Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206016.roa
File:                     AS206016.roa (raw, json)
Hash identifier:          iDUl0TcvonIdtHQLJl/sjdm5zefCZw54cNEBleREuGs=
Subject key identifier:   5B:CC:F9:72:92:6A:C2:49:4A:23:78:44:FF:40:28:48:82:88:52:C7
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       64E1E7A375BB72D088B954187155E03D3E732552
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206016.roa
Signing time:             Fri 04 Jul 2025 06:53:17 +0000
ROA not before:           Fri 04 Jul 2025 06:48:17 +0000
ROA not after:            Fri 03 Jul 2026 06:53:17 +0000
asID:                     206016
IP address blocks:        2a0a:6040:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e1:e7:a3:75:bb:72:d0:88:b9:54:18:71:55:e0:3d:3e:73:25:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:17 2025 GMT
            Not After : Jul  3 06:53:17 2026 GMT
        Subject: CN=5BCCF972926AC2494A237844FF402848828852C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:92:b2:88:aa:93:ab:ba:fa:17:ab:de:5c:
                    79:8c:4e:f8:d8:31:7c:ae:ed:4b:e2:0a:f6:a9:32:
                    8b:7e:fe:a7:d2:b1:43:ab:af:cb:fc:05:40:69:ab:
                    cf:c1:4a:30:79:33:61:d2:a6:4d:0a:6d:ae:d0:cf:
                    b2:bb:fe:60:d0:5f:a5:6d:13:e7:5b:5a:20:46:a7:
                    0b:71:ca:88:d5:1c:91:73:14:27:5c:2f:1c:4a:2e:
                    3e:b8:b7:a0:04:7d:45:87:86:dd:6e:aa:f0:50:ef:
                    8b:fd:e4:e5:2c:a5:07:ae:3b:ff:10:7d:8a:ac:79:
                    be:4d:6d:1c:52:94:56:1c:c2:04:c3:b5:a4:b0:3a:
                    95:e7:4b:3d:35:af:c2:e1:55:35:65:04:52:5f:ef:
                    22:73:6b:61:ba:0a:29:b2:e1:a0:05:9f:6f:d0:75:
                    3b:e0:35:32:e3:7a:61:05:1e:74:3b:7d:b3:ed:6f:
                    4d:41:91:7c:63:9b:37:e5:e4:0f:5e:50:88:8c:89:
                    cd:b6:5a:9e:15:e1:4f:99:13:de:17:b4:9c:44:71:
                    65:37:b8:a0:cd:dd:a0:6a:40:6e:e0:43:75:86:7f:
                    75:a6:ac:41:bb:5c:c3:ae:e9:f5:37:da:da:83:0d:
                    09:ea:85:8a:c9:bc:7b:f5:0a:40:f9:74:0b:9d:34:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CC:F9:72:92:6A:C2:49:4A:23:78:44:FF:40:28:48:82:88:52:C7
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:d0:7a:c3:53:1c:5f:1d:e0:08:88:78:0a:f3:02:d5:e0:22:
         21:72:55:ef:35:f6:52:fd:63:ca:9f:61:ad:c9:b5:ac:75:af:
         89:34:bd:ab:0f:d4:18:c9:3e:8f:67:b5:d1:cc:94:3b:f5:57:
         07:78:24:a1:2a:c1:98:b7:2a:a3:42:cd:00:a5:22:a6:ff:01:
         74:97:17:9a:53:46:2c:ce:5a:f9:de:4d:43:38:13:cd:9f:f5:
         0f:64:26:5c:ef:20:9d:4b:97:88:8a:20:07:54:11:70:58:fa:
         9c:9a:1c:a9:95:f0:68:09:ae:40:db:7f:05:d1:61:18:e7:0b:
         8b:ee:b7:ec:8c:9b:27:fd:57:af:07:90:f8:39:33:02:96:fa:
         97:23:ef:48:e0:3b:5e:6a:bc:15:f2:56:e3:2c:6d:a7:59:6b:
         b7:a6:09:a9:99:2c:d1:cf:98:c2:e6:92:21:1b:81:ae:d8:2c:
         3f:fc:9b:5f:bd:d9:48:7d:87:95:58:3d:14:66:04:ff:da:e7:
         e6:5c:c8:f9:1c:67:84:ef:0e:4e:cf:03:93:7a:1c:7d:7e:7f:
         cd:22:df:5b:c2:83:c0:4d:0a:a0:8c:d9:4b:13:dd:07:2d:c8:
         e8:1c:41:b6:3a:6a:ed:ff:48:3e:c6:93:0b:24:09:f1:fd:00:
         3b:b5:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:09:16 2025 by rpki-client