Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215592.roa
File:                     AS215592.roa (raw, json)
Hash identifier:          Bde6XHeTn+1hv18aLTseD4zCSFTC0gwJDnxk+mFR+eA=
Subject key identifier:   FD:EB:2E:17:C5:8C:58:10:6D:6F:69:1C:53:6C:E0:06:DD:49:9D:70
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       0ABA4175E1202A869A4EA23F8EAB682FC32B4EBF
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215592.roa
Signing time:             Fri 04 Jul 2025 06:53:12 +0000
ROA not before:           Fri 04 Jul 2025 06:48:12 +0000
ROA not after:            Fri 03 Jul 2026 06:53:12 +0000
asID:                     215592
IP address blocks:        2a06:9f81:3900::/40 maxlen: 48
                          2a06:9f81:5600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ba:41:75:e1:20:2a:86:9a:4e:a2:3f:8e:ab:68:2f:c3:2b:4e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:12 2025 GMT
            Not After : Jul  3 06:53:12 2026 GMT
        Subject: CN=FDEB2E17C58C58106D6F691C536CE006DD499D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:16:33:37:9c:b0:81:bb:ca:38:9f:49:72:
                    ab:40:4e:f6:70:43:9c:a7:53:9f:7d:93:d1:54:b2:
                    4d:59:54:dd:5e:39:97:97:58:89:0b:2a:5e:cc:21:
                    2d:c7:d5:ae:67:f1:ad:59:e8:b7:0f:a2:5b:22:07:
                    80:e5:cc:14:a9:00:85:fe:c2:fe:fb:3e:ef:e4:87:
                    ab:44:1d:04:7d:b4:ee:88:1c:2f:b3:f6:8f:2b:9d:
                    b9:c7:91:5a:72:fc:2a:b4:90:73:8b:4e:06:81:93:
                    3e:8a:eb:9a:a3:2b:4c:76:11:3d:96:b8:37:de:ce:
                    7e:3f:14:5a:14:68:16:92:97:ef:7e:71:91:60:2d:
                    b2:24:c1:58:73:0d:ba:6f:11:f6:51:3f:90:ef:25:
                    9a:6e:15:60:90:cc:45:2a:85:58:2f:db:4a:3b:4e:
                    42:38:87:d7:0e:2e:51:db:59:87:2b:61:a3:3e:32:
                    09:e9:c9:00:8e:f8:27:4e:4c:7c:68:32:94:34:6f:
                    27:c5:02:97:6c:51:d2:9f:8f:bf:17:aa:47:97:d2:
                    b9:5c:76:a3:ce:ee:3a:60:ad:4d:8a:b7:a9:26:76:
                    98:45:ed:67:97:9f:d0:eb:54:8b:a7:6a:f3:eb:36:
                    cb:e1:8f:37:72:ff:3f:c3:63:f3:0e:1d:36:2f:0c:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EB:2E:17:C5:8C:58:10:6D:6F:69:1C:53:6C:E0:06:DD:49:9D:70
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3900::/40
                  2a06:9f81:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:05:5a:a3:18:ec:23:16:b6:55:01:c3:ab:63:ef:7f:98:
         c1:97:08:7f:1f:4d:e2:8b:8b:56:c6:97:ca:df:04:51:54:f0:
         25:0e:21:cb:52:fc:2b:c1:a9:3a:e0:42:e8:00:15:8a:09:9a:
         ed:4e:0a:d5:00:9a:ff:db:74:67:71:ee:67:f5:bc:d9:99:c0:
         85:0d:07:4e:47:4f:a2:f2:17:09:8b:99:52:72:8d:f2:7d:82:
         ef:39:76:9e:52:50:75:d4:5d:47:e6:bc:2b:39:74:90:77:f2:
         e6:ea:8e:f4:02:90:26:69:10:86:4d:fa:9c:a2:78:d7:9b:96:
         76:72:25:82:a4:70:87:85:a3:ca:79:8f:04:2a:6a:f8:ae:56:
         b0:f1:29:1f:6a:20:2b:5b:04:7a:7e:cb:76:47:e1:55:40:37:
         ff:94:31:b3:93:ff:07:0b:6d:aa:75:4d:d7:8e:c1:12:7e:22:
         2a:49:07:ef:eb:ed:4e:77:ca:60:f2:45:ef:77:e7:61:8c:b0:
         21:50:8c:dd:46:f6:2b:d0:16:44:f3:7d:6e:8c:75:5b:27:2f:
         3f:cf:3a:cb:4b:ee:f7:ea:5a:2f:f5:52:b1:1d:3f:2c:cb:f4:
         87:a2:d9:ff:db:0d:35:fd:1d:66:db:44:5e:64:83:ea:a6:1d:
         0b:b3:ca:20
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUCrpBdeEgKoaaTqI/jqtoL8MrTr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTJaFw0yNjA3MDMwNjUzMTJaMDMxMTAvBgNV
BAMTKEZERUIyRTE3QzU4QzU4MTA2RDZGNjkxQzUzNkNFMDA2REQ0OTlENzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRBYzN5ywgbvKOJ9JcqtATvZw
Q5ynU599k9FUsk1ZVN1eOZeXWIkLKl7MIS3H1a5n8a1Z6LcPolsiB4DlzBSpAIX+
wv77Pu/kh6tEHQR9tO6IHC+z9o8rnbnHkVpy/Cq0kHOLTgaBkz6K65qjK0x2ET2W
uDfezn4/FFoUaBaSl+9+cZFgLbIkwVhzDbpvEfZRP5DvJZpuFWCQzEUqhVgv20o7
TkI4h9cOLlHbWYcrYaM+MgnpyQCO+CdOTHxoMpQ0byfFApdsUdKfj78XqkeX0rlc
dqPO7jpgrU2Kt6kmdphF7WeXn9DrVIunavPrNsvhjzdy/z/DY/MOHTYvDMg1AgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQU/esuF8WMWBBtb2kcU2zgBt1JnXAwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjE1NTkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF
BwEHAQH/BBowGDAWBAIAAjAQAwYAKgafgTkDBgAqBp+BVjANBgkqhkiG9w0BAQsF
AAOCAQEABZsFWqMY7CMWtlUBw6tj73+YwZcIfx9N4ouLVsaXyt8EUVTwJQ4hy1L8
K8GpOuBC6AAVigma7U4K1QCa/9t0Z3HuZ/W82ZnAhQ0HTkdPovIXCYuZUnKN8n2C
7zl2nlJQddRdR+a8Kzl0kHfy5uqO9AKQJmkQhk36nKJ415uWdnIlgqRwh4WjynmP
BCpq+K5WsPEpH2ogK1sEen7LdkfhVUA3/5Qxs5P/BwttqnVN147BEn4iKkkH7+vt
TnfKYPJF73fnYYywIVCM3Ub2K9AWRPN9box1WycvP886y0vu9+paL/VSsR0/LMv0
h6LZ/9sNNf0dZttEXmSD6qYdC7PKIA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:14:57 2025 by rpki-client