Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206218.roa
File:                     AS206218.roa (raw, json)
Hash identifier:          mmJcprgVEvbPKSnq/CmyNlQ5xA8X39Cpmv9970ZStKs=
Subject key identifier:   78:BC:0C:5D:29:0C:1D:F2:AD:0B:FE:3A:66:77:A7:B6:AB:A4:B8:B5
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       5DA1C75EE437C405355B6F867E35F014F92C1E7E
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206218.roa
Signing time:             Fri 04 Jul 2025 06:53:28 +0000
ROA not before:           Fri 04 Jul 2025 06:48:28 +0000
ROA not after:            Fri 03 Jul 2026 06:53:28 +0000
asID:                     206218
IP address blocks:        2a0a:6040:a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a1:c7:5e:e4:37:c4:05:35:5b:6f:86:7e:35:f0:14:f9:2c:1e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:28 2025 GMT
            Not After : Jul  3 06:53:28 2026 GMT
        Subject: CN=78BC0C5D290C1DF2AD0BFE3A6677A7B6ABA4B8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:94:08:c8:fd:2d:d9:4e:d4:82:44:aa:a8:ca:
                    e0:83:c1:69:83:dc:3f:56:8d:ef:eb:5b:75:ae:eb:
                    b1:ec:d0:c8:90:aa:b6:a8:f1:43:6d:3f:52:be:2f:
                    28:ac:7a:ef:fa:d5:20:63:67:ee:55:fb:41:a4:8d:
                    47:a5:06:17:f0:07:7a:0a:26:41:54:f4:17:af:cf:
                    79:59:99:c2:62:cb:0b:e6:1a:1d:88:4a:a7:1a:98:
                    16:94:31:53:e4:4d:0d:c5:13:c5:77:e5:9b:ea:0c:
                    9f:0c:4c:20:c4:60:15:5f:06:ba:f9:5f:f3:a4:d7:
                    19:06:de:53:19:0d:db:7b:bf:38:b8:ea:ac:20:c1:
                    55:8b:3c:4b:9d:7e:4c:e0:e0:3d:df:e1:8e:71:36:
                    f3:eb:b3:7c:c4:ac:89:76:d2:00:38:5c:3d:ad:4c:
                    22:7a:dc:a9:46:60:12:97:20:76:b9:ba:d3:8a:4e:
                    ac:74:45:c8:9c:36:67:cd:e8:17:9c:d8:85:38:16:
                    9f:7c:9f:53:6c:37:44:fe:7c:e7:c4:e5:31:97:85:
                    c5:c2:06:b4:bc:8a:ef:42:01:6f:5a:25:91:b7:71:
                    ee:56:8c:dc:b4:af:a5:19:a3:8e:34:9d:eb:b7:93:
                    e8:df:57:35:73:27:74:cf:49:46:80:90:b8:b7:ad:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BC:0C:5D:29:0C:1D:F2:AD:0B:FE:3A:66:77:A7:B6:AB:A4:B8:B5
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:50:3e:6e:bc:f4:f8:a4:1f:6e:ae:4c:69:55:76:ca:11:30:
         00:29:b3:2f:4b:39:f5:0c:15:6e:46:5a:85:dc:a7:8c:13:df:
         b8:0e:a4:56:af:99:c6:b9:40:d0:ca:0c:4b:5e:37:80:7b:ea:
         fc:d4:49:8c:bc:d0:2a:cf:3e:0e:4b:48:95:e6:08:5e:65:d2:
         fb:ab:75:6b:65:2c:82:d7:78:0f:90:ac:d0:e5:1a:87:e6:2c:
         54:47:ea:ee:24:fb:0f:b8:e1:c3:de:c8:ac:51:35:85:d5:25:
         87:c7:7b:48:fd:05:59:66:c9:95:d6:c7:1a:52:2a:b8:a5:f2:
         f6:3c:5a:38:23:c9:11:87:75:e0:16:05:ce:28:fd:2a:b4:f4:
         fe:41:df:55:8d:d4:c5:55:79:7d:92:c1:64:f5:ea:f2:4b:a2:
         5b:d3:14:ac:95:80:c8:c7:d3:a2:86:c1:77:04:65:1e:bf:58:
         4b:bf:15:5f:ec:1d:fc:74:b8:f1:49:4c:d1:9e:93:73:76:ce:
         9c:c1:58:16:00:9b:29:a2:b2:46:34:ca:f3:34:9b:a8:54:c2:
         28:5c:59:f6:a8:a5:16:de:56:a5:40:0c:6c:98:59:81:5b:ea:
         6e:99:2e:34:b3:eb:61:65:ce:4b:7e:f6:d6:c1:40:4c:26:c6:
         4c:78:94:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:09:51 2025 by rpki-client