Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200795.roa
File:                     AS200795.roa (raw, json)
Hash identifier:          kypuJIwwrtVwJlu1gb7t0OXDFm1kPklgx1XVR7+7kq4=
Subject key identifier:   82:6E:D0:F9:80:C1:27:88:2D:2E:77:4C:25:C7:75:AC:26:35:8B:68
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       531E51BC3B1292A9D4125C17242BFF8174292F59
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200795.roa
Signing time:             Fri 04 Jul 2025 06:53:23 +0000
ROA not before:           Fri 04 Jul 2025 06:48:23 +0000
ROA not after:            Fri 03 Jul 2026 06:53:23 +0000
asID:                     200795
IP address blocks:        2a0a:6040:be00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1e:51:bc:3b:12:92:a9:d4:12:5c:17:24:2b:ff:81:74:29:2f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:23 2025 GMT
            Not After : Jul  3 06:53:23 2026 GMT
        Subject: CN=826ED0F980C127882D2E774C25C775AC26358B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:ab:d5:3d:82:c7:93:67:35:4f:f6:ca:73:
                    88:b4:db:58:63:94:a2:00:05:7b:e7:a5:05:63:30:
                    80:9c:5f:f1:cf:24:9f:97:a0:b4:b9:c0:65:38:d3:
                    5b:60:4f:2c:e9:bb:4e:5e:c6:ed:7d:be:91:30:bd:
                    f1:20:ae:56:7e:b1:d0:97:94:f4:b1:96:b8:c3:7b:
                    e1:7c:c1:23:34:37:12:13:ce:fd:0b:da:f1:27:00:
                    da:55:07:b6:1b:f8:80:b7:6b:ff:2e:8a:94:66:a2:
                    83:d2:8b:79:90:71:97:24:ef:db:fd:97:60:c0:7f:
                    f7:c9:84:fa:9c:7f:85:9a:7d:ec:ad:a5:90:1c:8d:
                    a6:f0:65:a4:ef:d3:66:a3:a7:ca:7e:e2:09:da:e5:
                    80:b2:0a:b1:aa:c8:ce:1f:e1:1b:e1:48:55:a7:0c:
                    4f:e9:e8:33:ca:f7:12:f6:62:54:55:2d:be:72:35:
                    c9:18:97:39:69:83:43:24:6a:62:39:c3:20:aa:13:
                    40:4d:d7:af:22:31:d5:27:f2:6d:99:81:84:ae:3c:
                    96:03:97:6b:02:18:39:d4:8e:20:c4:31:2b:98:43:
                    b2:4b:b9:23:db:87:e9:67:55:5b:7e:21:1a:a5:15:
                    b4:72:fc:ed:49:14:9c:68:67:b5:58:cb:f1:7c:98:
                    6b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6E:D0:F9:80:C1:27:88:2D:2E:77:4C:25:C7:75:AC:26:35:8B:68
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200795.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:22:67:0c:b3:9b:5e:86:ff:83:57:4c:36:70:92:16:61:1e:
         24:9a:6d:85:bc:b7:a6:10:e2:4f:69:52:9f:30:84:f0:3e:d2:
         a0:1e:39:54:58:48:2c:8b:cb:ab:c3:d7:50:0d:51:a5:b0:67:
         60:05:a4:58:03:51:f8:de:00:d1:c3:22:09:57:91:ea:b3:6d:
         3e:05:6d:d8:46:61:04:84:5e:d5:ff:d9:c5:3f:71:cf:44:60:
         7c:b0:fc:a7:1b:12:a2:52:d4:bc:6d:ef:95:71:87:0b:e7:38:
         64:46:47:a7:34:d4:31:b0:30:b1:6f:30:ef:91:c4:a9:69:bc:
         f1:83:77:d4:a0:5f:ea:89:45:56:e7:e4:3c:14:0e:9d:f5:7a:
         a3:be:76:1f:bc:6c:4b:fb:ba:63:99:dc:a9:10:61:0d:c5:10:
         9b:b6:c2:f7:dc:52:87:22:84:eb:85:85:26:2c:a0:e7:c8:aa:
         06:ce:47:b3:14:90:08:5e:d4:d8:08:0d:f9:ee:d0:a9:3a:86:
         d5:df:77:3d:df:3e:53:8a:26:55:3b:68:ac:68:57:19:e9:f7:
         96:47:c2:8f:5b:0e:ea:b4:c8:24:d3:2d:0f:1c:4e:16:a7:c3:
         94:71:c2:72:45:dc:1d:f4:7a:6d:af:0a:62:8f:69:b2:77:4f:
         0e:0e:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:04:14 2025 by rpki-client