Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200732.roa
File:                     AS200732.roa (raw, json)
Hash identifier:          ZZmz9H730wHoAaaHv0lr9zL/QzQmtGKBuSe0E023GxE=
Subject key identifier:   17:6E:1F:E1:E7:20:99:EB:BD:D1:34:BE:28:54:9B:51:28:32:82:EA
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       2637E087BC11E8CF16FADD7ED9C6DF9D74671C63
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200732.roa
Signing time:             Fri 04 Jul 2025 06:53:22 +0000
ROA not before:           Fri 04 Jul 2025 06:48:22 +0000
ROA not after:            Fri 03 Jul 2026 06:53:22 +0000
asID:                     200732
IP address blocks:        2a0a:6040:b600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:37:e0:87:bc:11:e8:cf:16:fa:dd:7e:d9:c6:df:9d:74:67:1c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:22 2025 GMT
            Not After : Jul  3 06:53:22 2026 GMT
        Subject: CN=176E1FE1E72099EBBDD134BE28549B51283282EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:13:b1:d3:a5:e2:78:a3:99:37:e1:87:6c:
                    06:3e:02:40:4a:32:bf:54:4d:bb:23:6c:9f:7a:d6:
                    ae:a2:f0:14:c6:4f:18:01:47:e8:54:c8:51:11:0d:
                    47:99:ff:8b:4a:b8:89:4d:ad:95:97:09:9a:ea:8f:
                    c7:a0:ff:3a:d2:24:0a:bc:74:55:08:8d:5f:78:0f:
                    22:d4:2d:7a:da:ba:78:33:b1:df:43:38:da:70:a5:
                    af:d5:63:ac:51:6b:2e:d4:ca:3e:f4:c1:62:25:ed:
                    a2:49:db:53:da:f2:0a:61:a0:50:67:a3:6d:da:59:
                    59:2b:85:5a:76:e1:ce:34:01:43:a5:a3:14:ba:ad:
                    93:cf:84:8c:a6:22:d0:c8:ad:6a:d7:d4:1d:db:c9:
                    8b:39:c0:39:8d:ca:19:67:3a:f8:38:61:9b:4c:de:
                    bf:74:e4:a1:fb:49:6e:3d:98:ae:8e:02:34:a9:37:
                    91:ad:05:38:25:47:3e:0e:a7:85:8d:58:3f:13:db:
                    6d:80:3c:51:5a:aa:b1:8c:48:41:e2:0a:14:56:38:
                    a8:52:27:f5:77:b3:63:bf:42:7e:e8:0e:fc:8a:89:
                    3b:e7:c0:49:cb:f2:20:99:4a:4d:91:24:91:f4:f5:
                    a2:32:d2:f7:1a:17:f2:ce:f9:2c:a0:24:53:74:b8:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6E:1F:E1:E7:20:99:EB:BD:D1:34:BE:28:54:9B:51:28:32:82:EA
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b600::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:6a:40:a8:61:65:44:35:9b:6b:ff:8a:20:41:09:79:2b:bf:
         e5:58:39:6e:ce:74:65:20:1a:80:24:0d:ec:4e:96:be:f6:16:
         11:ed:ca:0c:82:79:6a:43:c5:e6:82:6e:b4:7e:8e:ac:b6:4c:
         b2:5f:47:63:d6:20:76:fa:55:c4:47:60:8b:1c:eb:35:8f:26:
         3f:d3:bd:b9:88:2e:7f:bb:c2:2e:ec:7e:a5:cd:c8:b3:08:1e:
         7e:ba:22:61:7a:ae:f2:c6:b9:86:2e:d1:43:cc:5b:32:8a:56:
         ad:78:7c:33:a7:20:06:58:c9:6c:58:a7:be:f7:9c:e1:b3:06:
         0b:cb:49:ff:94:43:b7:7f:53:f0:f4:32:0a:2e:38:86:85:5b:
         e7:58:76:d8:2c:29:16:53:cb:31:4c:ca:a7:e2:b5:b0:e5:9c:
         14:b0:7b:bc:3f:71:cf:10:24:9c:a3:8b:53:10:b8:65:af:36:
         ad:ea:ff:52:dd:90:4e:5e:39:cb:68:a8:9c:ad:15:6e:0b:26:
         7e:7b:ad:65:b4:52:50:11:92:8d:f7:95:9f:ac:b6:38:da:3e:
         30:5c:c9:24:45:5c:a4:51:39:66:fd:5e:2e:15:5a:2c:b8:5c:
         d7:21:c2:29:a9:d2:59:13:65:b9:b4:b8:78:82:02:9c:a9:08:
         f4:b7:8e:a6
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUJjfgh7wR6M8W+t1+2cbfnXRnHGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjJaFw0yNjA3MDMwNjUzMjJaMDMxMTAvBgNV
BAMTKDE3NkUxRkUxRTcyMDk5RUJCREQxMzRCRTI4NTQ5QjUxMjgzMjgyRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUhOx06XieKOZN+GHbAY+AkBK
Mr9UTbsjbJ961q6i8BTGTxgBR+hUyFERDUeZ/4tKuIlNrZWXCZrqj8eg/zrSJAq8
dFUIjV94DyLULXraungzsd9DONpwpa/VY6xRay7Uyj70wWIl7aJJ21Pa8gphoFBn
o23aWVkrhVp24c40AUOloxS6rZPPhIymItDIrWrX1B3byYs5wDmNyhlnOvg4YZtM
3r905KH7SW49mK6OAjSpN5GtBTglRz4Op4WNWD8T222APFFaqrGMSEHiChRWOKhS
J/V3s2O/Qn7oDvyKiTvnwEnL8iCZSk2RJJH09aIy0vcaF/LO+SygJFN0uAhVAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUF24f4ecgmeu90TS+KFSbUSgyguowHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQLYwDQYJKoZIhvcNAQELBQADggEBAFlq
QKhhZUQ1m2v/iiBBCXkrv+VYOW7OdGUgGoAkDexOlr72FhHtygyCeWpDxeaCbrR+
jqy2TLJfR2PWIHb6VcRHYIsc6zWPJj/TvbmILn+7wi7sfqXNyLMIHn66ImF6rvLG
uYYu0UPMWzKKVq14fDOnIAZYyWxYp773nOGzBgvLSf+UQ7d/U/D0MgouOIaFW+dY
dtgsKRZTyzFMyqfitbDlnBSwe7w/cc8QJJyji1MQuGWvNq3q/1LdkE5eOctoqJyt
FW4LJn57rWW0UlARko33lZ+stjjaPjBcySRFXKRROWb9Xi4VWiy4XNchwimp0lkT
Zbm0uHiCApypCPS3jqY=
-----END CERTIFICATE-----
Generated at Sat Jul 5 03:46:40 2025 by rpki-client