Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48935.roa
File:                     AS48935.roa (raw, json)
Hash identifier:          FhJ9TgWnpWwAm1sncXGCQRxf8q1A8Lq9njk0SLnJh/8=
Subject key identifier:   D1:4B:9E:71:97:6F:F6:77:D5:AA:95:85:F4:0C:6B:42:97:8D:54:72
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       18572AE1EE2B172671EE73ADBFEF525D90E24935
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48935.roa
Signing time:             Fri 04 Jul 2025 06:52:58 +0000
ROA not before:           Fri 04 Jul 2025 06:47:58 +0000
ROA not after:            Fri 03 Jul 2026 06:52:58 +0000
asID:                     48935
IP address blocks:        2a0a:6040:7500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:57:2a:e1:ee:2b:17:26:71:ee:73:ad:bf:ef:52:5d:90:e2:49:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:47:58 2025 GMT
            Not After : Jul  3 06:52:58 2026 GMT
        Subject: CN=D14B9E71976FF677D5AA9585F40C6B42978D5472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:1c:6c:61:25:81:2c:0e:5e:95:38:3a:15:
                    23:f8:90:52:4f:77:da:13:7f:5b:90:2a:6d:43:04:
                    b8:d8:99:07:01:68:2f:43:f7:96:1d:be:02:7c:c3:
                    d7:4b:e3:53:6c:65:09:c8:46:e6:0b:94:ed:61:a7:
                    d7:79:91:aa:91:84:2e:0f:96:04:42:3e:4c:8f:c0:
                    0a:df:e6:13:d8:57:58:94:a3:98:9c:7a:a6:ec:cf:
                    68:ed:3e:72:c3:57:12:47:ba:3b:79:05:fd:51:c2:
                    4c:51:88:86:28:3b:8d:af:aa:2b:2e:f1:9a:53:01:
                    5d:16:2f:75:a9:e5:24:e1:d0:80:d1:67:8e:e0:9f:
                    84:88:fe:13:46:68:94:8e:e0:66:c7:41:bb:33:6e:
                    77:f1:a8:61:05:1e:5c:b7:a4:97:37:b2:f1:2f:30:
                    1a:09:b4:7c:1d:15:1c:98:6f:eb:2d:31:d7:64:ff:
                    75:54:33:6b:8b:7c:35:5d:64:45:27:70:e5:5e:6a:
                    f8:d0:c5:d5:16:15:3e:18:05:de:21:dd:67:45:ea:
                    98:10:35:a1:86:dd:72:33:91:b4:06:9d:9c:a3:2d:
                    f2:a2:ec:72:ce:d3:c4:84:20:2b:77:9b:1a:81:f8:
                    77:e0:5b:2d:e0:47:42:e8:09:c3:09:b2:a2:d1:65:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4B:9E:71:97:6F:F6:77:D5:AA:95:85:F4:0C:6B:42:97:8D:54:72
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:24:5d:57:a0:06:4b:dc:b5:52:0f:b7:f1:de:8d:2f:47:
         84:43:3a:3d:de:06:48:a7:a9:4e:86:3a:6a:55:83:89:1c:ad:
         3f:ff:2b:8c:00:91:10:91:45:b4:61:55:5a:27:5a:24:8e:5b:
         c8:61:07:0e:ce:17:b2:07:d9:5a:fd:d4:09:82:de:6d:99:d9:
         89:e8:46:4a:7b:1d:67:96:c6:26:01:61:4a:ba:0c:d5:91:ee:
         6d:14:1f:95:02:dd:e5:df:47:ed:a6:ca:1f:08:82:46:03:3f:
         89:92:65:56:eb:99:3f:a5:39:cd:d2:7d:8f:7f:93:a5:c2:59:
         87:43:90:43:b1:d6:c6:01:dd:71:24:50:c9:23:bd:23:cc:8e:
         72:91:ed:26:fe:80:5a:22:56:3a:88:7b:ce:d3:3d:e7:bd:09:
         ad:9c:88:f1:6e:9e:2c:4b:88:af:a2:52:cf:e5:a4:54:05:df:
         4a:c4:d5:bf:01:89:41:2b:fc:df:96:e3:dd:6f:08:6e:90:76:
         cb:68:a6:ab:65:da:7c:e8:8a:61:d3:4a:7a:6a:61:0b:a5:7e:
         c2:98:9e:13:a6:ac:71:58:bf:83:68:e9:ab:2a:2b:3f:f2:03:
         0d:0c:7e:06:1e:92:4a:5e:bc:b4:fc:45:39:32:55:3a:52:a3:
         8b:3d:c3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:04:20 2025 by rpki-client