Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212332.roa
File:                     AS212332.roa (raw, json)
Hash identifier:          MTBRtrbTXf/EXfuNRcu6Ec5t7MSS3WYEevVxxOkkc4k=
Subject key identifier:   34:73:29:64:AF:C5:3D:EB:D1:94:61:9D:31:36:78:87:8B:DE:87:D6
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       3B7E07A98E973098421B7B7088A1FE744E367011
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212332.roa
Signing time:             Fri 04 Jul 2025 06:52:59 +0000
ROA not before:           Fri 04 Jul 2025 06:47:59 +0000
ROA not after:            Fri 03 Jul 2026 06:52:59 +0000
asID:                     212332
IP address blocks:        2a05:dfc1:8a00::/40 maxlen: 48
                          2a06:9f81:1500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7e:07:a9:8e:97:30:98:42:1b:7b:70:88:a1:fe:74:4e:36:70:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:47:59 2025 GMT
            Not After : Jul  3 06:52:59 2026 GMT
        Subject: CN=34732964AFC53DEBD194619D313678878BDE87D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:be:06:d1:7f:35:47:ae:78:a4:3b:00:b0:
                    03:18:64:8d:65:be:fe:d3:f4:2f:b7:15:75:1f:8e:
                    30:92:cc:2b:1a:a3:b5:dd:94:67:62:d1:dd:7d:97:
                    7b:9c:ec:b5:d5:06:bb:8a:92:fe:fb:cd:68:d4:ff:
                    eb:77:be:ea:b4:90:3d:c5:d1:4e:08:bc:e2:5e:7b:
                    ce:87:d4:07:fa:3a:dd:2e:ef:9a:4b:d8:8d:15:67:
                    19:40:48:6f:30:b2:b7:29:7f:b3:5a:ad:76:e8:cd:
                    ba:ea:5b:da:53:c0:24:42:54:9d:00:57:a0:71:1c:
                    63:d4:21:a8:cd:eb:8f:1b:1f:64:d8:39:70:bd:f4:
                    d5:4b:1d:9d:f4:42:b6:e2:f4:7e:43:d7:90:1a:d7:
                    33:0d:4a:0d:23:cf:7e:16:e3:87:5b:60:9e:f7:88:
                    47:98:c2:3c:30:36:fa:c8:8f:2d:ca:ea:ed:3c:07:
                    10:6f:7a:f3:f5:11:3f:f6:8d:f4:26:5a:77:a5:ba:
                    19:f4:09:21:d1:f2:85:95:97:e7:7f:30:70:7c:27:
                    c0:c5:74:92:e0:a1:c7:df:51:93:79:ed:c3:cd:0a:
                    0e:d7:3b:33:15:86:7f:e5:ba:eb:52:0d:cd:fb:e9:
                    5c:fa:77:db:e2:cf:b6:bd:dc:ed:b4:ae:3e:57:a1:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:73:29:64:AF:C5:3D:EB:D1:94:61:9D:31:36:78:87:8B:DE:87:D6
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8a00::/40
                  2a06:9f81:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:73:06:94:73:6e:96:50:99:0d:d1:1e:16:25:d8:ff:fd:
         8d:c5:07:66:67:b5:04:33:e1:a0:fd:26:c5:7b:5a:74:f0:2d:
         60:b7:ac:38:88:3d:83:70:d1:c0:cc:19:36:b9:89:82:75:cf:
         ae:04:dc:9e:e9:cc:4b:37:5e:4b:ba:4b:30:71:15:f9:b8:01:
         2b:c0:89:3b:ec:53:5f:e1:57:90:49:1b:bc:ed:50:e6:81:41:
         e4:7a:78:1d:95:d3:3d:82:c1:1c:e7:3a:bf:32:9b:be:23:a6:
         75:0e:ba:f0:7d:24:ab:cb:bf:99:b5:3f:9e:3e:e1:2c:4a:13:
         67:cd:92:2b:2c:f4:b7:5f:8e:43:21:2f:ba:c5:6a:64:10:81:
         ec:c0:f2:da:e0:8a:0b:85:df:f2:6d:7a:19:1f:e6:8e:18:22:
         22:72:38:62:5c:ce:66:b7:52:b3:3a:5c:46:bc:47:1e:18:be:
         83:65:43:59:74:84:2f:b9:ee:88:f1:01:35:7b:30:40:ed:b8:
         4d:40:f1:5d:50:22:28:9f:0f:65:14:bf:eb:cb:c7:4b:65:46:
         6d:21:52:99:1d:86:e8:22:c8:bb:e0:24:df:04:a2:d4:4d:05:
         27:4f:a6:36:37:cc:59:79:96:ba:7a:0b:dd:16:c4:54:b7:6a:
         51:01:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:14:56 2025 by rpki-client