Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200455.roa
File:                     AS200455.roa (raw, json)
Hash identifier:          SUIx/j9kcs974lGyMZP/XqEuPzl5UKbeOurgrllcBh0=
Subject key identifier:   22:DA:E7:5D:0E:9A:A1:C5:E6:46:0E:7B:DE:C5:53:20:80:12:94:59
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       2FDED9F6F6B9BC2E078B858551D41F5532E05413
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200455.roa
Signing time:             Fri 04 Jul 2025 06:53:26 +0000
ROA not before:           Fri 04 Jul 2025 06:48:26 +0000
ROA not after:            Fri 03 Jul 2026 06:53:26 +0000
asID:                     200455
IP address blocks:        2a0a:6040:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:de:d9:f6:f6:b9:bc:2e:07:8b:85:85:51:d4:1f:55:32:e0:54:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:26 2025 GMT
            Not After : Jul  3 06:53:26 2026 GMT
        Subject: CN=22DAE75D0E9AA1C5E6460E7BDEC5532080129459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6c:7e:1e:46:dc:29:db:91:2f:d1:e4:13:2a:
                    72:06:9d:b4:a1:0d:10:ca:4f:fe:4e:56:b0:ee:42:
                    74:09:18:27:57:bb:8b:3f:41:45:2f:cb:22:7f:84:
                    8b:d7:82:f2:55:58:a3:51:1d:e1:f0:d8:70:27:af:
                    8f:d1:b7:61:54:22:5a:85:c8:e4:f1:ac:d5:dc:79:
                    73:8f:d4:cb:fd:7d:9e:c6:b5:8e:83:c6:e0:83:96:
                    d0:61:7a:33:52:a4:f7:53:e5:24:21:53:f8:33:98:
                    40:f0:16:cc:99:1f:ff:55:eb:90:07:34:89:c2:de:
                    98:97:22:24:e4:e1:8a:e4:00:1c:6a:4b:25:d2:71:
                    a4:f5:ca:1b:ac:67:e8:d6:ec:1f:5a:7e:92:2b:da:
                    6d:35:73:85:88:60:1a:37:a1:ed:7e:5c:a2:7a:91:
                    83:d9:2c:ee:d3:1e:d6:51:1d:df:f7:df:a0:47:91:
                    36:5c:50:5b:d9:b8:59:af:f8:7b:99:09:9d:7b:f8:
                    2a:7c:4b:1c:c8:2f:5d:9b:eb:bf:6f:a2:b7:ae:dc:
                    8e:b9:35:ab:86:f9:0c:d3:1e:14:08:2f:ff:cb:12:
                    23:59:d3:e6:89:14:f2:aa:74:66:9a:c7:a3:d1:45:
                    4e:7d:eb:37:94:28:b3:4d:46:ad:c4:45:0e:6a:40:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:E7:5D:0E:9A:A1:C5:E6:46:0E:7B:DE:C5:53:20:80:12:94:59
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:68:83:01:4d:ee:f3:47:0a:d0:5b:c9:a1:a7:e3:8f:96:70:
         b9:df:95:24:2c:2f:bf:bd:d6:94:7a:6e:7a:c1:66:9c:4b:ae:
         78:84:01:9e:69:5a:16:d0:30:21:b0:4d:cd:78:9f:70:2c:83:
         27:a3:52:ff:0b:64:5f:47:45:95:e9:5f:d6:fc:76:8d:ae:f0:
         6c:2f:05:56:1c:98:85:7b:18:90:ba:77:8f:b9:0d:22:b2:a8:
         ae:d8:ac:fc:f9:03:fd:7b:b8:18:a1:45:28:cf:e6:fe:11:98:
         32:8b:6c:bd:ca:68:ae:ac:fc:57:12:aa:12:f3:b3:50:31:df:
         31:af:4f:30:c1:1d:d6:fb:1d:2b:57:7d:af:f5:80:69:24:54:
         44:a2:13:c6:cf:de:75:e9:86:63:f7:fb:cf:2c:8a:b7:0f:ce:
         76:b3:37:3a:eb:78:fe:fa:b6:8a:92:94:f3:f1:6d:a0:f8:62:
         b2:aa:e5:1f:bb:42:50:f1:f4:42:27:20:65:73:5c:e6:aa:61:
         95:09:b5:f1:5b:f9:45:13:17:c6:1c:24:3e:55:d4:86:63:28:
         fa:a8:06:05:a9:7b:02:3b:c2:75:57:3f:67:7b:73:a7:43:99:
         85:25:34:d5:d4:f0:78:52:35:eb:20:34:3c:f3:83:a5:90:da:
         f0:10:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:48:09 2025 by rpki-client