Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215541.roa
File:                     AS215541.roa (raw, json)
Hash identifier:          XvZWj/w9ANINHEDOojqZ0WZBEhswtS19u6xVKdQnNoU=
Subject key identifier:   90:DC:F6:4F:5C:41:91:AF:5F:22:3A:DC:8B:64:C6:28:D5:11:59:2A
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       0E5BA45C9CD0380D47A35628B698E87DE3A0D0FC
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215541.roa
Signing time:             Fri 04 Jul 2025 06:53:27 +0000
ROA not before:           Fri 04 Jul 2025 06:48:27 +0000
ROA not after:            Fri 03 Jul 2026 06:53:27 +0000
asID:                     215541
IP address blocks:        2a06:9f81:4700::/40 maxlen: 48
                          2a06:9f81:4800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5b:a4:5c:9c:d0:38:0d:47:a3:56:28:b6:98:e8:7d:e3:a0:d0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:27 2025 GMT
            Not After : Jul  3 06:53:27 2026 GMT
        Subject: CN=90DCF64F5C4191AF5F223ADC8B64C628D511592A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:11:b8:a6:48:19:ed:b4:f6:08:9f:23:73:24:
                    1f:65:77:66:00:ae:ab:a8:4e:b1:53:9d:ae:23:f8:
                    4f:de:78:91:bf:e5:fa:a5:e4:5d:0e:ca:b9:39:1d:
                    e0:8e:a5:8d:87:17:d7:e1:02:b3:10:00:1d:25:37:
                    36:53:f5:5d:fa:da:2b:c2:2b:ce:76:dd:9d:14:a2:
                    8b:73:58:46:bb:d5:09:69:a0:53:4e:37:88:59:fb:
                    38:b8:10:01:41:e3:af:7a:f2:8b:84:40:38:77:86:
                    46:d7:18:0b:76:75:a4:51:7b:0b:2f:e7:82:48:b4:
                    3b:04:82:e8:68:eb:06:5a:ab:47:3a:67:32:d4:02:
                    15:6b:c4:6a:5a:86:53:3a:07:5c:5e:41:6f:fc:6e:
                    f3:48:d1:4d:f2:a0:9b:2b:d9:06:fb:55:d4:1d:9f:
                    eb:98:8a:bb:15:ad:a7:81:06:94:92:56:5c:78:10:
                    92:9b:6b:07:19:5f:19:b5:ba:88:c4:44:e8:20:f6:
                    c8:13:40:9f:5e:80:b8:50:d7:d9:e6:a2:49:b2:19:
                    04:51:90:cd:2e:17:b4:17:8d:94:2d:d9:87:e3:c7:
                    c1:97:a9:1b:3e:0e:66:5d:8e:2e:de:97:6d:08:6a:
                    52:94:9f:d7:63:c7:68:50:10:0e:40:9c:fc:68:71:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:F6:4F:5C:41:91:AF:5F:22:3A:DC:8B:64:C6:28:D5:11:59:2A
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215541.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:4700::-2a06:9f81:48ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         af:1b:f7:6d:05:35:1e:2e:4a:b0:e3:d8:81:24:d8:b7:f8:37:
         8e:53:f9:45:74:e0:36:1c:7a:22:0e:75:f0:79:35:d6:45:ad:
         72:6e:3d:0d:4c:c0:be:ef:78:7a:62:4a:6e:e5:f1:33:19:09:
         88:19:52:47:e0:aa:76:4c:ce:52:73:40:a1:a5:8d:8b:55:fc:
         b8:ba:1e:f6:65:dc:e5:2f:71:e8:7f:f6:28:ed:38:b3:a3:8e:
         ac:cf:f2:13:a3:b3:30:bd:cc:2b:fa:62:6a:b5:50:57:96:b5:
         2e:d2:50:df:1c:2f:fe:0c:74:d9:8a:21:26:14:9e:b9:48:d1:
         de:0e:95:5d:4b:00:0c:39:11:ac:50:73:7f:78:36:f3:33:9e:
         04:08:28:e5:31:58:12:e3:ac:c0:7b:ce:00:9c:b6:c7:ce:66:
         93:a4:46:7b:2b:27:74:08:3d:fb:36:b8:8c:cd:c3:b1:7b:7d:
         ca:ef:01:97:d8:f5:52:94:90:cc:c7:77:62:19:ea:bc:44:29:
         03:c5:18:f7:ce:7e:ad:74:c9:dc:d6:38:01:ad:dd:2d:f3:b5:
         d7:a9:f0:d5:af:e0:99:71:f6:35:8f:e2:2f:d6:12:98:ae:f4:
         6e:67:2a:a7:bd:53:d3:57:d7:39:a9:79:aa:d5:d1:7c:fb:26:
         eb:79:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:06:21 2025 by rpki-client