Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216266.roa
File:                     AS216266.roa (raw, json)
Hash identifier:          53jU32H3HN1+3iAbNOf49OiikzhpBiCg8r3sflNCIkI=
Subject key identifier:   7E:60:F5:81:A9:5D:F7:30:32:F0:9F:47:20:50:67:DE:0E:55:66:60
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       3A0B9F0D859632E64F11A4107B8B976EF8AA9D0D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216266.roa
Signing time:             Fri 04 Jul 2025 06:53:06 +0000
ROA not before:           Fri 04 Jul 2025 06:48:06 +0000
ROA not after:            Fri 03 Jul 2026 06:53:06 +0000
asID:                     216266
IP address blocks:        2a05:dfc1:b800::/40 maxlen: 48
                          2a05:dfc1:b900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0b:9f:0d:85:96:32:e6:4f:11:a4:10:7b:8b:97:6e:f8:aa:9d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:06 2025 GMT
            Not After : Jul  3 06:53:06 2026 GMT
        Subject: CN=7E60F581A95DF73032F09F47205067DE0E556660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:ab:5e:66:f8:ca:82:2d:03:14:48:0c:f5:
                    a4:77:5f:4d:ea:ae:47:3f:63:27:69:c8:ee:6a:c7:
                    4d:05:d1:d8:6e:35:6b:5a:ad:5b:91:08:b3:72:03:
                    b1:64:3f:ed:ea:0c:81:48:38:9d:b2:6d:f6:74:40:
                    1a:4b:45:01:45:71:74:10:70:8a:fc:f9:59:bb:5c:
                    49:3a:47:25:d8:5a:b2:ac:ce:aa:a6:9e:43:23:57:
                    48:94:74:7b:63:d8:ad:63:a8:c2:1c:20:38:70:07:
                    6a:d7:78:e9:ee:6d:51:df:0a:27:7a:7a:b9:31:5d:
                    40:52:d1:f6:c5:d8:d1:9c:ef:80:20:94:95:d5:ed:
                    bd:fc:0b:43:9f:ed:43:a6:e7:53:f7:33:56:79:96:
                    fc:3e:e9:cd:ad:e5:72:f8:cf:cf:6d:13:d5:39:8a:
                    93:e9:25:6f:8c:f4:fd:d4:c0:98:37:2d:2d:06:85:
                    95:0d:23:3b:a9:0f:36:70:39:d1:af:55:f9:b7:65:
                    93:b7:06:4f:75:69:77:89:40:34:e9:21:68:9b:70:
                    ff:90:f0:7f:93:d3:75:3e:61:60:c1:fb:b9:28:c7:
                    a7:b5:e9:7d:63:ca:68:38:ab:04:f5:0a:2e:da:1a:
                    68:b5:85:d0:ae:fe:fe:54:e6:df:70:7d:03:32:54:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:F5:81:A9:5D:F7:30:32:F0:9F:47:20:50:67:DE:0E:55:66:60
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:b800::/39

    Signature Algorithm: sha256WithRSAEncryption
         92:b4:fb:e2:c7:54:7a:df:1c:c0:d8:90:f6:ee:e0:d7:e7:70:
         f4:51:bf:45:f1:e3:5e:73:03:92:8b:5d:4f:0b:92:b0:7b:f8:
         9e:02:1e:70:62:74:ad:ca:26:f9:61:37:e9:fc:84:09:cf:4e:
         a0:32:1b:07:72:f4:a3:26:68:0a:7c:1d:ca:6a:22:c7:8b:48:
         37:2d:38:cb:1c:69:87:53:ba:03:eb:07:79:20:d6:6d:ea:2f:
         16:88:33:5c:43:91:00:f9:96:df:80:55:e6:04:32:2a:64:88:
         71:bd:83:1f:3e:bb:67:77:4e:94:b3:12:48:e5:3c:e2:e1:dc:
         50:15:39:5c:72:42:aa:aa:14:43:9d:0e:1c:01:fb:d5:fc:6b:
         18:9c:c4:d1:01:1a:7e:56:75:0c:65:58:9a:24:47:e5:03:8d:
         9b:fd:92:cc:12:c2:c2:cd:90:c1:78:9b:e9:7c:b7:11:85:8d:
         6b:c4:7c:cd:6d:5d:1f:36:0a:05:6f:fb:bd:64:63:bb:ce:4f:
         17:6a:3a:14:1b:17:bf:bc:7f:4d:a3:1f:26:43:97:b0:8a:f3:
         c1:7d:5b:c6:d1:45:c3:fe:36:b9:88:28:aa:6b:78:9e:bb:4a:
         80:90:a5:3a:07:d9:35:22:79:8d:87:af:50:46:4c:85:74:78:
         09:24:57:0e
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUOgufDYWWMuZPEaQQe4uXbviqnQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDZaFw0yNjA3MDMwNjUzMDZaMDMxMTAvBgNV
BAMTKDdFNjBGNTgxQTk1REY3MzAzMkYwOUY0NzIwNTA2N0RFMEU1NTY2NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaKteZvjKgi0DFEgM9aR3X03q
rkc/YydpyO5qx00F0dhuNWtarVuRCLNyA7FkP+3qDIFIOJ2ybfZ0QBpLRQFFcXQQ
cIr8+Vm7XEk6RyXYWrKszqqmnkMjV0iUdHtj2K1jqMIcIDhwB2rXeOnubVHfCid6
erkxXUBS0fbF2NGc74AglJXV7b38C0Of7UOm51P3M1Z5lvw+6c2t5XL4z89tE9U5
ipPpJW+M9P3UwJg3LS0GhZUNIzupDzZwOdGvVfm3ZZO3Bk91aXeJQDTpIWibcP+Q
8H+T03U+YWDB+7kox6e16X1jymg4qwT1Ci7aGmi1hdCu/v5U5t9wfQMyVDy1AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUfmD1gald9zAy8J9HIFBn3g5VZmAwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjE2MjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYBKgXfwbgwDQYJKoZIhvcNAQELBQADggEBAJK0
++LHVHrfHMDYkPbu4NfncPRRv0Xx415zA5KLXU8LkrB7+J4CHnBidK3KJvlhN+n8
hAnPTqAyGwdy9KMmaAp8HcpqIseLSDctOMscaYdTugPrB3kg1m3qLxaIM1xDkQD5
lt+AVeYEMipkiHG9gx8+u2d3TpSzEkjlPOLh3FAVOVxyQqqqFEOdDhwB+9X8axic
xNEBGn5WdQxlWJokR+UDjZv9kswSwsLNkMF4m+l8txGFjWvEfM1tXR82CgVv+71k
Y7vOTxdqOhQbF7+8f02jHyZDl7CK88F9W8bRRcP+NrmIKKpreJ67SoCQpToH2TUi
eY2Hr1BGTIV0eAkkVw4=
-----END CERTIFICATE-----
Generated at Sat Jul 5 03:45:40 2025 by rpki-client