Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200775.roa
File:                     AS200775.roa (raw, json)
Hash identifier:          33U/EBBJ500uyvoczvWaWJG/TorU4D9P3TBRxulrGUw=
Subject key identifier:   17:36:F9:E7:41:BC:4D:C5:79:4F:FB:78:93:E5:F6:B5:77:EC:E5:E6
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       7ADECD653FD9695079A97DE404421D323813D8A5
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200775.roa
Signing time:             Fri 04 Jul 2025 06:53:13 +0000
ROA not before:           Fri 04 Jul 2025 06:48:13 +0000
ROA not after:            Fri 03 Jul 2026 06:53:13 +0000
asID:                     200775
IP address blocks:        2a0a:6040:c200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:de:cd:65:3f:d9:69:50:79:a9:7d:e4:04:42:1d:32:38:13:d8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:13 2025 GMT
            Not After : Jul  3 06:53:13 2026 GMT
        Subject: CN=1736F9E741BC4DC5794FFB7893E5F6B577ECE5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ed:38:87:1a:bd:20:4b:1f:f8:16:1b:eb:32:
                    2e:91:fd:83:6d:61:66:17:b7:3b:12:dd:38:2c:7f:
                    a0:da:a9:07:4f:6a:6a:98:1d:b7:c1:4f:57:94:d8:
                    95:f4:30:ea:e8:86:c1:0d:b6:b2:cf:83:c4:30:61:
                    d7:19:58:7e:80:55:a3:39:fe:33:a4:a3:2a:e9:6f:
                    d7:9e:f5:18:b6:9c:83:b3:ca:43:4d:2d:80:7d:0b:
                    a0:a6:3f:f5:07:bd:3b:af:80:8b:bb:48:1f:4f:df:
                    8d:cc:8e:9c:53:2c:41:0c:9b:e8:8d:0e:65:86:52:
                    3f:50:37:cf:cd:a8:78:3e:4c:28:9c:b6:f8:ff:da:
                    74:da:88:75:06:24:0b:5f:71:92:9c:4d:6d:f5:06:
                    d6:b2:bd:b7:e7:e7:eb:f0:2a:83:a6:05:75:aa:39:
                    8d:de:9d:33:86:b5:70:1e:f5:52:d5:cf:4c:93:5d:
                    77:35:ed:d5:82:a0:ca:14:56:1a:99:82:82:41:5c:
                    4a:c1:0f:29:24:75:07:33:02:0f:24:90:78:a5:8f:
                    da:81:28:50:e7:12:cf:f7:ee:31:b3:91:36:f6:ca:
                    92:d8:3e:3b:98:77:58:86:3f:2f:28:c4:82:ac:a2:
                    d3:9d:05:d2:2c:e2:88:21:99:61:1b:21:ca:34:6b:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:36:F9:E7:41:BC:4D:C5:79:4F:FB:78:93:E5:F6:B5:77:EC:E5:E6
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200775.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c200::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:46:0d:ba:bc:08:b1:47:10:23:41:65:e7:33:bd:d2:77:
         92:30:af:80:85:e0:5e:38:f6:6d:c3:95:a1:48:d3:60:7a:ee:
         bc:50:da:5e:39:a8:7a:08:1f:9f:cb:60:8a:90:79:06:d0:74:
         09:a6:a0:96:c8:3e:a1:ac:0c:a4:42:93:84:95:a6:47:21:ef:
         26:e9:e3:a1:1f:ab:24:e5:0a:2f:27:1a:26:2c:49:2c:33:47:
         4c:a7:d1:ad:21:cf:ec:84:70:fb:0a:e9:83:16:8d:a6:61:de:
         38:1c:3a:71:8f:69:cd:69:2b:d8:a9:c8:4e:dc:66:71:b8:fd:
         95:30:a7:15:dc:53:d5:f6:fa:8f:aa:f0:15:c4:4c:5f:8b:d8:
         df:59:bc:ea:df:59:ff:cc:d6:d7:42:fd:a8:35:40:bc:5d:83:
         c1:b8:e0:88:60:d3:d8:4b:fb:df:18:ac:88:53:83:a5:1a:3e:
         9e:53:0e:26:ac:42:21:7d:c8:8e:37:4e:8f:e4:ad:17:8a:2b:
         d6:23:47:13:87:a1:34:9a:58:20:3f:fa:92:62:bc:61:80:f6:
         e4:b5:02:0b:f2:12:59:5d:d7:87:a7:2b:e6:d9:61:c9:6b:30:
         92:fb:72:5e:ff:35:df:30:5e:86:50:20:c6:4a:c6:e5:83:f5:
         bb:dd:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:51:20 2025 by rpki-client