Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57483.roa
File:                     AS57483.roa (raw, json)
Hash identifier:          AwC50MZMpWpOuftWtVaN0MVgrj+dgAD4dvmjvfxu9zY=
Subject key identifier:   6C:D6:EF:64:E6:5E:AA:00:F9:74:47:18:D5:9C:3A:C3:0C:24:D7:CC
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       1B98D54A69FBC56FD9B680590BFF6927C59BA72F
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57483.roa
Signing time:             Fri 04 Jul 2025 06:53:01 +0000
ROA not before:           Fri 04 Jul 2025 06:48:01 +0000
ROA not after:            Fri 03 Jul 2026 06:53:01 +0000
asID:                     57483
IP address blocks:        2a06:9f81:2500::/40 maxlen: 48
                          2a06:9f81:2600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:98:d5:4a:69:fb:c5:6f:d9:b6:80:59:0b:ff:69:27:c5:9b:a7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:01 2025 GMT
            Not After : Jul  3 06:53:01 2026 GMT
        Subject: CN=6CD6EF64E65EAA00F9744718D59C3AC30C24D7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:e4:75:db:fa:d1:e9:28:d0:9b:21:61:36:
                    cc:55:30:ee:90:c8:3c:d3:e0:57:4d:d1:a4:91:57:
                    13:25:65:97:05:be:c0:2c:4f:68:91:49:57:49:a6:
                    10:52:20:15:ec:7d:dc:8e:90:ff:ab:57:df:9d:8d:
                    49:28:69:c6:b3:2c:db:0a:43:a1:50:eb:b8:d6:8b:
                    3c:63:20:86:e9:4f:9f:2c:aa:07:fd:87:7b:73:a8:
                    9b:6f:98:75:15:bc:81:42:5e:70:5d:d0:0f:db:91:
                    7c:08:c6:19:4a:ee:59:41:bb:bb:2b:95:11:50:4a:
                    2b:cf:9f:05:1a:99:28:19:ee:41:fa:21:a0:e4:2b:
                    20:5f:fb:ed:ae:fb:25:45:73:e7:0c:73:78:4f:23:
                    70:0e:1e:46:b5:6a:ae:65:80:10:a7:45:ea:64:89:
                    1e:e2:13:64:d1:08:7a:a9:f9:11:e5:ed:bd:19:12:
                    b5:82:73:08:a7:5c:11:38:86:14:b0:d9:e4:06:e6:
                    45:68:df:7f:06:7d:be:5e:6e:33:d4:97:eb:25:86:
                    76:d4:c9:ac:66:db:8c:79:62:b8:44:a4:65:4d:31:
                    87:62:0b:8c:d8:a6:8a:f0:6d:1d:ee:54:f5:6c:55:
                    f2:8d:96:dd:81:1c:70:08:9a:4a:ad:af:20:51:4a:
                    5b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:EF:64:E6:5E:AA:00:F9:74:47:18:D5:9C:3A:C3:0C:24:D7:CC
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:2500::-2a06:9f81:26ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3e:a5:12:1e:4b:0e:4a:41:a5:6f:f0:83:a2:74:b7:58:bb:e4:
         f0:d9:d7:a6:98:47:b0:36:91:fc:69:41:65:96:8f:27:97:21:
         ab:fc:30:8e:69:d9:38:b1:51:f4:46:76:85:43:b2:d2:89:c6:
         a9:3d:c7:d9:41:dc:79:e1:06:86:73:bb:60:6c:b2:45:15:a1:
         a4:fb:f5:61:0e:1f:bd:23:72:88:f5:c4:96:a1:5b:8a:96:72:
         03:17:01:1a:1c:c5:1b:d2:73:9e:d5:74:c1:cc:0e:08:29:ce:
         77:ea:03:78:98:cc:5a:4a:41:f7:b4:b9:51:ff:87:04:ef:ee:
         e9:96:76:33:b4:17:99:81:62:a8:06:88:33:c7:85:94:fc:a3:
         5b:c9:88:19:76:16:00:2c:c9:b9:63:37:4f:f9:a6:8c:5d:79:
         95:97:90:9e:21:05:73:89:60:c9:81:9a:c7:24:61:41:73:94:
         77:70:e4:c2:a4:3b:e2:b9:6c:8e:8c:5f:19:7a:20:5a:d4:aa:
         a2:b9:c6:6e:e4:ca:c7:e6:c8:4d:fc:c4:94:64:ff:4e:81:f8:
         a0:4f:38:ce:86:48:e8:0f:ed:af:ee:62:fb:88:57:d0:49:36:
         e1:8e:c9:5e:e5:6e:19:a5:3b:6e:d2:4e:e0:5a:b2:82:94:d6:
         03:36:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:14:55 2025 by rpki-client