Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS54681.roa
File:                     AS54681.roa (raw, json)
Hash identifier:          mAxjwqaNKmF3GxXTLq7U9GU7sm06SU37cKUe64q6BDQ=
Subject key identifier:   7D:AD:C3:82:8F:A8:5E:A0:12:8C:3A:09:32:E1:0D:57:BF:2E:66:DD
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       30878EC95D90060B221ADB6BBC87B5BE03FE5B1C
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS54681.roa
Signing time:             Fri 04 Jul 2025 06:53:18 +0000
ROA not before:           Fri 04 Jul 2025 06:48:18 +0000
ROA not after:            Fri 03 Jul 2026 06:53:18 +0000
asID:                     54681
IP address blocks:        2a05:dfc1:200::/40 maxlen: 48
                          2a05:dfc1:2000::/40 maxlen: 48
                          2a05:dfc1:2100::/40 maxlen: 48
                          2a05:dfc1:2200::/40 maxlen: 48
                          2a05:dfc1:2300::/40 maxlen: 40
                          2a05:dfc1:2400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:87:8e:c9:5d:90:06:0b:22:1a:db:6b:bc:87:b5:be:03:fe:5b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:18 2025 GMT
            Not After : Jul  3 06:53:18 2026 GMT
        Subject: CN=7DADC3828FA85EA0128C3A0932E10D57BF2E66DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:87:c6:e6:59:2c:89:b2:eb:2a:71:0e:8a:
                    7f:eb:26:f2:78:1f:de:d3:e7:12:32:dd:4e:18:06:
                    0c:b1:f5:b4:72:04:4f:cf:48:15:c4:14:88:52:50:
                    38:9a:af:23:79:5a:75:bd:fe:88:3c:cd:f8:08:05:
                    b6:85:b2:bf:54:41:44:ab:f6:87:cf:bf:2b:11:b5:
                    a1:89:6a:6a:a6:29:43:23:7f:52:b7:61:e4:66:61:
                    44:30:ac:68:e9:ba:0f:71:e6:e2:24:99:7a:0d:fb:
                    f2:15:7d:c5:c4:d4:60:5b:1a:54:c8:86:49:fd:5c:
                    23:6c:2b:30:e7:19:3e:e1:92:7f:1f:4e:9c:64:5a:
                    8b:b7:7a:8f:17:0f:aa:0c:9c:8b:c8:18:04:96:2d:
                    d9:3a:79:7b:2d:7b:d6:97:ae:41:1e:48:87:32:22:
                    a2:48:83:5b:18:27:c0:36:7f:5f:84:ae:1b:88:45:
                    eb:08:c6:f1:75:34:16:f8:2d:52:11:09:78:32:b1:
                    3d:83:48:ab:3b:61:ac:77:04:a3:9e:0a:04:a9:c9:
                    f0:60:b7:06:e0:c7:d0:16:4e:1e:59:d0:b6:44:11:
                    96:0c:ca:7b:5d:72:80:84:6d:3d:d8:76:93:ba:9d:
                    4b:44:1c:d8:bc:fa:68:59:f6:d8:e8:94:63:c2:bf:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AD:C3:82:8F:A8:5E:A0:12:8C:3A:09:32:E1:0D:57:BF:2E:66:DD
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS54681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:200::/40
                  2a05:dfc1:2000::-2a05:dfc1:24ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:b3:bc:89:1a:54:d9:9f:bc:f4:ea:56:58:01:ae:42:b1:
         d5:f6:70:f0:98:95:7b:d7:fc:6b:aa:28:4e:18:96:39:d9:75:
         62:34:63:48:31:d0:7a:68:98:b8:29:2e:d2:b1:9e:fe:20:b4:
         d2:a3:29:76:08:0b:1f:56:d7:48:b6:b3:59:1f:a1:4d:7c:4c:
         c7:04:1f:3f:c5:20:02:e2:70:1a:3f:93:af:a1:f1:ba:e8:c6:
         f9:59:59:00:2d:a5:48:94:90:63:78:88:df:1f:fa:18:89:38:
         76:f9:0f:d2:d8:9e:75:f9:e3:71:19:1a:1e:a1:70:61:02:9d:
         22:46:81:8c:59:9d:bf:a9:d3:70:d5:ab:e2:ae:fe:43:12:1d:
         8b:40:98:aa:b0:43:1b:bd:0b:33:55:93:af:e2:4c:a7:a4:c6:
         41:ea:f3:88:3d:e2:93:ca:36:ea:8d:23:82:02:5f:25:27:fb:
         ac:ca:22:fb:a8:13:ab:5b:4f:a4:07:0c:85:a8:77:40:49:5d:
         3b:44:db:6b:62:6b:f0:1e:3e:c4:9c:cd:ec:cc:f8:80:8a:2d:
         9b:65:f6:cd:cb:a3:ef:a0:87:8c:dc:6d:34:f9:c2:e5:2f:82:
         dc:83:25:23:8b:bb:ae:53:96:33:ba:a9:4d:14:db:ee:dd:bc:
         0f:a3:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:12:41 2025 by rpki-client