Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49105.roa
File:                     AS49105.roa (raw, json)
Hash identifier:          e6RElpx7mcFFwrD9/KiS5cELCMrZGaLaU78n5HRqovc=
Subject key identifier:   3F:E1:E7:32:38:03:EF:35:B9:65:0C:3F:20:E7:A5:90:03:18:65:E3
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       26090CDC0E18FA35AB8CBFC8F58C58C5B31C2FFE
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49105.roa
Signing time:             Fri 04 Jul 2025 06:53:14 +0000
ROA not before:           Fri 04 Jul 2025 06:48:14 +0000
ROA not after:            Fri 03 Jul 2026 06:53:14 +0000
asID:                     49105
IP address blocks:        2a0a:6040:7900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:09:0c:dc:0e:18:fa:35:ab:8c:bf:c8:f5:8c:58:c5:b3:1c:2f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:14 2025 GMT
            Not After : Jul  3 06:53:14 2026 GMT
        Subject: CN=3FE1E7323803EF35B9650C3F20E7A590031865E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:73:ee:c9:40:d9:cf:97:6f:78:32:f6:dd:
                    70:29:f2:bc:50:af:21:3e:03:f5:1d:c4:7e:f2:9f:
                    92:f4:bc:19:20:98:e1:08:d2:a3:eb:17:d7:f1:68:
                    ea:69:9d:7f:df:b2:df:41:df:b6:2f:5f:8d:4e:7a:
                    1f:30:1d:42:02:a7:d3:80:31:0d:1f:7d:01:df:7b:
                    c8:88:ea:e7:1c:dd:17:40:a7:4d:bb:98:e6:61:0c:
                    d9:fe:cd:d7:20:79:33:9a:62:46:e9:f5:43:2d:19:
                    22:2a:60:e0:02:93:4c:e5:61:28:3b:7d:db:70:75:
                    13:05:f1:3e:0b:57:17:02:be:9b:9a:f4:38:1b:e6:
                    73:79:a4:eb:4b:67:fb:94:01:2c:4d:12:6f:21:ea:
                    4e:5f:9c:b0:b0:f9:bf:b5:8e:97:59:20:d1:8f:46:
                    5b:b2:55:c7:b0:cf:94:02:04:f0:56:7f:6a:1b:70:
                    9f:13:42:0c:40:dc:52:c4:2f:b2:03:29:c1:a1:05:
                    37:2e:fc:49:e4:3f:cf:67:0f:f6:db:d2:31:e5:0b:
                    af:a6:43:37:df:0c:4d:8b:dd:1f:69:47:87:25:bc:
                    3a:66:ad:d6:38:bf:31:bf:d0:05:d7:90:1a:da:71:
                    53:83:af:57:e7:90:4d:7e:b2:e5:8b:67:83:f3:4d:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E1:E7:32:38:03:EF:35:B9:65:0C:3F:20:E7:A5:90:03:18:65:E3
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7900::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:95:bf:a2:75:14:7f:53:e1:18:97:ee:d0:a1:9b:25:7d:8b:
         79:8d:ae:bb:2f:f5:ad:0d:e9:6f:56:6e:92:c3:2e:83:0d:2c:
         db:16:0c:2b:f8:75:b1:10:f9:b8:af:b6:ee:13:47:27:58:7b:
         3c:c8:c5:8a:96:ba:d8:1e:da:a2:4e:78:fc:33:d8:53:22:c4:
         64:0c:2c:c9:61:72:da:d7:3b:35:87:e9:e6:4a:d5:6f:f3:d0:
         af:36:bc:35:66:3e:98:31:17:fc:d8:39:e3:94:33:9e:13:c0:
         e7:dc:69:47:32:07:19:1d:e0:d8:6d:b7:76:54:14:b9:60:12:
         0a:1c:3d:28:2a:73:0b:fb:dc:67:55:77:d1:e7:fb:8a:c1:39:
         11:e6:e5:d5:ae:f2:d4:48:45:9f:74:9e:14:8a:dd:08:ad:d8:
         c4:fb:24:55:a8:de:4b:90:7d:b4:59:14:d1:75:1b:10:f3:6d:
         1f:d7:f8:60:04:8d:6e:9f:02:2c:44:c3:69:1e:a9:62:c3:0d:
         fe:86:09:6f:79:8c:70:15:d9:70:59:e0:31:24:7b:e1:7b:7f:
         a3:c4:7b:f3:9a:9b:b2:fa:59:ec:9e:49:7c:6f:f3:25:6e:c2:
         f3:47:87:e4:45:ea:55:f8:a5:ee:1e:12:d5:d9:e4:05:e0:af:
         8a:97:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:07:35 2025 by rpki-client