Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210110.roa
File:                     AS210110.roa (raw, json)
Hash identifier:          5AbmgCt2luIOvuBeXpeUfBSRot/Sjzi2qvbeKLKAdBU=
Subject key identifier:   00:80:A9:78:05:93:4F:C5:8F:8A:6C:C4:F9:82:14:19:57:E8:1D:FF
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       2C922152692F0020B5197DEE2FD3B39D9525D266
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210110.roa
Signing time:             Fri 04 Jul 2025 06:53:23 +0000
ROA not before:           Fri 04 Jul 2025 06:48:23 +0000
ROA not after:            Fri 03 Jul 2026 06:53:23 +0000
asID:                     210110
IP address blocks:        2a06:9f81:5701::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:92:21:52:69:2f:00:20:b5:19:7d:ee:2f:d3:b3:9d:95:25:d2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:23 2025 GMT
            Not After : Jul  3 06:53:23 2026 GMT
        Subject: CN=0080A97805934FC58F8A6CC4F982141957E81DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:22:60:60:2f:a1:dd:e9:fe:e7:34:e9:24:
                    c7:18:28:51:44:e8:66:d4:12:3d:3f:5c:48:1b:ef:
                    31:3f:48:99:a2:b0:71:2b:ac:48:31:ba:42:ce:ae:
                    7d:7b:66:54:62:ff:93:bc:1b:27:c5:d4:6f:c2:18:
                    25:59:b6:7b:e6:f7:63:aa:26:57:37:56:f4:35:c1:
                    64:3f:53:5f:af:a8:20:f5:b4:65:06:92:0e:51:15:
                    a0:72:e4:b6:fb:1b:8a:b9:df:00:75:6c:c9:00:a5:
                    f8:c8:17:5d:6d:5f:53:17:02:3b:d5:8e:b7:19:00:
                    a0:d2:64:39:19:04:b1:8f:00:1f:e5:a0:5b:59:5e:
                    d4:c6:7e:fb:5e:bd:b2:af:b0:d5:79:8d:13:a3:55:
                    f5:c0:c1:28:57:6c:57:df:bf:3b:67:15:d2:69:e0:
                    1f:04:b8:7d:02:80:ac:c0:80:89:6f:8a:06:c5:76:
                    c4:ed:ac:cd:17:60:44:98:d6:e7:35:bd:d0:d0:bb:
                    47:d8:da:81:f6:18:e1:cc:b0:c7:fc:cb:bb:a3:b9:
                    f5:1b:2a:e1:88:2e:16:56:99:3e:63:d7:bf:85:9a:
                    24:0c:3e:a2:ae:2c:b1:f5:ec:4e:4e:d2:f8:41:fe:
                    28:c4:fd:43:40:38:aa:c0:86:98:8b:44:3f:3d:04:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:80:A9:78:05:93:4F:C5:8F:8A:6C:C4:F9:82:14:19:57:E8:1D:FF
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:5701::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:58:1f:1b:4a:25:0c:39:92:0d:f9:11:04:2f:e1:bc:b8:48:
         dd:52:95:c1:03:93:85:dd:0c:9c:d4:cb:e2:da:1a:dd:cd:0a:
         97:4b:ee:ec:f9:ff:73:1e:24:6d:4d:51:29:2a:0e:32:7d:3a:
         41:dd:a4:31:2c:35:64:e6:a7:1c:a8:20:0c:8a:6a:b5:cf:40:
         fd:3a:da:dc:49:cc:57:00:6d:89:10:b7:63:0c:47:c0:8f:68:
         8a:fb:bf:de:4f:5e:55:09:13:5d:54:cf:9e:8d:24:e0:c8:95:
         4e:1e:7e:97:c5:7b:f9:56:55:ce:d6:a8:af:a0:83:a5:f9:70:
         42:7b:37:d8:f1:ca:3d:4f:ac:4b:9f:5a:df:99:bc:7c:bd:fd:
         c4:20:cb:8e:c7:f1:d2:8c:bd:08:8a:e9:bf:6d:97:8d:4d:bd:
         49:27:e3:b7:4a:76:a9:e4:78:e7:21:12:c4:e4:36:d8:db:ad:
         96:c2:4c:14:88:1e:aa:33:54:7f:66:53:af:e8:8b:04:dc:bb:
         21:f9:8c:ca:44:21:25:4f:7d:19:2a:4f:2e:42:5e:9f:e5:45:
         ec:0c:cb:4b:26:f7:bf:7a:c1:1f:8c:81:40:15:ea:47:48:0c:
         62:8d:6b:61:65:ef:71:8f:40:f2:26:0c:59:fd:76:43:08:79:
         2e:43:8f:ba
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIULJIhUmkvACC1GX3uL9OznZUl0mYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjNaFw0yNjA3MDMwNjUzMjNaMDMxMTAvBgNV
BAMTKDAwODBBOTc4MDU5MzRGQzU4RjhBNkNDNEY5ODIxNDE5NTdFODFERkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+CJgYC+h3en+5zTpJMcYKFFE
6GbUEj0/XEgb7zE/SJmisHErrEgxukLOrn17ZlRi/5O8GyfF1G/CGCVZtnvm92Oq
Jlc3VvQ1wWQ/U1+vqCD1tGUGkg5RFaBy5Lb7G4q53wB1bMkApfjIF11tX1MXAjvV
jrcZAKDSZDkZBLGPAB/loFtZXtTGfvtevbKvsNV5jROjVfXAwShXbFffvztnFdJp
4B8EuH0CgKzAgIlvigbFdsTtrM0XYESY1uc1vdDQu0fY2oH2GOHMsMf8y7ujufUb
KuGILhZWmT5j17+FmiQMPqKuLLH17E5O0vhB/ijE/UNAOKrAhpiLRD89BFFdAgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUAICpeAWTT8WPimzE+YIUGVfoHf8wHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjEwMTEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgafgVcBMA0GCSqGSIb3DQEBCwUAA4IBAQA5
WB8bSiUMOZIN+REEL+G8uEjdUpXBA5OF3Qyc1Mvi2hrdzQqXS+7s+f9zHiRtTVEp
Kg4yfTpB3aQxLDVk5qccqCAMimq1z0D9OtrcScxXAG2JELdjDEfAj2iK+7/eT15V
CRNdVM+ejSTgyJVOHn6XxXv5VlXO1qivoIOl+XBCezfY8co9T6xLn1rfmbx8vf3E
IMuOx/HSjL0Iium/bZeNTb1JJ+O3Snap5HjnIRLE5DbY262WwkwUiB6qM1R/ZlOv
6IsE3Lsh+YzKRCElT30ZKk8uQl6f5UXsDMtLJve/esEfjIFAFepHSAxijWthZe9x
j0DyJgxZ/XZDCHkuQ4+6
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:14:54 2025 by rpki-client