Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57110.roa
File:                     AS57110.roa (raw, json)
Hash identifier:          pNdU+KGcZHbUIWpFSYz/0u0RqwKx7Il3gN3SKK4mtgc=
Subject key identifier:   42:13:FD:82:89:15:12:1B:D6:76:54:CD:E7:6E:A3:A3:B2:E3:FA:7E
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       7919F87D3A3AB07FC18EB9BC4349A8D9C2870B68
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57110.roa
Signing time:             Fri 04 Jul 2025 06:53:17 +0000
ROA not before:           Fri 04 Jul 2025 06:48:17 +0000
ROA not after:            Fri 03 Jul 2026 06:53:17 +0000
asID:                     57110
IP address blocks:        2a06:9f81:1600::/40 maxlen: 48
                          2a06:9f81:1700::/40 maxlen: 48
                          2a06:9f81:1800::/40 maxlen: 48
                          2a06:9f81:1900::/40 maxlen: 48
                          2a06:9f81:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:f8:7d:3a:3a:b0:7f:c1:8e:b9:bc:43:49:a8:d9:c2:87:0b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:17 2025 GMT
            Not After : Jul  3 06:53:17 2026 GMT
        Subject: CN=4213FD828915121BD67654CDE76EA3A3B2E3FA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:99:57:a8:70:ec:bc:fe:c1:ad:44:9f:04:
                    6c:8c:8d:a5:c3:54:4d:74:f8:6d:fa:42:16:5e:75:
                    72:8d:99:39:0b:2f:26:a2:5f:7a:ad:d7:86:d5:72:
                    28:cd:69:d5:2e:6d:53:58:6e:5b:b3:17:c1:0a:2d:
                    b7:de:38:d4:e4:b2:1c:fa:22:2d:40:06:91:22:75:
                    78:42:26:80:cc:ce:d0:52:f0:d8:40:c0:ec:48:60:
                    d9:aa:a8:ff:84:4f:f2:e2:c0:3d:f9:d7:38:a9:fc:
                    ae:5b:6b:c9:8f:f4:06:4b:1b:ec:7b:10:ac:4b:0b:
                    07:d3:a2:70:10:95:ac:6f:f8:e8:53:de:4d:df:bc:
                    84:95:c4:2d:a5:ec:9e:6a:c6:24:26:c8:86:0a:96:
                    0c:1d:9e:8d:e9:26:9f:f8:9d:87:67:7f:29:2b:c9:
                    3a:11:c5:8c:6c:35:26:83:e4:d8:2d:46:ec:38:07:
                    f9:2a:1b:db:c4:64:ff:74:02:d6:29:95:01:19:8b:
                    e9:5b:dd:2f:28:5b:7b:7c:b1:53:61:e6:ab:23:f1:
                    24:1d:6f:e0:2b:89:a3:28:f9:e9:d0:7d:c5:fb:c1:
                    71:84:17:db:de:61:17:88:01:07:b7:72:b9:63:00:
                    66:7d:37:8e:8d:fa:3a:66:e8:3c:1d:eb:a0:1f:1b:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:13:FD:82:89:15:12:1B:D6:76:54:CD:E7:6E:A3:A3:B2:E3:FA:7E
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:1600::-2a06:9f81:19ff:ffff:ffff:ffff:ffff:ffff
                  2a06:9f81:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:ac:e7:6d:7e:11:7f:3e:74:1b:a8:c8:7b:97:62:1d:fc:e4:
         db:ce:aa:b0:2e:0e:45:38:5f:dd:e1:ed:40:ee:4a:3d:ea:85:
         b0:b1:d3:0b:74:94:89:ba:4f:cc:df:52:61:2d:50:e5:63:e4:
         cb:bb:7e:85:6d:5f:33:64:c9:9b:ca:e0:ce:0b:09:99:b9:45:
         b3:a7:8c:c3:e0:e6:26:9b:6e:f7:3d:5d:76:db:67:ee:e4:4c:
         da:14:9b:dd:41:ee:58:80:9f:09:ac:7f:40:60:1e:12:e9:a9:
         8c:ef:6b:ac:4d:a4:6e:8d:16:77:66:46:05:8c:d5:96:96:f6:
         03:4c:52:83:a8:b1:b2:a5:44:7e:ec:22:69:4b:b1:78:ef:89:
         2c:be:49:da:da:c0:66:06:04:15:47:d3:51:c6:ce:c8:aa:ad:
         de:97:e7:bc:f8:e3:03:89:2e:b2:5c:2b:c0:56:e0:90:c0:2f:
         ad:8a:61:7f:9a:7b:30:ea:ea:bd:91:f5:38:db:69:34:23:40:
         8c:58:f8:05:06:02:42:a6:dd:3e:f2:d2:e2:34:3b:e7:c7:08:
         0b:ff:4a:bc:05:f9:40:9b:eb:41:54:69:cc:06:54:39:49:f5:
         8b:51:9a:e7:9d:53:c0:b9:cb:80:fa:c0:1f:d3:7b:7a:5b:4f:
         00:c9:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:42:15 2025 by rpki-client