Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200556.roa
File:                     AS200556.roa (raw, json)
Hash identifier:          9dLHIgiFOQMDPQOt+qyYalEG+JXrHeRMst3NQ7RNX8Y=
Subject key identifier:   B7:25:F7:46:CF:9F:84:44:F4:4F:C8:91:74:65:C7:08:84:D2:9E:CF
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       19BB2ED275CC6EA95AE2DC351BF8670ED991619C
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200556.roa
Signing time:             Fri 04 Jul 2025 06:53:26 +0000
ROA not before:           Fri 04 Jul 2025 06:48:26 +0000
ROA not after:            Fri 03 Jul 2026 06:53:26 +0000
asID:                     200556
IP address blocks:        2a0a:6040:1600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bb:2e:d2:75:cc:6e:a9:5a:e2:dc:35:1b:f8:67:0e:d9:91:61:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:26 2025 GMT
            Not After : Jul  3 06:53:26 2026 GMT
        Subject: CN=B725F746CF9F8444F44FC8917465C70884D29ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:a2:b4:c0:ea:47:6c:c5:70:e7:49:8f:97:
                    e1:f1:e4:e7:f1:07:13:7b:44:ff:3b:59:1d:21:de:
                    75:c4:54:18:09:f7:ff:e0:8f:96:53:1d:1d:90:71:
                    cc:1a:b0:48:96:f1:78:e4:80:ab:81:ef:f2:7a:2e:
                    41:22:19:9f:7e:fe:1c:89:e8:40:37:8e:9f:ec:a6:
                    04:30:d0:f2:45:71:27:ac:59:ff:a4:6d:5a:92:86:
                    bd:52:a2:d5:77:48:63:e4:24:3c:c9:92:6c:99:16:
                    4c:88:6c:33:77:48:ff:15:fd:d9:57:91:dc:74:e2:
                    8a:ae:a1:0a:0d:a5:94:e4:d9:2e:14:73:e8:01:80:
                    12:c9:a6:26:6f:8e:97:4f:11:c8:6d:9d:4f:96:e5:
                    16:03:52:60:f9:fa:ba:24:d2:f2:c5:6b:0e:b8:bb:
                    04:30:82:23:7d:d6:ab:84:46:03:87:c3:64:cf:65:
                    f1:74:fd:8e:82:3d:22:47:32:8a:30:19:61:09:65:
                    ef:c7:43:de:09:0b:b6:a8:7b:26:4d:0f:48:c8:cc:
                    a9:32:e5:60:a6:0f:2d:13:51:0a:7b:18:ae:25:77:
                    8d:20:5e:d3:78:a4:ad:7a:49:3c:75:02:45:71:15:
                    3f:e2:31:f7:74:52:eb:4e:5c:e3:30:d8:4c:b4:d5:
                    5f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:25:F7:46:CF:9F:84:44:F4:4F:C8:91:74:65:C7:08:84:D2:9E:CF
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200556.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:42:55:5c:21:2c:67:53:31:00:96:34:76:62:c3:bb:f0:36:
         c4:9f:78:12:91:df:d9:3d:b4:00:bc:45:84:13:98:77:7b:82:
         ec:cf:af:4c:c5:57:62:04:da:56:d1:f2:64:07:a8:5b:9d:1f:
         44:ea:b4:a0:8c:50:89:8f:8f:d5:b3:c2:e1:eb:c0:ad:0e:ef:
         eb:f9:49:d7:f3:3a:7b:7e:89:f7:17:8a:19:d4:cc:99:15:f7:
         c2:c4:01:4c:d4:34:33:d9:2b:99:f1:e2:93:1e:43:f4:3f:ea:
         ce:98:d7:55:77:d9:44:43:41:97:13:87:b0:a7:4a:05:f0:76:
         1c:66:69:48:f0:fb:ee:04:72:da:83:f1:24:b7:89:da:1b:86:
         28:0c:7a:ff:96:93:06:3b:21:01:9d:75:21:d5:49:a2:3a:d1:
         77:c9:8e:80:7c:57:3c:ae:d5:82:dd:49:1b:4e:f9:30:f8:ad:
         d6:00:da:a0:2f:15:59:0e:37:1e:23:cb:ad:1f:0e:0f:79:0c:
         7c:ba:4a:be:40:07:c2:c3:59:9d:27:db:ea:d2:a3:c1:ac:da:
         d8:e7:66:de:36:b0:0f:82:7f:c3:8d:d3:20:4b:52:8a:ab:76:
         42:da:5b:39:ae:5c:17:56:4a:23:94:fa:3d:9a:38:af:38:bb:
         0b:40:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:06:14 2025 by rpki-client