Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57308.roa
File:                     AS57308.roa (raw, json)
Hash identifier:          bpJjvB5bzSfxs0jDMpDAOvFLtV/O8bav31uOZa6ejak=
Subject key identifier:   71:1C:17:68:EF:F4:D9:25:10:90:DF:4D:D1:D9:C3:13:08:7C:CF:77
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       3A0E91C55F60FEDBA51B40123A584B59CF2D8B86
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57308.roa
Signing time:             Fri 04 Jul 2025 06:52:57 +0000
ROA not before:           Fri 04 Jul 2025 06:47:57 +0000
ROA not after:            Fri 03 Jul 2026 06:52:57 +0000
asID:                     57308
IP address blocks:        2a05:dfc1:4e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0e:91:c5:5f:60:fe:db:a5:1b:40:12:3a:58:4b:59:cf:2d:8b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:47:57 2025 GMT
            Not After : Jul  3 06:52:57 2026 GMT
        Subject: CN=711C1768EFF4D9251090DF4DD1D9C313087CCF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:c0:6d:9a:cf:e2:c0:6b:45:ab:25:b9:c8:
                    6d:5a:82:69:fd:43:1f:18:59:77:5b:b7:78:92:7f:
                    99:9f:86:8f:bd:5d:d6:b2:cc:c9:ac:ed:29:97:4c:
                    1d:4c:db:b9:25:0b:21:69:ce:7c:df:33:b5:0b:63:
                    1e:3b:dc:04:fd:d9:54:23:35:45:0b:a1:f8:95:c5:
                    66:a0:59:14:62:b7:55:1a:1c:6a:76:74:e1:0a:b4:
                    ce:2c:02:fc:a0:47:9b:99:7b:93:ae:30:2a:48:ef:
                    29:ff:0d:32:28:32:1b:dd:71:2a:dc:ef:22:fb:c7:
                    94:5c:79:e4:1c:1f:bd:97:50:72:99:7f:aa:3a:21:
                    e0:40:5a:7a:27:2f:90:71:45:8d:f6:4d:07:14:d5:
                    ca:26:ba:c0:6a:40:62:f5:a1:65:1d:d6:13:f4:09:
                    14:61:46:52:d1:d8:9c:c3:a3:83:2f:f6:b5:66:fa:
                    68:99:21:8f:37:49:59:b0:47:ad:4b:08:4c:cf:94:
                    c8:47:f5:a6:5b:14:6f:7c:9d:ec:95:40:28:76:82:
                    5f:fe:92:83:8b:c6:f0:05:4e:5c:31:89:bd:cd:1b:
                    9a:4e:7a:2f:df:61:52:28:32:ae:94:2c:9e:6f:19:
                    df:9e:2a:aa:50:d5:8a:74:b3:d4:83:58:e6:c2:dc:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1C:17:68:EF:F4:D9:25:10:90:DF:4D:D1:D9:C3:13:08:7C:CF:77
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57308.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:4e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:b0:bc:58:fc:4d:0b:ff:04:e8:16:66:d6:80:33:35:24:
         2e:99:19:6c:02:9f:65:9d:e2:d7:d2:b9:af:90:5b:b4:2c:2b:
         9c:5d:4d:17:b0:50:cd:f5:e5:40:4d:51:2c:f0:12:62:29:dc:
         70:6d:10:91:fa:52:e9:a1:3f:81:b3:01:71:97:32:7e:d0:dd:
         7e:60:90:91:16:2a:68:af:ea:dd:f6:17:76:31:39:22:f0:6c:
         48:cd:f1:c0:c5:da:bf:34:69:15:6a:63:6d:a4:91:82:df:75:
         85:f5:61:c5:71:0b:6c:5d:86:b7:2e:ce:5d:f2:09:69:56:61:
         8f:fa:cb:75:5d:a3:93:b9:b6:5c:2e:fa:3a:da:98:36:46:69:
         59:e3:6d:d9:77:86:0e:0a:e7:f4:04:3c:d6:49:c8:6f:4c:06:
         2a:da:41:1f:09:9e:48:00:60:e4:91:a6:1c:46:70:e4:c2:3f:
         10:0d:6e:f9:0a:a8:64:52:0d:80:d9:b3:f5:1b:96:c9:e6:df:
         88:7b:02:36:04:06:7a:bb:b4:ae:25:25:c2:fd:99:37:9f:36:
         2d:f4:a1:78:64:72:e7:cb:9e:e5:db:f7:17:c0:4f:64:60:b0:
         f3:10:fe:66:8b:7a:e5:36:fe:a6:24:ca:29:98:80:89:cf:3d:
         0a:26:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:06:55 2025 by rpki-client