Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS50104.roa
File:                     AS50104.roa (raw, json)
Hash identifier:          JQy6Poopi/+UboNMBT8dd03k2KXbr0YCN958nUo6IGA=
Subject key identifier:   B6:8C:6F:59:BC:6E:2D:1D:DF:BB:74:05:D9:DD:33:97:7C:A1:C5:FB
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       178B70450162A86FFC27256F12DA03A242ED08DB
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS50104.roa
Signing time:             Fri 04 Jul 2025 06:53:22 +0000
ROA not before:           Fri 04 Jul 2025 06:48:22 +0000
ROA not after:            Fri 03 Jul 2026 06:53:22 +0000
asID:                     50104
IP address blocks:        2a0a:6040:4400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8b:70:45:01:62:a8:6f:fc:27:25:6f:12:da:03:a2:42:ed:08:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:22 2025 GMT
            Not After : Jul  3 06:53:22 2026 GMT
        Subject: CN=B68C6F59BC6E2D1DDFBB7405D9DD33977CA1C5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:00:bf:4e:da:40:b0:dd:74:f0:27:98:8a:
                    34:3f:61:e8:9b:98:63:ee:05:82:39:8c:c4:1d:1b:
                    0e:fa:20:45:0b:18:dd:c5:c9:5a:46:8f:33:2d:a2:
                    59:7e:37:3a:cc:2f:07:55:7f:32:9a:5d:b9:a9:2e:
                    ea:ef:54:cc:38:4e:5e:7d:93:40:19:d5:f3:9b:ac:
                    5a:84:39:b7:21:4e:15:a6:5b:39:72:8b:d3:0e:82:
                    a2:69:98:a7:f9:12:00:26:23:25:ef:f0:94:dd:9c:
                    1a:1a:27:d6:66:f7:e3:f5:7b:2d:25:35:16:86:2d:
                    64:39:17:9b:6e:9e:58:ff:f9:6f:dd:14:d6:a9:3b:
                    6f:69:19:99:88:05:4c:aa:09:ac:da:f5:8d:2b:0e:
                    f9:92:49:0c:28:e1:33:31:ad:d8:75:18:08:ef:21:
                    33:12:56:31:b0:f4:8e:40:3b:60:67:63:08:2f:9f:
                    3e:e0:86:9d:05:bb:ff:21:c8:26:6a:2a:57:da:d6:
                    7f:8e:15:59:41:55:72:8b:82:4f:f4:b9:89:0b:64:
                    bf:72:f3:da:b2:8b:a6:78:b5:7f:12:37:29:3f:36:
                    e4:86:a9:8b:3e:2b:13:29:4d:47:8e:5b:2b:bc:04:
                    ed:93:14:2e:f2:cc:19:75:3f:c4:69:00:0f:7b:d4:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8C:6F:59:BC:6E:2D:1D:DF:BB:74:05:D9:DD:33:97:7C:A1:C5:FB
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS50104.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:0e:57:27:20:5f:19:51:95:41:8d:87:50:3f:32:35:14:dd:
         3d:95:de:d7:5f:9e:cc:5b:9c:6e:97:d2:3d:93:39:cd:d5:e2:
         22:92:e9:3a:8c:37:55:04:4d:a0:30:f5:26:22:5f:11:58:fc:
         e3:d6:ba:c0:85:64:45:fa:a9:6f:33:3c:53:aa:9a:3c:94:c5:
         e9:02:2a:5d:8e:1f:55:d1:ca:cf:12:e3:2e:bf:7e:ff:9f:95:
         46:64:4e:d0:d3:e6:4f:4d:cd:b5:16:72:96:2b:81:5a:48:f2:
         ca:ea:1e:3a:39:83:e0:d1:a6:e0:fc:72:51:13:af:82:01:a8:
         0a:7b:1d:66:57:58:37:95:bd:f8:b8:2d:f6:8e:fc:de:8b:8a:
         e7:e2:42:fe:87:e3:4f:3b:d4:c3:61:4d:73:31:39:34:c1:ed:
         bc:0d:c5:ad:a1:4c:1f:84:56:8f:db:da:6f:fa:c2:75:e2:c4:
         04:46:05:de:6a:e7:1e:f4:f7:04:dc:6b:cf:4e:95:a2:da:9e:
         5c:c9:c5:c8:a0:9e:42:76:25:53:d0:40:45:9a:97:29:44:71:
         8d:af:55:4b:59:b0:ba:de:50:35:57:cf:70:15:ab:6e:68:00:
         e8:82:1a:8f:af:ae:d3:2f:40:a6:d3:53:ec:5a:cd:03:25:5e:
         ec:a4:43:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:44:53 2025 by rpki-client