:92:f6:db:07:65:
                    01:ee:c2:eb:37:f6:bf:92:3c:c7:0d:8d:0d:56:ea:
                    21:d3:ac:69:6f:08:28:e8:28:0c:92:6f:a0:bf:d4:
                    89:8b:be:af:f0:a3:97:6c:22:c8:84:8b:c1:f4:4f:
                    7e:15:cf:c3:fc:5a:1e:ff:2e:7d:ca:ca:41:2e:0b:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BF:5A:FB:DB:05:6B:AE:A6:19:AA:FD:6E:19:5E:BB:5B:D4:45:34
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:72:e8:e6:7f:99:d6:db:55:fd:84:b7:24:58:c8:36:c3:4d:
         d1:0c:d0:e2:c5:a7:85:06:ba:67:6b:66:89:97:e0:6e:38:bf:
         81:82:e1:5d:63:03:48:cb:87:16:6c:80:b0:d9:35:a4:bf:98:
         76:1b:c5:86:05:6e:7d:bf:20:fd:c9:1f:ad:2a:af:8a:c8:f4:
         75:e5:99:38:6a:6d:52:36:13:ed:a2:48:2e:52:d9:00:8c:57:
         bc:18:32:88:2a:a8:f0:9a:67:53:bc:c1:08:58:fb:cb:32:3c:
         c5:25:22:ec:2d:8b:37:55:92:5a:7b:89:33:0b:84:1a:c3:fb:
         61:0a:4d:9b:89:b8:16:e1:f6:6a:b3:7f:12:cf:88:32:59:36:
         23:22:9a:3f:f5:3c:c2:ab:11:58:ff:64:86:8e:0f:54:d6:1a:
         b3:5b:02:1b:0e:8b:e2:bb:69:83:6a:0d:25:d7:c0:33:da:24:
         6e:43:d8:76:01:6f:d3:de:de:52:25:03:98:fd:f9:22:39:e5:
         e5:c7:74:0f:fe:35:80:e5:00:a8:c0:ad:da:52:92:cb:26:dd:
         d5:75:a6:e9:16:39:34:3b:aa:0f:95:05:10:d7:68:97:89:c2:
         7e:71:17:e8:f4:3b:2d:48:bb:f6:3e:7b:6a:0c:2e:2e:b2:69:
         5f:c2:f6:59
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUXa+AnGamAfz1/Vj3TUysdL0g0i4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjhaFw0yNjA3MDMwNjUzMjhaMDMxMTAvBgNV
BAMTKDkyQkY1QUZCREIwNTZCQUVBNjE5QUFGRDZFMTk1RUJCNUJENDQ1MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMJ9EaB9ZXSgspyVl+loZUgSz
HeOIkAcQBmAuQ4oTx3HdW+wiKmNgVuyUURhfjygWGwxYEgARmI+Ok23vAa2yBq7g
ngmnk9J1WBSJ7IOVTOgbHFwBuouGic/bYYYBisquzct3C3QciyEIQ/HZhFIwMKnb
PmZK03XDCnxWus2RL1ljTm0wK7BWmosjjSTV5PnsJ2DoDOtQAUR45B5L+7XSnyjm
utXe1AyxUqzW/Ohlwc03gJZtecTeR61vBDiS9tsHZQHuwus39r+SPMcNjQ1W6iHT
rGlvCCjoKAySb6C/1ImLvq/wo5dsIsiEi8H0T34Vz8P8Wh7/Ln3KykEuC26vAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUkr9a+9sFa66mGar9bhleu1vURTQwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwNDU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQKowDQYJKoZIhvcNAQELBQADggEBAJFy
6OZ/mdbbVf2EtyRYyDbDTdEM0OLFp4UGumdrZomX4G44v4GC4V1jA0jLhxZsgLDZ
NaS/mHYbxYYFbn2/IP3JH60qr4rI9HXlmThqbVI2E+2iSC5S2QCMV7wYMogqqPCa
Z1O8wQhY+8syPMUlIuwtizdVklp7iTMLhBrD+2EKTZuJuBbh9mqzfxLPiDJZNiMi
mj/1PMKrEVj/ZIaOD1TWGrNbAhsOi+K7aYNqDSXXwDPaJG5D2HYBb9Pe3lIlA5j9
+SI55eXHdA/+NYDlAKjArdpSkssm3dV1pukWOTQ7qg+VBRDXaJeJwn5xF+j0Oy1I
u/Y+e2oMLi6yaV/C9lk=
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:12:29 2025 by rpki-client