Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48718.roa
File:                     AS48718.roa (raw, json)
Hash identifier:          +rMKUYXKv39X1pK1gZ7QOqFFKUNCUNtQLQnG9bKfYeU=
Subject key identifier:   51:81:F7:63:81:B8:FC:E0:7F:50:E3:64:66:40:BE:D2:33:86:3F:EB
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       7B78CDDD0F9E75F95D336EB646DAB5D9A203586D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48718.roa
Signing time:             Fri 04 Jul 2025 06:53:13 +0000
ROA not before:           Fri 04 Jul 2025 06:48:13 +0000
ROA not after:            Fri 03 Jul 2026 06:53:13 +0000
asID:                     48718
IP address blocks:        2a05:dfc1:7400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:78:cd:dd:0f:9e:75:f9:5d:33:6e:b6:46:da:b5:d9:a2:03:58:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:13 2025 GMT
            Not After : Jul  3 06:53:13 2026 GMT
        Subject: CN=5181F76381B8FCE07F50E3646640BED233863FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:32:30:d3:3e:9c:8b:9e:32:64:4d:e1:39:
                    89:b8:8c:bb:10:73:dc:a9:20:50:4d:f0:57:aa:38:
                    0f:60:95:2a:b0:00:46:e8:b7:a0:4e:52:ef:80:08:
                    1e:0f:0e:1a:63:6c:6d:2c:40:a8:a4:12:84:bb:a6:
                    0d:21:7b:75:b3:c8:56:56:20:bc:88:20:ff:d7:01:
                    07:26:0b:22:b3:68:76:f6:af:36:e1:ab:ac:35:ce:
                    fa:be:3d:2b:63:dd:a0:45:ed:ae:d7:6f:22:93:3a:
                    b8:98:8d:0e:11:e5:31:4d:0f:24:6f:da:ce:e0:bd:
                    eb:e8:d8:ef:c5:b2:90:6a:67:bb:a3:ed:f1:90:af:
                    fe:0e:bb:af:ee:83:8d:a3:92:65:6d:42:47:33:c5:
                    ea:34:3d:98:a2:63:bc:cf:53:67:c6:21:ec:0d:85:
                    2c:95:dc:af:6c:43:13:d1:4f:a5:8c:e5:88:fd:bb:
                    1b:ea:8e:d3:ce:c9:15:cb:53:fc:f4:28:0b:bb:d8:
                    d7:67:0a:50:9b:36:6d:d3:55:e3:c6:a4:41:13:e0:
                    dd:27:b6:bd:57:36:99:b0:bb:98:be:50:38:68:01:
                    b9:e7:cc:15:f9:54:98:18:3c:62:e8:83:9c:46:47:
                    38:52:c2:ab:46:32:1d:90:19:46:5a:43:32:82:0d:
                    9d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:81:F7:63:81:B8:FC:E0:7F:50:E3:64:66:40:BE:D2:33:86:3F:EB
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48718.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:d6:65:b3:66:2e:49:6a:e1:b2:86:61:95:c1:0a:df:f7:03:
         e3:f5:23:34:31:14:86:5c:37:c8:7c:d7:15:08:26:74:7c:e0:
         39:d6:87:04:23:b8:b9:e6:a2:82:ba:69:47:d0:de:3c:ac:b4:
         cf:f9:6c:e3:02:77:76:cc:ff:55:49:01:1e:ab:43:df:f8:d3:
         6a:06:f5:d6:85:ca:5c:c4:a1:62:85:18:c0:74:c5:c0:cb:96:
         75:4d:05:49:72:bf:cc:cf:3f:8a:37:95:7f:45:6f:2c:aa:3f:
         00:31:cb:36:38:d5:52:2b:6b:a2:86:ea:6c:71:37:04:41:c8:
         d4:43:b7:9c:e5:fd:96:3f:01:5c:b7:e4:15:82:e4:23:92:a6:
         6b:bd:5c:fb:41:4b:6e:ee:a7:e5:96:0d:9a:42:8e:67:d2:33:
         eb:d8:4e:11:d1:94:8e:fa:26:65:d0:ea:83:93:55:0d:47:a8:
         bf:63:33:11:96:4e:aa:de:5f:66:9f:ee:4a:10:b2:8c:dc:52:
         cf:50:4a:95:01:e9:d8:18:eb:6d:fe:84:57:12:93:2e:8e:83:
         64:52:a3:35:d0:c5:dc:26:9e:61:34:ba:00:52:3a:4d:8b:9b:
         ba:b7:c3:af:64:83:15:de:82:66:bf:50:27:fc:37:fd:5d:98:
         c5:4d:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:01:07 2025 by rpki-client