Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214674.roa
File:                     AS214674.roa (raw, json)
Hash identifier:          HJUJ+Z2lSAENHfPpagl/+VeMT4wCEDMShinA5nv1Yiw=
Subject key identifier:   C9:55:76:69:FA:D9:AA:81:16:24:92:B6:53:E6:11:18:BA:CE:73:1E
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       4B65AF02B7884D84154112143E89CC24A3CB7E73
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214674.roa
Signing time:             Fri 04 Jul 2025 06:53:15 +0000
ROA not before:           Fri 04 Jul 2025 06:48:15 +0000
ROA not after:            Fri 03 Jul 2026 06:53:15 +0000
asID:                     214674
IP address blocks:        2a06:9f81:5100::/40 maxlen: 48
                          2a06:9f81:5400::/40 maxlen: 48
                          2a06:9f81:6100::/40 maxlen: 48
                          2a06:9f81:6400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:65:af:02:b7:88:4d:84:15:41:12:14:3e:89:cc:24:a3:cb:7e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:15 2025 GMT
            Not After : Jul  3 06:53:15 2026 GMT
        Subject: CN=C9557669FAD9AA81162492B653E61118BACE731E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e3:97:49:83:42:05:0a:81:28:01:6e:26:92:
                    5b:f5:ef:bc:a0:b9:f9:46:8a:aa:0c:16:d2:3c:6d:
                    2b:26:11:de:d3:8a:a6:c0:f8:53:4b:d0:e0:54:e6:
                    a6:8f:d4:bf:8d:b6:d3:65:45:cb:f1:88:29:92:45:
                    31:40:e7:0b:d8:d5:cb:3c:74:30:d0:a9:73:60:ba:
                    52:86:68:58:23:f9:7e:00:7e:5f:89:64:f9:07:29:
                    73:c1:a8:d5:14:50:cc:18:83:d0:69:c6:d6:f0:d3:
                    6d:49:e5:63:92:0b:39:5d:12:3a:8f:1c:9f:40:ac:
                    5e:1d:45:5e:3f:61:da:b0:62:ae:03:ea:6c:04:87:
                    6e:a1:41:c7:df:e1:46:dc:34:f2:2b:09:6c:28:63:
                    20:bd:af:19:a7:b4:8b:06:3e:cf:95:94:33:6f:63:
                    28:dc:98:77:04:3c:80:7d:bf:7d:39:40:d3:73:78:
                    d6:f5:ab:06:ce:9f:ce:e2:82:20:d9:3c:87:26:ae:
                    24:62:4c:35:ec:ac:5f:a5:73:b1:51:84:5e:6f:49:
                    7c:f0:5b:a5:5b:94:8f:16:49:af:4a:a2:a2:5c:78:
                    b8:ee:75:a0:2a:33:70:36:6c:1d:e5:d6:ae:ac:e7:
                    57:00:6f:17:44:81:be:33:1a:f9:93:f3:26:01:d9:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:55:76:69:FA:D9:AA:81:16:24:92:B6:53:E6:11:18:BA:CE:73:1E
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214674.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:5100::/40
                  2a06:9f81:5400::/40
                  2a06:9f81:6100::/40
                  2a06:9f81:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:88:d7:93:f9:5a:41:a2:8a:14:f5:04:08:5f:2a:18:ab:08:
         f8:77:90:0b:db:2e:8b:76:5d:53:0c:25:72:99:6f:84:0a:28:
         63:f2:c8:a2:23:15:f7:99:4b:08:35:25:a1:0f:30:89:64:1c:
         48:1d:9f:7f:a5:be:cd:9d:00:2e:e9:6b:85:bd:71:25:b0:0a:
         9b:e2:81:2e:34:d0:40:1a:25:9b:0c:2b:88:96:fe:a3:f6:93:
         1b:21:22:a9:42:be:da:3e:73:d4:9e:dc:3f:00:15:37:1e:70:
         9d:26:a8:b5:07:58:38:16:e8:79:9d:32:80:43:61:58:4b:18:
         94:2b:32:85:b9:f9:2d:99:a7:2e:c8:67:f9:ff:9b:eb:94:72:
         fe:d1:ca:8e:2a:fe:c9:df:7f:10:da:57:b7:4a:bd:51:43:5f:
         9a:2b:be:2f:98:83:b1:d5:ec:61:6f:da:87:f2:7e:49:15:8c:
         aa:77:87:eb:e2:31:48:68:73:c6:bd:e9:ed:ea:13:63:95:f1:
         65:b0:03:41:70:e3:57:fd:94:a1:35:27:45:a0:aa:4a:80:69:
         72:ea:23:51:1a:30:2f:7f:a1:ea:36:af:f6:54:d1:12:5c:aa:
         5d:5b:5e:44:02:74:63:bc:75:f6:c3:f5:96:52:f4:97:9d:62:
         1d:b8:e8:c2
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUS2WvAreITYQVQRIUPonMJKPLfnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTVaFw0yNjA3MDMwNjUzMTVaMDMxMTAvBgNV
BAMTKEM5NTU3NjY5RkFEOUFBODExNjI0OTJCNjUzRTYxMTE4QkFDRTczMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj45dJg0IFCoEoAW4mklv177yg
uflGiqoMFtI8bSsmEd7TiqbA+FNL0OBU5qaP1L+NttNlRcvxiCmSRTFA5wvY1cs8
dDDQqXNgulKGaFgj+X4Afl+JZPkHKXPBqNUUUMwYg9Bpxtbw021J5WOSCzldEjqP
HJ9ArF4dRV4/YdqwYq4D6mwEh26hQcff4UbcNPIrCWwoYyC9rxmntIsGPs+VlDNv
YyjcmHcEPIB9v305QNNzeNb1qwbOn87igiDZPIcmriRiTDXsrF+lc7FRhF5vSXzw
W6VblI8WSa9KoqJceLjudaAqM3A2bB3l1q6s51cAbxdEgb4zGvmT8yYB2d8PAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUyVV2afrZqoEWJJK2U+YRGLrOcx4wHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjE0Njc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF
BwEHAQH/BCowKDAmBAIAAjAgAwYAKgafgVEDBgAqBp+BVAMGACoGn4FhAwYAKgaf
gWQwDQYJKoZIhvcNAQELBQADggEBAG6I15P5WkGiihT1BAhfKhirCPh3kAvbLot2
XVMMJXKZb4QKKGPyyKIjFfeZSwg1JaEPMIlkHEgdn3+lvs2dAC7pa4W9cSWwCpvi
gS400EAaJZsMK4iW/qP2kxshIqlCvto+c9Se3D8AFTcecJ0mqLUHWDgW6HmdMoBD
YVhLGJQrMoW5+S2Zpy7IZ/n/m+uUcv7Ryo4q/snffxDaV7dKvVFDX5orvi+Yg7HV
7GFv2ofyfkkVjKp3h+viMUhoc8a96e3qE2OV8WWwA0Fw41f9lKE1J0WgqkqAaXLq
I1EaMC9/oeo2r/ZU0RJcql1bXkQCdGO8dfbD9ZZS9JedYh246MI=
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:09:11 2025 by rpki-client