Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211754.roa
File:                     AS211754.roa (raw, json)
Hash identifier:          JSxhho+0diB0bGH6VQOJILNhzh+XIyUL3/g6vA2ZznQ=
Subject key identifier:   FA:63:C1:1F:55:80:9C:6F:AB:56:E0:03:E7:63:5D:F4:D5:C5:3C:2F
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       777292BE54EF7A774AB63B2B3F5B05DCA07A7570
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211754.roa
Signing time:             Fri 04 Jul 2025 06:53:14 +0000
ROA not before:           Fri 04 Jul 2025 06:48:14 +0000
ROA not after:            Fri 03 Jul 2026 06:53:14 +0000
asID:                     211754
IP address blocks:        2a05:dfc1:a500::/40 maxlen: 48
                          2a05:dfc1:a600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:72:92:be:54:ef:7a:77:4a:b6:3b:2b:3f:5b:05:dc:a0:7a:75:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:14 2025 GMT
            Not After : Jul  3 06:53:14 2026 GMT
        Subject: CN=FA63C11F55809C6FAB56E003E7635DF4D5C53C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:82:ee:b8:06:30:14:4e:4e:60:d9:9d:e1:
                    07:ce:b4:79:c0:29:7c:a4:1e:2d:cb:f6:09:1b:fb:
                    33:c2:9b:f0:b2:05:24:eb:36:05:fe:aa:34:f8:c3:
                    b4:25:cc:be:9c:2a:71:c0:03:30:7e:5c:87:5c:9b:
                    68:07:3e:0a:00:83:c0:7f:c8:47:40:9f:ac:ee:2b:
                    0b:df:bb:fc:f4:0b:03:ef:e2:99:d2:00:1d:a2:44:
                    72:61:c6:3d:b2:22:57:da:e8:89:d3:e5:c7:c0:f0:
                    e7:98:28:99:b0:ea:13:60:a0:1a:e5:91:40:f7:79:
                    36:b9:da:fc:30:31:27:43:84:67:e6:92:e4:1c:dc:
                    93:f0:fe:98:ef:7c:55:c7:88:6b:6d:0c:fe:fb:10:
                    94:f7:62:76:65:32:e7:e9:f2:a2:15:4f:9e:24:0c:
                    f0:5e:66:b3:a6:9f:10:7e:69:c0:c3:5b:d8:19:87:
                    f8:fd:ef:91:3c:55:e6:27:ae:73:e8:a5:40:2f:2e:
                    e7:1c:50:67:e1:0c:c7:7a:9f:12:85:91:66:9a:8e:
                    94:af:be:1d:0f:1a:cb:29:0a:0a:1d:50:12:b2:ea:
                    a8:1c:8c:c1:5a:0c:23:dd:ba:25:c7:59:be:fb:5d:
                    73:10:55:e4:90:23:62:9c:4c:c3:3d:e0:60:e7:85:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:63:C1:1F:55:80:9C:6F:AB:56:E0:03:E7:63:5D:F4:D5:C5:3C:2F
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211754.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:a500::-2a05:dfc1:a6ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         bd:9e:56:0f:0d:b2:14:8e:bd:36:1b:d5:78:d0:49:d2:6b:27:
         c7:a8:f4:3f:91:dc:d5:57:25:d7:32:cd:af:bb:7c:e9:cf:bc:
         8f:a4:7c:54:22:6e:57:96:31:da:ec:cc:43:21:3b:80:bf:50:
         92:c3:d6:42:29:e3:43:26:22:db:bf:3b:c3:06:dc:c5:e0:96:
         6e:42:02:aa:a6:b0:c8:8f:80:4e:46:03:25:37:11:ed:03:21:
         6a:5c:18:83:be:e6:0e:55:88:e3:3b:75:a1:4b:b8:26:50:ab:
         77:39:e4:f3:b2:d2:a1:65:f1:f6:64:a2:c6:8a:af:03:b8:4d:
         f5:05:8e:0c:83:26:1b:6b:9d:ae:66:ca:fc:5a:15:dd:f3:a8:
         c0:2a:67:ca:fd:83:2e:27:09:57:44:b8:52:4d:84:a4:d5:2d:
         21:fb:16:c5:70:87:e2:02:03:31:22:f6:b9:d1:07:e3:2d:de:
         02:71:da:f5:f6:6e:59:25:55:cd:65:8d:0b:32:59:ac:86:7d:
         0c:ee:a1:9b:a1:3d:c2:1a:c8:ca:b8:ff:ff:83:9c:ce:70:e5:
         8b:01:fe:63:fe:a3:60:2c:14:70:f6:15:86:ab:05:b0:12:cf:
         6b:e4:c9:3b:86:13:8b:23:27:40:09:8b:76:d6:13:d9:55:f7:
         62:6f:91:fa
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUd3KSvlTvendKtjsrP1sF3KB6dXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTRaFw0yNjA3MDMwNjUzMTRaMDMxMTAvBgNV
BAMTKEZBNjNDMTFGNTU4MDlDNkZBQjU2RTAwM0U3NjM1REY0RDVDNTNDMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNoLuuAYwFE5OYNmd4QfOtHnA
KXykHi3L9gkb+zPCm/CyBSTrNgX+qjT4w7QlzL6cKnHAAzB+XIdcm2gHPgoAg8B/
yEdAn6zuKwvfu/z0CwPv4pnSAB2iRHJhxj2yIlfa6InT5cfA8OeYKJmw6hNgoBrl
kUD3eTa52vwwMSdDhGfmkuQc3JPw/pjvfFXHiGttDP77EJT3YnZlMufp8qIVT54k
DPBeZrOmnxB+acDDW9gZh/j975E8VeYnrnPopUAvLuccUGfhDMd6nxKFkWaajpSv
vh0PGsspCgodUBKy6qgcjMFaDCPduiXHWb77XXMQVeSQI2KcTMM94GDnhV8XAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQU+mPBH1WAnG+rVuAD52Nd9NXFPC8wHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjExNzU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBd/BpQMGACoF38GmMA0GCSqGSIb3DQEB
CwUAA4IBAQC9nlYPDbIUjr02G9V40EnSayfHqPQ/kdzVVyXXMs2vu3zpz7yPpHxU
Im5XljHa7MxDITuAv1CSw9ZCKeNDJiLbvzvDBtzF4JZuQgKqprDIj4BORgMlNxHt
AyFqXBiDvuYOVYjjO3WhS7gmUKt3OeTzstKhZfH2ZKLGiq8DuE31BY4MgyYba52u
Zsr8WhXd86jAKmfK/YMuJwlXRLhSTYSk1S0h+xbFcIfiAgMxIva50QfjLd4Ccdr1
9m5ZJVXNZY0LMlmshn0M7qGboT3CGsjKuP//g5zOcOWLAf5j/qNgLBRw9hWGqwWw
Es9r5Mk7hhOLIydACYt21hPZVfdib5H6
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:08:28 2025 by rpki-client