Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216115.roa
File:                     AS216115.roa (raw, json)
Hash identifier:          zKGCqJ0sI91Cr5NM8IZCn0M79FHzTtymFRlwKGVvjVs=
Subject key identifier:   94:95:BE:B2:28:2F:5E:40:45:17:B6:83:F2:C4:D1:BA:C7:7B:56:84
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       54EF1684422C89E9954633FE671BE1991FB2541D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216115.roa
Signing time:             Fri 04 Jul 2025 06:53:21 +0000
ROA not before:           Fri 04 Jul 2025 06:48:21 +0000
ROA not after:            Fri 03 Jul 2026 06:53:21 +0000
asID:                     216115
IP address blocks:        2a05:dfc1:b400::/40 maxlen: 48
                          2a05:dfc1:b500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ef:16:84:42:2c:89:e9:95:46:33:fe:67:1b:e1:99:1f:b2:54:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:21 2025 GMT
            Not After : Jul  3 06:53:21 2026 GMT
        Subject: CN=9495BEB2282F5E404517B683F2C4D1BAC77B5684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c3:7a:b1:81:a9:34:72:43:8b:b2:70:fc:23:
                    c6:fe:9b:d2:1c:7a:f3:f6:f8:bd:bd:8a:48:1d:71:
                    97:6f:d3:da:65:7b:60:9c:4b:79:dc:fe:71:2c:f1:
                    cf:e5:11:44:e9:52:93:53:3e:8f:36:ae:ea:8e:ef:
                    5d:8b:00:38:1b:7d:33:e8:8f:0d:f3:e0:c5:c4:90:
                    c1:d6:77:49:36:81:09:7f:c1:73:66:aa:d2:e3:98:
                    67:6f:b0:3c:25:49:3c:ee:3f:79:7d:94:17:22:50:
                    3c:e6:13:3c:e1:5b:a9:bb:93:20:36:7f:78:c5:b0:
                    b9:9f:b6:4e:19:a7:08:23:88:f7:72:42:60:f0:a2:
                    cf:31:4f:5b:3d:32:ff:6d:23:bd:ae:ef:6e:81:a2:
                    fd:5a:99:49:b9:db:58:68:0a:91:f3:99:e5:3e:39:
                    16:6c:bd:a8:15:ca:53:c3:8b:cf:b0:e3:90:36:f9:
                    1c:32:90:50:0b:da:e9:c0:e2:3e:ea:57:af:f1:3a:
                    a6:5c:05:f7:c1:27:a1:c5:68:ff:f6:93:08:3e:5b:
                    bd:d2:d1:0e:f1:8c:23:0d:49:a3:5d:4d:43:4f:1c:
                    b9:1b:17:08:7b:90:95:73:14:08:bb:db:d4:76:f7:
                    82:a5:a3:60:1a:73:91:49:d1:1e:88:bb:71:89:b8:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:95:BE:B2:28:2F:5E:40:45:17:B6:83:F2:C4:D1:BA:C7:7B:56:84
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216115.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:b400::/39

    Signature Algorithm: sha256WithRSAEncryption
         8e:4f:8c:2c:28:77:53:db:ec:03:a8:e6:7f:14:03:f9:88:e6:
         e0:f1:57:dd:73:92:2a:07:35:39:a3:72:a3:b8:3b:eb:aa:d5:
         12:c0:cf:e0:49:d1:d7:3d:c8:ef:ae:eb:cc:9b:9d:49:2e:75:
         2e:0f:2d:17:cc:02:5a:65:38:30:c4:65:ab:a7:7b:01:46:8c:
         52:71:2d:78:37:9f:f9:b2:f2:39:e6:2a:b6:d5:15:17:65:67:
         e7:ec:18:95:b4:de:a4:bb:71:46:6a:f4:c7:32:cf:8b:20:92:
         b1:c0:92:4e:bd:16:da:af:b1:c8:c3:a6:5b:c8:b7:2b:8b:46:
         21:05:7d:84:e8:e8:ec:ca:93:58:23:28:0f:98:e5:cc:56:c3:
         e8:48:0c:a3:23:83:d5:bc:a5:b0:1d:c7:86:75:20:0f:b7:b8:
         20:62:6f:9c:13:02:d1:df:2e:ce:51:48:9b:e7:60:a5:90:aa:
         ef:10:51:cb:bd:ba:1f:ef:1b:95:5d:da:a2:43:b7:ef:aa:5c:
         6c:01:3f:98:bf:a6:f4:9f:ef:3f:57:ed:5b:ed:96:92:06:fb:
         2f:00:be:cb:51:9a:0b:1b:60:89:93:68:df:e9:56:07:53:65:
         15:f5:fa:b1:9b:e8:76:47:9f:ac:78:dd:4b:1b:0c:a7:60:af:
         5d:bd:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:06:45 2025 by rpki-client