Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS35913.roa
File:                     AS35913.roa (raw, json)
Hash identifier:          0QKwiukim5lGjNBBMUSwCIHFeQGNaySIYntzG58O2Rc=
Subject key identifier:   A4:A6:21:33:F4:E2:6D:B8:57:64:3A:A5:57:BA:A4:89:7D:AD:0A:DD
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       790ADE44A88BC62E0F08667EFF31C9CB741076B4
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS35913.roa
Signing time:             Fri 04 Jul 2025 06:53:08 +0000
ROA not before:           Fri 04 Jul 2025 06:48:08 +0000
ROA not after:            Fri 03 Jul 2026 06:53:08 +0000
asID:                     35913
IP address blocks:        2a0a:6040:fa00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0a:de:44:a8:8b:c6:2e:0f:08:66:7e:ff:31:c9:cb:74:10:76:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:08 2025 GMT
            Not After : Jul  3 06:53:08 2026 GMT
        Subject: CN=A4A62133F4E26DB857643AA557BAA4897DAD0ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:17:32:09:7b:16:e4:cf:ce:23:09:94:f6:
                    43:e6:d2:4d:24:07:a1:ac:64:49:14:09:d3:61:92:
                    a6:de:54:5e:1c:ae:50:22:89:b9:ee:2e:6e:88:21:
                    08:31:30:d8:ec:56:42:0f:89:18:24:39:7f:37:d0:
                    f8:f8:63:0d:0f:06:4a:a4:0c:e2:da:fc:05:f9:34:
                    f6:0b:9f:5d:fa:9f:c4:f6:d4:fc:99:68:57:26:34:
                    9c:f9:72:45:f5:2c:4b:59:cd:cc:28:de:53:42:73:
                    1a:46:9e:4e:d7:e0:bf:83:05:90:20:93:4c:0d:2d:
                    91:56:8f:12:ef:9d:48:21:48:a8:b6:e3:66:8d:6a:
                    66:c0:d1:10:c1:11:26:17:b8:64:03:f1:f4:84:91:
                    dd:38:8c:56:33:fe:87:58:d8:03:12:c4:cc:c4:d9:
                    23:e3:4b:1b:47:d3:a6:d4:44:24:ee:67:67:33:e7:
                    8d:b4:4c:a1:ee:8f:dd:19:b2:c7:ac:a7:e7:a9:d0:
                    dd:da:0c:be:b3:93:d2:2d:69:d9:fe:28:19:6f:3c:
                    3c:a6:e7:7a:6c:54:8e:c1:7e:aa:9c:bd:de:a2:4e:
                    3d:a9:5d:84:f2:94:a4:a3:bd:ac:9a:3f:3a:c9:b5:
                    25:47:47:4e:e4:c1:fc:41:03:9f:6a:1f:6a:bb:80:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A6:21:33:F4:E2:6D:B8:57:64:3A:A5:57:BA:A4:89:7D:AD:0A:DD
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS35913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:fc:53:df:46:4a:6b:33:3a:80:ff:26:8d:78:71:87:ea:
         0b:90:bb:f7:e2:0a:54:97:1a:c4:da:1e:99:97:f8:c1:3a:6f:
         3e:06:3b:90:f8:e0:94:eb:f6:1c:7c:7f:3e:e5:df:5f:28:cb:
         07:d3:b0:39:5e:54:8b:23:7a:b2:d0:6a:5d:35:e5:ae:50:61:
         37:b1:fb:4d:12:19:16:32:ce:31:23:ba:d1:f7:d2:db:2d:f3:
         c5:1a:69:0e:4a:cb:1f:1f:d6:33:44:85:59:3f:dc:51:a2:09:
         d3:95:ea:c1:1e:78:99:72:b5:fa:52:bf:86:c3:86:30:88:0c:
         00:bc:30:3d:69:24:5b:47:d8:70:9e:74:37:fc:9e:05:a3:83:
         aa:5f:b9:1f:71:ec:50:2a:7e:35:3b:96:90:72:39:69:be:af:
         26:8b:7d:d2:fc:d3:1f:3d:07:10:8b:a2:09:b0:53:0d:68:67:
         8a:9a:61:b9:1d:08:0b:71:54:e0:b7:f7:1a:a7:37:78:e6:ad:
         8d:8d:4c:f2:fe:9f:0e:00:98:40:bb:fd:fc:78:18:a0:9b:83:
         5b:20:59:92:82:48:24:8c:67:9e:79:85:7d:bd:07:f5:73:5c:
         eb:61:ac:6c:4c:b5:73:4d:b1:e0:46:0c:fe:52:21:cc:29:9e:
         0b:51:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:06:47 2025 by rpki-client