Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202427.roa
File:                     AS202427.roa (raw, json)
Hash identifier:          WDHqBE1W8fz7pcj1cwZg0hXriULgOBqKzX80BdAywBU=
Subject key identifier:   55:15:D1:94:9C:B3:FC:27:C4:EA:A1:F0:82:DB:6A:5E:58:C9:6C:82
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       0B07551184FA5D67D9CCD13E9FAE589C955D8152
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202427.roa
Signing time:             Fri 04 Jul 2025 06:53:04 +0000
ROA not before:           Fri 04 Jul 2025 06:48:04 +0000
ROA not after:            Fri 03 Jul 2026 06:53:04 +0000
asID:                     202427
IP address blocks:        2a05:dfc1:600::/40 maxlen: 48
                          2a05:dfc1:5300::/40 maxlen: 48
                          2a0a:6040:2700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:07:55:11:84:fa:5d:67:d9:cc:d1:3e:9f:ae:58:9c:95:5d:81:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:04 2025 GMT
            Not After : Jul  3 06:53:04 2026 GMT
        Subject: CN=5515D1949CB3FC27C4EAA1F082DB6A5E58C96C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:ce:51:a1:eb:3e:8d:a3:14:bb:df:e0:25:
                    e8:ea:b9:79:f2:1e:9a:42:ca:ad:a0:42:38:d2:b7:
                    1f:d2:97:44:a0:9c:c1:8d:df:73:a6:2d:73:e7:f9:
                    9a:32:50:16:42:d1:e1:d4:a5:0b:f3:9e:21:3d:45:
                    f2:23:de:58:3d:ab:9f:c4:02:c4:d0:88:02:49:ea:
                    ef:04:a0:26:0c:53:47:f0:d6:91:38:55:d2:31:27:
                    3d:da:53:ba:36:63:05:2a:40:16:62:60:34:2c:69:
                    91:85:01:94:7e:c8:7f:9e:06:aa:3c:28:1a:b7:04:
                    db:51:20:0b:ea:e1:1b:4a:7b:54:62:5d:94:7e:fb:
                    fc:3d:fc:e1:d1:fb:16:bd:d8:95:90:54:43:ce:35:
                    eb:90:45:9d:a1:44:6d:cb:26:38:24:c4:b3:c7:b4:
                    9f:a2:69:9a:f7:8e:fa:13:0f:d3:6b:dc:26:ef:bf:
                    b5:4f:bf:46:bb:78:03:97:52:be:0d:ff:d4:9f:c3:
                    98:3d:38:a5:32:66:4c:57:50:85:d3:ff:1d:8f:e0:
                    be:05:7a:3e:0e:ad:f5:4b:07:ed:57:10:7f:db:68:
                    20:f7:b4:0e:28:34:8f:9c:3a:27:41:55:b8:8a:33:
                    ee:11:63:21:c4:aa:ce:b3:2e:ec:26:30:b2:40:22:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:15:D1:94:9C:B3:FC:27:C4:EA:A1:F0:82:DB:6A:5E:58:C9:6C:82
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:600::/40
                  2a05:dfc1:5300::/40
                  2a0a:6040:2700::/40

    Signature Algorithm: sha256WithRSAEncryption
         cf:ea:2a:d8:2e:39:3f:45:d9:72:43:9b:07:57:81:1c:56:c9:
         8c:3c:1f:f1:02:25:28:90:93:b4:fd:59:8c:85:10:14:da:4d:
         01:88:a8:db:4f:f3:0d:76:83:af:82:fe:d5:f7:15:2a:95:c4:
         76:d0:ca:38:78:8b:3b:46:83:1e:ea:39:3a:30:9c:fc:35:5e:
         a0:6f:78:02:d2:51:d9:ae:c8:31:08:fb:f0:a1:21:3d:50:31:
         64:8e:e4:79:1a:db:ec:8a:25:ea:69:49:e7:b2:a6:6e:57:64:
         9d:9e:0d:d4:19:c3:44:21:20:5b:b9:5a:2b:99:11:f6:88:ef:
         24:b0:ab:ae:f6:75:60:cd:8d:aa:43:47:af:5c:48:bd:5b:77:
         f7:fe:cc:ee:c7:ff:12:0b:d3:1b:04:8c:a7:0c:41:f1:29:4f:
         4a:0b:3a:eb:44:89:53:ec:1a:dc:2d:a9:4c:49:00:5f:3a:30:
         9a:65:21:4b:7a:bb:cc:e4:8b:cb:16:ed:bc:f2:ed:4e:ed:e1:
         9b:d9:5b:7e:db:3f:b4:d0:ac:d6:90:1a:0f:24:4e:42:80:34:
         c9:c3:49:5f:2a:9c:39:1d:5a:f3:f9:7a:18:8b:9c:13:2e:66:
         a2:46:86:9a:91:28:aa:7d:07:96:95:bc:97:be:51:b3:cd:6c:
         c6:a3:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:46:40 2025 by rpki-client