Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51019.roa
File:                     AS51019.roa (raw, json)
Hash identifier:          KKgvhg8eYPc8a7xDL/dNM0RA2NdureIdnBEZ3wjG4+A=
Subject key identifier:   8D:F1:35:69:DE:6F:D2:38:96:61:C5:3C:48:EA:51:0C:9C:B1:92:96
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       1500B6EC9F31C302FD2BEB6DB987265D4627F565
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51019.roa
Signing time:             Fri 04 Jul 2025 06:53:02 +0000
ROA not before:           Fri 04 Jul 2025 06:48:02 +0000
ROA not after:            Fri 03 Jul 2026 06:53:02 +0000
asID:                     51019
IP address blocks:        2a05:dfc1:b00f::/48 maxlen: 48
                          2a05:dfc1:ff00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:00:b6:ec:9f:31:c3:02:fd:2b:eb:6d:b9:87:26:5d:46:27:f5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:02 2025 GMT
            Not After : Jul  3 06:53:02 2026 GMT
        Subject: CN=8DF13569DE6FD2389661C53C48EA510C9CB19296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:1e:8b:78:a7:8e:a7:5e:27:ff:23:cc:59:
                    36:15:49:61:bd:56:05:eb:1a:32:73:f5:35:c6:e5:
                    6e:26:e9:79:ef:aa:18:26:a7:36:34:69:9e:9c:7b:
                    88:2a:4d:bb:c7:7f:09:c1:bb:ed:3c:7a:dc:87:6c:
                    e3:81:b1:24:8e:15:81:2c:0d:f6:dd:d4:d5:4e:93:
                    bd:b8:e0:6d:20:5e:67:f7:78:05:b0:d0:15:09:43:
                    e0:28:f0:07:e9:3c:96:2d:75:f7:b0:36:c8:86:35:
                    a5:11:38:3e:c3:45:1e:9c:a4:1d:a8:56:c3:ca:5e:
                    50:81:e3:ac:50:e1:ac:a4:2d:ae:a5:a3:e3:ca:93:
                    3c:7c:c0:c2:f4:34:df:89:7e:7c:74:6c:fe:7d:bc:
                    71:50:48:2e:2e:16:3c:f2:f1:4f:21:80:5f:e7:33:
                    ae:ff:8c:19:6f:b2:4e:0a:63:cd:ea:f6:5a:41:f7:
                    64:0a:03:eb:55:b2:5c:59:d7:38:e2:c4:82:1d:77:
                    ff:59:ee:9d:6c:56:52:f5:66:fb:1d:32:e1:60:f2:
                    ef:7c:64:3f:eb:bb:9d:18:a8:ab:a8:06:af:89:6e:
                    cb:a8:aa:38:48:35:a6:8d:89:b0:a1:42:0e:f3:0f:
                    18:f5:ab:02:03:78:50:63:8c:e9:0f:fd:69:64:7c:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F1:35:69:DE:6F:D2:38:96:61:C5:3C:48:EA:51:0C:9C:B1:92:96
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:b00f::/48
                  2a05:dfc1:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         e3:4e:76:91:fb:33:70:af:10:75:ff:3c:fa:83:ab:c1:0c:60:
         18:30:79:b8:2b:49:b2:3d:84:d1:1c:0e:56:00:a3:ed:20:42:
         12:b9:2f:d1:24:b7:e9:ee:4b:b1:94:5b:c0:79:37:6e:78:3b:
         35:82:2b:85:d8:c8:73:7f:c7:0f:2b:fd:19:08:a1:f6:2e:28:
         40:7b:87:a6:d6:83:a2:d9:eb:e3:f0:57:62:60:4c:f2:9d:b7:
         5a:ad:1e:a0:da:a9:96:81:fe:e7:84:25:62:e6:40:40:2b:cc:
         f2:69:f2:67:c1:d9:b7:c2:f7:03:91:f9:53:1a:ee:a5:1b:d0:
         74:f0:61:c3:12:ec:5e:89:00:bb:7e:8d:ca:cb:af:da:61:0a:
         78:5d:15:48:d8:fa:c7:b6:8f:26:4e:82:b1:f7:12:07:b0:da:
         38:cd:87:e4:e0:a2:99:f0:83:d9:d7:1d:97:88:88:f7:09:75:
         25:91:b3:0c:d2:66:93:47:a8:68:c5:bf:4f:b1:a1:b6:b0:27:
         f4:5d:89:1e:1a:03:40:bc:43:f4:03:74:f3:69:d6:e9:2b:a1:
         29:eb:13:f2:a9:8a:d2:bc:5d:99:13:3b:c8:a3:a7:10:14:5f:
         ef:87:bd:53:55:c1:61:f2:b4:15:f3:12:3a:a1:02:3a:8b:3c:
         e2:72:c8:01
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUFQC27J8xwwL9K+ttuYcmXUYn9WUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDJaFw0yNjA3MDMwNjUzMDJaMDMxMTAvBgNV
BAMTKDhERjEzNTY5REU2RkQyMzg5NjYxQzUzQzQ4RUE1MTBDOUNCMTkyOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBR6LeKeOp14n/yPMWTYVSWG9
VgXrGjJz9TXG5W4m6XnvqhgmpzY0aZ6ce4gqTbvHfwnBu+08etyHbOOBsSSOFYEs
Dfbd1NVOk7244G0gXmf3eAWw0BUJQ+Ao8AfpPJYtdfewNsiGNaUROD7DRR6cpB2o
VsPKXlCB46xQ4aykLa6lo+PKkzx8wML0NN+Jfnx0bP59vHFQSC4uFjzy8U8hgF/n
M67/jBlvsk4KY83q9lpB92QKA+tVslxZ1zjixIIdd/9Z7p1sVlL1ZvsdMuFg8u98
ZD/ru50YqKuoBq+JbsuoqjhINaaNibChQg7zDxj1qwIDeFBjjOkP/WlkfNFDAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUjfE1ad5v0jiWYcU8SOpRDJyxkpYwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTNTEwMTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH
AQcBAf8EGzAZMBcEAgACMBEDBwAqBd/BsA8DBgAqBd/B/zANBgkqhkiG9w0BAQsF
AAOCAQEA4052kfszcK8Qdf88+oOrwQxgGDB5uCtJsj2E0RwOVgCj7SBCErkv0SS3
6e5LsZRbwHk3bng7NYIrhdjIc3/HDyv9GQih9i4oQHuHptaDotnr4/BXYmBM8p23
Wq0eoNqploH+54QlYuZAQCvM8mnyZ8HZt8L3A5H5UxrupRvQdPBhwxLsXokAu36N
ysuv2mEKeF0VSNj6x7aPJk6CsfcSB7DaOM2H5OCimfCD2dcdl4iI9wl1JZGzDNJm
k0eoaMW/T7GhtrAn9F2JHhoDQLxD9AN082nW6SuhKesT8qmK0rxdmRM7yKOnEBRf
74e9U1XBYfK0FfMSOqECOos84nLIAQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:11:13 2025 by rpki-client