Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215907.roa
File:                     AS215907.roa (raw, json)
Hash identifier:          J+ITVYw6esOFQyV6fA3GVu1V0GpIl2qwkXS85YDGkk0=
Subject key identifier:   8E:6E:D2:8C:89:FF:95:D9:E0:64:85:C7:68:88:C6:AA:6D:27:94:6B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       6595518CCF65399D2627EFF5EFA03C149ECD342B
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215907.roa
Signing time:             Fri 04 Jul 2025 06:53:28 +0000
ROA not before:           Fri 04 Jul 2025 06:48:28 +0000
ROA not after:            Fri 03 Jul 2026 06:53:28 +0000
asID:                     215907
IP address blocks:        2a06:9f81:2900::/40 maxlen: 48
                          2a06:9f81:3200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:95:51:8c:cf:65:39:9d:26:27:ef:f5:ef:a0:3c:14:9e:cd:34:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:28 2025 GMT
            Not After : Jul  3 06:53:28 2026 GMT
        Subject: CN=8E6ED28C89FF95D9E06485C76888C6AA6D27946B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:6c:d9:3e:d5:b7:5d:dd:02:fb:a7:b3:f8:
                    99:23:01:a6:6e:d5:97:f8:85:cb:3b:65:50:e0:36:
                    20:0d:75:d1:c0:b7:cd:17:1b:4d:c9:0a:e4:23:f7:
                    80:4d:09:21:9e:e3:8e:0b:5c:62:43:cb:17:5e:ff:
                    a9:e4:71:da:9d:c6:9e:6f:32:eb:be:e8:e7:61:33:
                    1f:c6:e7:f4:64:3e:30:c1:ee:24:95:fd:2a:73:a7:
                    77:f5:ac:63:24:bf:89:53:b5:f8:b4:72:53:c3:fd:
                    e2:3b:5d:7b:0f:9b:6a:9f:65:75:bb:a7:85:2b:5c:
                    ce:c8:d4:1b:58:67:e5:b2:f5:a0:61:85:8c:23:9f:
                    ab:fa:de:82:f3:1f:70:0c:77:bb:f3:c9:e5:b2:0b:
                    a3:38:fc:61:d8:ca:36:9a:56:a7:59:c0:72:8c:9c:
                    60:79:86:50:4b:b8:29:c2:40:58:ba:74:f5:15:b5:
                    bb:5a:71:2e:29:36:cb:0b:85:26:60:8d:6d:7a:02:
                    16:11:c4:a0:66:a2:74:53:21:6f:ba:ce:6c:e9:1a:
                    65:21:14:d9:11:83:4f:5e:2e:26:3f:52:c0:12:c3:
                    dd:1d:42:52:c4:fe:a1:d4:ec:8e:c7:76:6f:51:11:
                    0e:d8:ac:2b:88:08:41:90:19:55:3c:2b:b0:14:09:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6E:D2:8C:89:FF:95:D9:E0:64:85:C7:68:88:C6:AA:6D:27:94:6B
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215907.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:2900::/40
                  2a06:9f81:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:62:42:19:54:1b:25:6a:a8:02:27:97:29:07:45:28:b8:0d:
         80:e8:63:c6:21:e9:20:be:ba:ee:16:8b:89:7d:f1:93:1a:40:
         b4:8c:7c:e3:ef:5a:d6:96:c7:5f:83:56:b7:07:ff:6c:a0:ea:
         cb:5d:57:ce:e1:aa:c7:f1:c8:4f:a3:db:b0:67:b2:5e:22:10:
         1e:24:45:71:06:cd:06:cd:0a:e1:2c:67:4a:cf:aa:57:e0:33:
         84:87:b3:2a:bf:5f:b0:bb:07:90:42:21:18:47:cc:02:af:c0:
         2a:85:58:28:b4:98:17:a9:22:0a:85:66:bc:33:c4:af:57:5d:
         23:aa:26:fb:16:18:34:b6:a1:b4:e5:75:85:b1:62:27:a0:af:
         2a:bc:23:96:b6:09:79:97:ee:6b:2f:a4:33:a0:bf:e2:14:fb:
         b0:f8:fc:2a:87:bd:db:83:1d:73:58:87:cc:99:60:b5:4b:e1:
         06:9d:19:88:89:0b:49:e9:21:31:cb:96:ec:cc:15:a9:28:10:
         79:32:81:50:45:dc:e6:b2:a0:f6:9d:24:7b:2f:82:10:7d:bd:
         78:ff:0e:ef:d3:9a:85:34:d5:94:fc:ea:3e:c4:7c:30:73:f5:
         54:85:9c:d4:e3:e9:c5:af:ad:82:9b:05:24:56:54:25:8d:59:
         b8:ae:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:02:06 2025 by rpki-client