Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS50755.roa
File:                     AS50755.roa (raw, json)
Hash identifier:          pWty1d8t6+xz+LH+GRRXad2dNyzuPNxzgJoV9UXcTSU=
Subject key identifier:   F2:4F:56:93:26:09:EE:F7:DD:CF:C7:C0:C4:A0:AB:B4:26:6A:C7:FA
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       6663BEEC07A59C8E757C277F516A1EAD7A866728
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS50755.roa
Signing time:             Fri 04 Jul 2025 06:53:09 +0000
ROA not before:           Fri 04 Jul 2025 06:48:09 +0000
ROA not after:            Fri 03 Jul 2026 06:53:09 +0000
asID:                     50755
IP address blocks:        2a0a:6040:ed00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:63:be:ec:07:a5:9c:8e:75:7c:27:7f:51:6a:1e:ad:7a:86:67:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:09 2025 GMT
            Not After : Jul  3 06:53:09 2026 GMT
        Subject: CN=F24F56932609EEF7DDCFC7C0C4A0ABB4266AC7FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:59:5f:b0:43:85:5d:34:d2:55:72:a1:49:
                    1c:2b:93:21:44:a7:fd:57:e6:73:70:3c:84:ef:d4:
                    1d:60:64:49:d7:91:1a:ac:1a:11:d9:5c:44:a7:49:
                    14:84:8d:a8:c8:bf:0d:41:e5:5f:39:8d:8c:3f:88:
                    e6:2d:bf:21:8c:e5:c3:dd:b8:b5:f6:16:8f:f8:03:
                    2a:9b:14:c3:6a:f4:60:c9:db:e7:88:d4:90:b0:5a:
                    76:56:4c:89:13:17:c2:28:53:e9:be:66:c3:4e:4d:
                    59:3e:5d:8a:05:a3:a3:d2:9b:df:40:6b:5d:45:6d:
                    a9:3f:85:3b:43:57:81:e5:19:df:1f:31:cb:ab:72:
                    70:7d:43:42:9d:60:ef:25:03:db:38:48:9e:ad:f5:
                    4d:44:43:e9:a8:03:46:3f:84:70:0c:70:85:f0:e9:
                    a5:eb:3f:f1:b2:65:08:cc:32:7b:b8:6a:51:ff:10:
                    70:1d:bf:de:a0:70:a2:f7:9c:5a:3d:4b:80:f2:7a:
                    de:6b:a6:db:5e:02:3f:df:24:21:36:bc:d3:8d:2a:
                    2b:7a:2c:6f:10:bd:d9:59:15:c7:54:b7:63:3d:4b:
                    97:10:ab:ab:f5:b0:03:44:cb:a4:a9:58:cb:38:5c:
                    c5:32:b4:82:e4:23:a6:35:f7:1b:1d:fa:18:48:42:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4F:56:93:26:09:EE:F7:DD:CF:C7:C0:C4:A0:AB:B4:26:6A:C7:FA
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS50755.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ed00::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:bf:40:ff:56:5d:92:74:a1:33:e5:3a:6a:d9:44:44:5d:
         0e:68:65:23:fb:8c:75:25:47:bc:ea:0d:ae:28:b9:95:53:2d:
         96:7e:0a:0b:b9:d7:70:e9:b6:dc:59:57:0a:3c:b7:47:1d:ff:
         63:05:d9:c6:6b:f2:e7:d0:15:f0:b1:c6:cb:72:db:d5:16:7b:
         6d:97:46:b6:a1:d5:c5:7c:a9:e4:2e:f8:92:f3:ee:89:63:1b:
         d3:52:f8:6d:87:e7:bc:ab:f4:a9:2b:88:65:fa:cd:84:9e:35:
         80:63:74:27:54:39:a9:94:f8:33:d9:5a:98:52:d2:6e:62:c3:
         3f:d4:5f:fe:b0:6f:73:55:4e:12:de:b9:12:da:bd:aa:b7:0d:
         52:06:da:b0:95:da:45:cc:d1:1e:6b:09:25:db:80:5c:32:b9:
         36:60:9d:0d:8d:ef:99:fc:d8:4a:14:d6:29:6b:78:be:34:07:
         b3:94:f9:fd:89:2d:c5:e4:d5:db:1b:3e:a9:ba:20:8e:97:ca:
         9d:02:8f:f3:ac:fd:f6:00:2e:d6:72:96:fd:e9:60:9e:29:c6:
         cd:96:71:7a:83:6c:13:ef:31:92:35:a7:9a:12:9d:b0:98:44:
         66:cd:a2:1a:bc:39:a7:70:47:5d:e1:2b:83:15:54:ec:70:46:
         0d:6e:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:14:58 2025 by rpki-client