Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200581.roa
File:                     AS200581.roa (raw, json)
Hash identifier:          2d/OcVyqGF/sb2py5whT53G5N4flVPlmwiDTXxqVVgs=
Subject key identifier:   8A:38:F4:F1:7E:B7:22:9E:92:52:CC:4E:59:E9:F4:0F:C2:37:B2:0A
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       1C7C187CB58BCA01DF90D333A5B873E5045E3432
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200581.roa
Signing time:             Fri 04 Jul 2025 06:53:03 +0000
ROA not before:           Fri 04 Jul 2025 06:48:03 +0000
ROA not after:            Fri 03 Jul 2026 06:53:03 +0000
asID:                     200581
IP address blocks:        2a0a:6040:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7c:18:7c:b5:8b:ca:01:df:90:d3:33:a5:b8:73:e5:04:5e:34:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:03 2025 GMT
            Not After : Jul  3 06:53:03 2026 GMT
        Subject: CN=8A38F4F17EB7229E9252CC4E59E9F40FC237B20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:c0:3b:d3:c9:9f:97:b7:0c:58:2e:07:77:
                    15:db:43:8f:83:e3:60:fa:71:3f:75:cf:71:e4:4c:
                    3b:82:ef:96:b8:e0:8c:5b:78:ff:d0:9a:6f:76:9c:
                    13:73:6c:ce:ef:2e:b8:f0:a9:4a:09:56:e8:f7:47:
                    c1:8c:39:99:be:65:b7:ac:39:da:10:e2:75:ba:61:
                    e6:3f:f0:43:cd:fc:bc:c9:f1:d7:85:f9:2d:6b:1c:
                    f0:79:96:80:f0:62:8e:d9:53:c0:b1:7c:b3:18:b6:
                    23:c3:17:2f:04:9b:04:a4:2f:fd:f9:6e:ea:55:fd:
                    ed:78:da:a9:13:41:f6:1a:b4:8d:4b:d3:a0:66:e8:
                    3d:3f:10:6e:d6:cc:9c:ac:1c:2a:2e:1a:64:c8:c0:
                    8e:96:2e:28:28:5e:98:2f:0c:65:0d:af:e3:7b:43:
                    2d:da:b6:bf:38:32:b5:02:a3:6f:5d:e7:46:6e:0c:
                    bd:31:62:ca:47:ee:20:90:aa:fe:4b:6c:4f:98:65:
                    0b:9a:d1:dc:2e:e2:c1:ea:15:6b:60:f5:44:bd:04:
                    9f:0a:06:81:ee:d0:31:82:8e:94:14:2b:3c:1a:9f:
                    9f:d8:ff:2c:84:1e:e7:e9:c6:52:7c:69:38:6a:75:
                    2b:53:d9:8b:92:e4:13:be:b0:87:a3:77:3b:bc:57:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:F4:F1:7E:B7:22:9E:92:52:CC:4E:59:E9:F4:0F:C2:37:B2:0A
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:8d:ae:5a:91:91:96:ce:47:a5:59:42:5b:9d:20:45:5e:25:
         53:de:35:98:78:e7:8b:a0:03:15:72:c5:70:00:52:69:be:5c:
         4d:41:0b:4d:f2:d1:99:70:d0:49:64:fd:9e:29:12:2e:10:d9:
         3a:62:07:be:e3:b4:0d:03:6f:58:c9:2c:d2:57:b3:81:4a:47:
         78:3a:3c:15:58:c1:dc:ae:39:65:7b:c7:f9:c8:3a:f2:25:3d:
         97:45:08:20:2b:02:a7:33:a4:dd:2e:c5:e3:8f:c0:64:0e:a5:
         c6:82:23:4e:3e:14:0e:64:d2:2a:de:0b:e8:f0:76:25:2d:24:
         26:82:05:9a:06:e7:d1:d3:03:c3:5c:66:7c:fe:e2:c1:9c:21:
         0d:8a:c1:75:df:71:a3:0d:1e:9e:8b:cb:a2:34:ce:4a:c1:0c:
         8a:81:aa:22:4d:1a:dd:09:80:4f:03:c4:d2:d1:2a:a7:8e:df:
         30:1f:a3:c6:08:a1:a2:69:90:fb:81:d4:df:1f:dc:89:b9:5d:
         c7:85:c3:5a:c9:11:74:6d:aa:69:e4:62:cb:82:59:fb:05:9a:
         15:b9:9e:87:d2:7f:d7:1c:37:d7:41:2d:0b:23:07:0a:66:77:
         c7:12:90:23:2b:8b:8d:bf:75:30:93:8b:c9:06:ee:b5:c3:93:
         bd:09:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:08:45 2025 by rpki-client