Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS205987.roa
File:                     AS205987.roa (raw, json)
Hash identifier:          r5j2JMb569yJ/DkYXjFUNK1gi2lAA5dpPPTdEF6k0wo=
Subject key identifier:   62:95:7D:57:BD:22:0D:78:FB:D5:D8:EB:78:77:85:15:5E:1D:9B:CD
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       567111D15E0C599BAF25B742B2B3F0D1D39C80
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS205987.roa
Signing time:             Fri 04 Jul 2025 06:53:00 +0000
ROA not before:           Fri 04 Jul 2025 06:48:00 +0000
ROA not after:            Fri 03 Jul 2026 06:53:00 +0000
asID:                     205987
IP address blocks:        2a0a:6040:de00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:71:11:d1:5e:0c:59:9b:af:25:b7:42:b2:b3:f0:d1:d3:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:00 2025 GMT
            Not After : Jul  3 06:53:00 2026 GMT
        Subject: CN=62957D57BD220D78FBD5D8EB787785155E1D9BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:85:ca:c5:45:18:32:bd:72:88:ac:c7:c9:
                    68:98:61:68:34:53:8c:83:45:04:b0:c4:53:0d:34:
                    63:53:99:b9:95:f6:00:a2:b9:e0:69:0c:6d:27:f6:
                    8f:d0:74:c4:21:0a:f4:ca:73:7b:e2:f5:60:6b:50:
                    ae:9c:ce:d1:cc:86:78:80:03:9c:c1:d9:3b:cb:ec:
                    60:dd:91:90:2b:d7:c9:fd:60:c2:f6:7f:a0:35:cb:
                    2e:80:bb:bb:7f:24:35:cc:fd:a4:f0:69:d5:7f:2b:
                    e5:d8:bd:56:80:02:3c:61:40:85:c1:ba:54:de:ee:
                    94:4d:51:c0:84:d1:52:51:ce:6d:a2:3e:04:49:1e:
                    f0:a9:eb:fc:6a:83:27:66:d1:c2:e2:18:75:7b:5c:
                    6e:a1:96:9d:7a:04:26:35:e3:ef:82:3d:e9:12:9f:
                    43:bb:06:4f:8e:b5:42:b3:59:3d:bf:bb:22:35:6a:
                    87:a6:31:a9:e8:58:d3:24:50:ba:ef:3e:4a:4c:92:
                    1f:dd:9b:86:27:d3:fd:50:3a:6a:15:a0:0f:a2:7e:
                    82:eb:26:6b:b7:43:d2:ba:ec:ff:2e:02:99:7e:7a:
                    6a:e0:79:10:90:0a:70:f7:80:18:1a:e6:9f:31:0d:
                    18:5d:ca:6c:86:b0:5a:64:57:cc:af:94:03:38:04:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:95:7D:57:BD:22:0D:78:FB:D5:D8:EB:78:77:85:15:5E:1D:9B:CD
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS205987.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:9b:5a:89:23:84:c0:9d:74:9a:45:a5:be:69:f9:03:e9:e6:
         05:8c:47:63:e2:01:2e:e3:6e:7b:be:04:fb:f8:0f:0c:f8:83:
         21:bd:e9:fd:75:5d:f3:53:5a:ad:67:85:62:47:bc:b1:1b:e9:
         82:23:7b:1b:45:3c:9c:93:d5:68:d3:d3:30:1d:18:0c:c7:83:
         18:81:98:11:01:5b:ed:42:d3:ba:51:48:1b:67:5b:81:2c:6c:
         68:d1:a1:e6:a0:7b:6f:b5:47:7d:f6:5d:ec:5b:db:fa:12:0b:
         98:09:61:3c:c0:9d:b2:f3:9b:db:d4:0a:d1:f7:d2:00:17:69:
         e3:37:12:30:ed:2d:a0:27:46:6e:a9:0e:6a:2c:7e:14:d6:e7:
         14:50:08:a8:87:f5:1f:d6:f2:c0:2d:1c:54:e6:9e:4d:db:70:
         cf:91:f8:29:ba:54:5c:5c:4d:b0:6a:e1:03:8a:7a:b9:f4:e5:
         0a:42:97:a6:3d:fa:18:ea:6c:9c:a6:9a:17:af:64:fc:b3:b6:
         87:18:19:14:44:c1:fe:10:3b:b6:b9:ee:d3:55:aa:8d:6f:a4:
         84:99:42:2e:34:f6:f5:f2:cd:28:27:9e:90:45:aa:8e:28:73:
         fb:31:50:1d:11:13:9a:4c:ef:d9:68:3d:d9:15:ca:93:35:d0:
         fa:c8:8b:6c
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgITVnER0V4MWZuvJbdCsrPw0dOcgDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg4RkMzQ0ZCNURGM0U4RjcyMUMwOEI4QjVGRTdGNjFENjdC
MEJFMTNCMB4XDTI1MDcwNDA2NDgwMFoXDTI2MDcwMzA2NTMwMFowMzExMC8GA1UE
AxMoNjI5NTdENTdCRDIyMEQ3OEZCRDVEOEVCNzg3Nzg1MTU1RTFEOUJDRDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ7YhcrFRRgyvXKIrMfJaJhhaDRT
jINFBLDEUw00Y1OZuZX2AKK54GkMbSf2j9B0xCEK9Mpze+L1YGtQrpzO0cyGeIAD
nMHZO8vsYN2RkCvXyf1gwvZ/oDXLLoC7u38kNcz9pPBp1X8r5di9VoACPGFAhcG6
VN7ulE1RwITRUlHObaI+BEke8Knr/GqDJ2bRwuIYdXtcbqGWnXoEJjXj74I96RKf
Q7sGT461QrNZPb+7IjVqh6YxqehY0yRQuu8+SkySH92bhifT/VA6ahWgD6J+gusm
a7dD0rrs/y4CmX56auB5EJAKcPeAGBrmnzENGF3KbIawWmRXzK+UAzgEjkcCAwEA
AaOCAfQwggHwMB0GA1UdDgQWBBRilX1XvSINePvV2Ot4d4UVXh2bzTAfBgNVHSME
GDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNVHQ8BAf8EBAMCB4AwbwYDVR0f
BGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9D
TE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4RjcyMUMwOEI4QjVGRTdGNjFENjdC
MEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURGM0U4RjcyMUMwOEI4QjVGRTdG
NjFENjdCMEJFMTNCLmNlcjBaBggrBgEFBQcBCwROMEwwSgYIKwYBBQUHMAuGPnJz
eW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQv
QVMyMDU5ODcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBA3jANBgkqhkiG9w0BAQsFAAOCAQEArZta
iSOEwJ10mkWlvmn5A+nmBYxHY+IBLuNue74E+/gPDPiDIb3p/XVd81NarWeFYke8
sRvpgiN7G0U8nJPVaNPTMB0YDMeDGIGYEQFb7ULTulFIG2dbgSxsaNGh5qB7b7VH
ffZd7Fvb+hILmAlhPMCdsvOb29QK0ffSABdp4zcSMO0toCdGbqkOaix+FNbnFFAI
qIf1H9bywC0cVOaeTdtwz5H4KbpUXFxNsGrhA4p6ufTlCkKXpj36GOpsnKaaF69k
/LO2hxgZFETB/hA7trnu01WqjW+khJlCLjT29fLNKCeekEWqjihz+zFQHRETmkzv
2Wg92RXKkzXQ+siLbA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:13:28 2025 by rpki-client