Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49548.roa
File:                     AS49548.roa (raw, json)
Hash identifier:          qEreYSPt/j1NaUUs3DIUt82/6CAkiMToyA+PkF3TYY8=
Subject key identifier:   B7:9F:6D:CA:E2:7B:91:CF:49:49:04:24:64:50:F8:A8:15:74:44:93
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       7713AA063571C4DB5AC10DFD42A863F495649D6F
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49548.roa
Signing time:             Fri 04 Jul 2025 06:53:18 +0000
ROA not before:           Fri 04 Jul 2025 06:48:18 +0000
ROA not after:            Fri 03 Jul 2026 06:53:18 +0000
asID:                     49548
IP address blocks:        2a0a:6040:df00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:13:aa:06:35:71:c4:db:5a:c1:0d:fd:42:a8:63:f4:95:64:9d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:18 2025 GMT
            Not After : Jul  3 06:53:18 2026 GMT
        Subject: CN=B79F6DCAE27B91CF494904246450F8A815744493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:cd:05:f5:8e:c7:7b:ec:1b:f3:3c:02:14:
                    10:81:fa:fc:06:cb:71:0a:84:a3:8b:f4:ce:61:3a:
                    b2:c0:34:0d:38:e3:64:62:56:65:ae:ed:b8:bf:5d:
                    e3:e9:19:34:3e:ba:0b:76:f9:6a:13:00:f8:68:86:
                    ca:35:e2:39:7f:d4:d7:34:6e:a2:9d:76:ab:3c:ae:
                    5e:9c:91:1b:64:e2:f0:c5:36:37:17:8a:3d:d6:a8:
                    4f:c0:0d:b7:99:6f:74:f0:cf:9e:27:63:81:4c:c6:
                    6a:19:fb:f3:43:63:3b:11:fc:6a:f6:27:ac:92:22:
                    fe:70:08:7a:3c:42:53:a2:35:61:d9:af:55:ad:c9:
                    3c:c1:d5:d8:5b:54:ee:23:ae:15:9e:a2:58:c3:e3:
                    06:11:1b:b0:dc:cc:cd:01:5c:a7:8e:21:48:ad:88:
                    aa:9c:00:c4:55:34:75:ae:b0:cc:80:23:b6:b9:fa:
                    11:c6:e9:a9:5f:7c:c6:e7:75:e2:4f:cd:47:7f:8b:
                    a9:f8:68:59:2e:72:17:13:c5:d1:35:cc:36:43:27:
                    39:90:5a:78:24:42:d1:6b:2a:3a:93:25:a9:de:aa:
                    5d:3a:33:2a:16:08:06:41:4f:78:14:04:aa:c2:ab:
                    c4:26:e1:9a:62:69:4d:7e:9d:1c:01:62:32:00:41:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9F:6D:CA:E2:7B:91:CF:49:49:04:24:64:50:F8:A8:15:74:44:93
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:df00::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:2b:63:6d:d0:60:7b:2b:0e:4c:2d:d4:c3:39:f3:52:a8:3b:
         cd:56:c9:c7:51:25:80:f4:aa:85:f2:a3:ba:48:5e:2f:93:47:
         9c:12:9d:b6:59:78:3d:d7:21:c3:8f:86:7a:75:4f:3a:eb:22:
         99:89:6e:93:4a:6a:53:34:e6:58:93:4c:37:5f:0c:d0:52:fe:
         86:8a:ef:4e:96:b0:68:f9:d8:73:50:75:97:4e:82:c4:1e:0a:
         78:4f:d1:cb:a8:cd:88:89:0f:63:e4:a1:89:4d:5f:42:25:62:
         39:f8:22:57:2e:a5:24:ea:74:40:89:96:65:89:8d:fe:27:99:
         16:72:d3:02:5f:a8:18:b6:67:60:84:d4:d3:16:35:9f:b2:49:
         af:6a:16:49:55:75:6c:d1:de:5c:2d:1a:eb:f9:78:12:c7:75:
         ef:59:13:c5:fb:1d:77:ea:07:9d:15:5f:47:10:9c:ce:06:9f:
         41:14:f8:24:a4:8b:a0:17:5f:fb:1e:36:11:3c:ca:a2:0e:8a:
         0d:37:0c:4a:c7:15:64:79:ac:7e:af:d4:28:8e:df:1c:78:41:
         5a:5c:20:85:58:62:95:9e:cd:6f:56:42:97:b3:7a:43:b3:44:
         b6:0b:f5:f8:b6:2a:64:7b:ca:a6:78:b8:f1:ba:25:74:4c:65:
         5c:d0:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:01:06 2025 by rpki-client