Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203156.roa
File:                     AS203156.roa (raw, json)
Hash identifier:          3oeoOLMTbqhcearmGjNUedSOSIh4kbHSmZ4+KdvGMXk=
Subject key identifier:   FF:F1:47:F8:E3:1E:0D:F0:8A:1D:97:99:E9:AB:AA:84:35:8B:1D:1B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       0D6616D54BF7C6B0FAA2E8B0B4AC91071F4F96A4
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203156.roa
Signing time:             Fri 04 Jul 2025 06:53:09 +0000
ROA not before:           Fri 04 Jul 2025 06:48:09 +0000
ROA not after:            Fri 03 Jul 2026 06:53:09 +0000
asID:                     203156
IP address blocks:        2a05:dfc1:2d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:66:16:d5:4b:f7:c6:b0:fa:a2:e8:b0:b4:ac:91:07:1f:4f:96:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:09 2025 GMT
            Not After : Jul  3 06:53:09 2026 GMT
        Subject: CN=FFF147F8E31E0DF08A1D9799E9ABAA84358B1D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a1:de:c8:8e:81:eb:fc:f3:98:62:fa:ba:6e:
                    15:f6:80:7e:ea:f6:c2:67:33:a4:ad:d6:b3:b0:71:
                    61:38:19:ef:26:c0:73:46:5c:75:25:9f:a0:f1:24:
                    30:3b:88:68:3f:aa:6d:f4:18:88:9a:ba:9d:d3:b6:
                    7d:1f:0b:fa:1a:52:d9:b0:d7:fb:80:6a:a8:0f:0b:
                    a3:c3:88:5e:84:18:cb:ed:18:3c:78:91:3c:50:c1:
                    22:8c:41:b3:47:15:b7:ed:49:5f:94:ea:7d:2b:a7:
                    ed:9a:b3:13:ad:04:cc:95:21:9c:85:5e:22:80:a5:
                    c2:bf:d1:fc:38:ae:1d:39:3b:57:63:34:04:e8:57:
                    63:a4:8f:92:ac:a1:de:73:fd:48:82:6f:e6:42:2d:
                    d1:e4:7d:2c:56:4c:e5:37:93:55:2e:c2:b6:7b:14:
                    c0:e2:c7:63:08:7d:de:9c:76:c6:74:c7:bb:83:bd:
                    1c:69:26:2c:f3:fa:f7:e1:55:73:76:0c:80:84:22:
                    9c:c7:cc:e4:25:df:ce:da:b3:08:8b:c4:47:c7:a9:
                    ec:79:44:7c:ee:c5:39:39:44:97:c8:3b:3a:8c:4b:
                    3d:81:b5:84:dc:18:7b:23:62:aa:64:08:5e:5a:da:
                    3a:08:df:83:d6:7b:22:d1:e1:f7:c8:d2:ef:b3:c0:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F1:47:F8:E3:1E:0D:F0:8A:1D:97:99:E9:AB:AA:84:35:8B:1D:1B
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:6c:e6:75:fe:7a:20:32:77:f2:2e:9a:9f:42:59:88:69:e2:
         9e:10:ae:c0:72:49:ef:6c:f7:7c:e9:94:38:fe:9a:3e:f9:e4:
         bc:c4:c7:45:36:72:02:88:09:95:b0:cc:b8:e2:9c:da:8e:3b:
         70:be:4d:89:6c:01:d1:22:49:e9:7a:10:2f:cb:1c:a4:ea:78:
         50:7e:fd:a2:f3:b7:a5:e3:1d:0b:30:a0:04:ed:fe:df:de:b2:
         a3:26:d0:01:94:f4:31:92:c8:3c:d6:8b:c7:b2:7f:32:c3:09:
         94:1a:16:83:6d:56:36:0f:5a:92:e8:24:bc:91:3d:72:b3:6c:
         52:61:33:21:91:e4:c7:98:76:dc:0b:0d:c8:e4:da:d9:a9:87:
         f1:4b:5a:f7:86:bb:e9:43:ff:a5:c2:28:a4:d0:46:c7:76:9a:
         2d:f3:96:8f:8b:16:ef:f9:ef:84:d8:6f:1c:bc:48:2b:a3:be:
         3c:e6:fd:f7:9f:da:9b:3a:6a:f5:34:87:d4:30:f7:75:a0:c2:
         df:08:45:96:06:8c:c1:a3:f6:8c:6c:c9:aa:21:2d:4c:7d:f2:
         bf:00:50:d1:8d:9e:a8:f8:d3:fb:9e:09:78:06:8f:c6:36:0d:
         1e:db:eb:bf:e8:93:f2:00:24:f2:61:6c:2b:a0:8d:e4:21:a0:
         7e:ab:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:17:42 2025 by rpki-client