Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212762.roa
File:                     AS212762.roa (raw, json)
Hash identifier:          Stv7Gdeo3/wRgv7/HR+89Ef1anKkeGpoLhubzTsLwcs=
Subject key identifier:   11:11:AE:80:3A:02:2D:CB:8E:12:70:97:F3:C1:67:AE:FD:01:55:29
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       5A476D593DB182E0CEF86545C8BBE285ACA84CBC
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212762.roa
Signing time:             Fri 04 Jul 2025 06:53:08 +0000
ROA not before:           Fri 04 Jul 2025 06:48:08 +0000
ROA not after:            Fri 03 Jul 2026 06:53:08 +0000
asID:                     212762
IP address blocks:        2a05:dfc1:5500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:47:6d:59:3d:b1:82:e0:ce:f8:65:45:c8:bb:e2:85:ac:a8:4c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:08 2025 GMT
            Not After : Jul  3 06:53:08 2026 GMT
        Subject: CN=1111AE803A022DCB8E127097F3C167AEFD015529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:db:71:7d:5e:0b:49:8f:ac:12:e8:63:db:
                    71:ce:1a:94:e2:b5:4b:67:e1:81:3e:e8:57:2d:5c:
                    89:83:41:9d:de:f4:ef:03:60:ba:3a:85:bc:cd:69:
                    5b:8c:fa:1a:ee:31:3d:33:0c:b5:28:a0:ff:2f:fe:
                    a7:e8:00:9d:b8:d1:2e:6e:2c:2b:4b:9d:0d:63:8a:
                    e3:4c:bb:cc:bb:c2:8f:94:56:c1:52:29:59:01:99:
                    91:03:ec:54:28:d6:b5:03:bc:b0:8f:88:47:96:6f:
                    2b:b2:5f:a6:75:4a:ef:bc:70:87:d7:0a:e9:2c:4c:
                    e0:88:8c:c8:5a:43:84:15:09:80:18:71:df:85:e3:
                    a1:9d:74:35:3b:f7:cc:28:2a:e2:6f:42:54:94:71:
                    2f:da:7d:0f:ce:d0:ba:73:f8:7e:a0:5b:aa:a8:96:
                    c1:ed:37:ee:39:6e:cf:c1:77:36:0e:b3:e4:dc:8e:
                    e1:a2:8d:e3:1d:77:bb:98:b1:ee:85:97:0a:e4:23:
                    90:8c:6a:5e:3b:b1:2b:d4:43:ce:db:85:c9:1d:b9:
                    ed:25:b9:70:a2:4b:aa:5e:be:8a:26:ad:28:98:2d:
                    83:86:68:6a:ac:76:f5:71:91:83:3b:17:21:1e:09:
                    60:8a:ec:49:52:a4:04:6d:37:6b:6b:10:6e:50:c4:
                    c7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:11:AE:80:3A:02:2D:CB:8E:12:70:97:F3:C1:67:AE:FD:01:55:29
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:55:f5:78:39:e2:e6:e7:31:5e:bb:fa:be:9d:ec:23:b9:75:
         04:49:f8:7a:73:99:d0:2e:79:ea:6a:79:cc:1f:cc:c7:30:c4:
         1b:86:79:00:cd:d4:3c:01:6d:ea:db:a4:51:e7:ec:e0:12:d4:
         43:88:c2:3a:2e:97:d3:6b:18:b6:46:ae:08:af:73:0a:91:71:
         95:7c:2a:a4:83:8e:ca:fc:a6:56:28:98:c8:89:20:2d:b5:44:
         94:5c:68:e5:8f:cf:95:b1:ee:ad:77:d1:4c:21:de:0c:5c:35:
         53:a2:e4:8e:c8:6b:8b:de:d7:66:7a:10:8e:a5:8a:25:fa:d7:
         2d:66:53:31:08:5b:6b:68:6b:78:86:34:6d:fe:f5:18:3e:f8:
         30:3f:56:4b:55:38:e6:f5:8e:a8:85:76:18:81:0d:d8:99:a2:
         12:c4:17:58:0c:cc:28:a1:a5:11:56:be:90:2c:de:ba:da:f1:
         29:7a:ca:94:46:b7:b5:ca:48:03:43:27:aa:df:9e:d9:fd:52:
         50:91:56:75:05:2f:72:b7:ea:fe:63:83:e3:a1:69:04:f5:ba:
         d2:b8:7a:4a:57:ae:2c:04:16:40:a3:dc:87:e6:e2:83:b3:f7:
         e4:50:93:01:83:5d:16:be:cd:7e:53:25:80:c9:56:d3:f9:5a:
         db:e5:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:12:45 2025 by rpki-client