Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57974.roa
File:                     AS57974.roa (raw, json)
Hash identifier:          n9+ho1R7jkNtjCfzC+FORE2jnQxl4K7X6kv7umieIro=
Subject key identifier:   D1:85:87:47:CF:B7:5B:20:98:85:54:6A:29:24:79:E5:AD:5D:B9:F4
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       07547148E07675C464DDC74FC32E6410A9BE6FC5
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57974.roa
Signing time:             Fri 04 Jul 2025 06:53:11 +0000
ROA not before:           Fri 04 Jul 2025 06:48:11 +0000
ROA not after:            Fri 03 Jul 2026 06:53:11 +0000
asID:                     57974
IP address blocks:        2a0a:6040:6f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:54:71:48:e0:76:75:c4:64:dd:c7:4f:c3:2e:64:10:a9:be:6f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:11 2025 GMT
            Not After : Jul  3 06:53:11 2026 GMT
        Subject: CN=D1858747CFB75B209885546A292479E5AD5DB9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:d3:bd:23:cf:e8:7c:fb:39:b5:84:6d:71:
                    43:f6:c7:4f:72:17:19:55:ea:3e:e3:0e:1c:cc:01:
                    14:af:cb:ef:4c:32:7f:e2:e9:02:f9:f6:23:74:d8:
                    2b:ff:54:32:8b:c2:38:9f:1b:31:93:19:17:71:97:
                    2e:53:39:29:bf:4e:73:09:95:1a:4a:45:88:e2:41:
                    c1:32:b5:b6:b1:59:62:b6:91:f2:a4:dd:3a:51:9b:
                    29:12:33:4e:eb:48:b8:6f:5a:48:86:d8:69:39:e3:
                    eb:f4:fa:af:26:ac:18:54:fd:14:91:8b:22:59:9b:
                    41:55:11:a4:ab:7d:2b:7c:0b:ec:e3:70:3d:76:e9:
                    be:5b:8d:c8:33:d5:62:06:ed:c3:fc:49:58:d8:7d:
                    45:38:1a:4b:a0:1a:27:1c:26:2a:94:3d:cb:33:40:
                    c8:d9:4b:ff:2a:ca:56:28:03:ee:5b:7c:2f:16:3e:
                    b3:57:9d:e2:76:af:50:54:cf:8d:23:f6:be:56:99:
                    8b:59:aa:17:fb:d0:05:a5:4b:3e:31:4b:a2:3b:28:
                    63:4a:fd:b9:9c:8c:82:b8:ca:b7:61:3e:6f:41:12:
                    91:16:8f:06:eb:10:a7:d6:dc:87:84:43:18:b5:f0:
                    a2:08:d9:be:ea:93:69:2e:4d:7a:ed:ef:92:66:f1:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:85:87:47:CF:B7:5B:20:98:85:54:6A:29:24:79:E5:AD:5D:B9:F4
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:ab:e5:39:0d:cc:b3:19:49:52:5e:ee:d1:de:d8:b6:f1:0e:
         71:f8:ae:a5:b4:48:0c:54:e6:f1:ac:76:5c:a5:e0:f3:d4:ac:
         c8:e1:63:4b:75:f7:86:f7:7e:ff:df:54:d8:ad:28:6e:b3:42:
         32:7e:a7:c9:a2:8a:b9:d7:c3:f2:97:54:bb:94:d9:16:b5:a3:
         28:da:15:40:c3:ed:04:70:a5:5a:05:cd:cc:e1:24:0b:64:65:
         65:a3:fc:3a:35:b4:b6:63:66:3e:41:e0:89:c0:f2:c2:31:60:
         83:72:15:bf:19:06:55:d7:d6:c4:d9:f2:59:30:77:4a:f7:a6:
         2b:f6:23:33:c5:0f:d5:80:bd:20:0e:81:22:4d:c1:2b:ef:10:
         32:d9:dc:77:40:3d:03:95:8c:c5:84:77:f3:8e:4f:c7:60:bd:
         e2:31:05:8d:30:26:c0:8f:e3:6e:c1:da:73:18:dc:6b:14:48:
         b9:5b:34:28:af:02:26:b0:08:30:7e:99:a6:0e:55:c9:eb:5a:
         3a:07:cf:07:ba:3d:ff:2e:72:0b:87:ce:c2:9a:d2:c5:48:64:
         91:58:43:8f:56:08:19:b5:a6:8c:82:ee:6d:3c:86:f4:9e:bb:
         0f:f0:54:64:e9:f6:5a:8a:f2:8b:d5:4c:f2:44:c3:b6:38:b5:
         48:6d:e0:c4
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUB1RxSOB2dcRk3cdPwy5kEKm+b8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTFaFw0yNjA3MDMwNjUzMTFaMDMxMTAvBgNV
BAMTKEQxODU4NzQ3Q0ZCNzVCMjA5ODg1NTQ2QTI5MjQ3OUU1QUQ1REI5RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9NO9I8/ofPs5tYRtcUP2x09y
FxlV6j7jDhzMARSvy+9MMn/i6QL59iN02Cv/VDKLwjifGzGTGRdxly5TOSm/TnMJ
lRpKRYjiQcEytbaxWWK2kfKk3TpRmykSM07rSLhvWkiG2Gk54+v0+q8mrBhU/RSR
iyJZm0FVEaSrfSt8C+zjcD126b5bjcgz1WIG7cP8SVjYfUU4GkugGiccJiqUPcsz
QMjZS/8qylYoA+5bfC8WPrNXneJ2r1BUz40j9r5WmYtZqhf70AWlSz4xS6I7KGNK
/bmcjIK4yrdhPm9BEpEWjwbrEKfW3IeEQxi18KII2b7qk2kuTXrt75Jm8VZDAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU0YWHR8+3WyCYhVRqKSR55a1dufQwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTNTc5NzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAbzANBgkqhkiG9w0BAQsFAAOCAQEAU6vl
OQ3MsxlJUl7u0d7YtvEOcfiupbRIDFTm8ax2XKXg89SsyOFjS3X3hvd+/99U2K0o
brNCMn6nyaKKudfD8pdUu5TZFrWjKNoVQMPtBHClWgXNzOEkC2RlZaP8OjW0tmNm
PkHgicDywjFgg3IVvxkGVdfWxNnyWTB3SvemK/YjM8UP1YC9IA6BIk3BK+8QMtnc
d0A9A5WMxYR3845Px2C94jEFjTAmwI/jbsHacxjcaxRIuVs0KK8CJrAIMH6Zpg5V
yetaOgfPB7o9/y5yC4fOwprSxUhkkVhDj1YIGbWmjILubTyG9J67D/BUZOn2Wory
i9VM8kTDtji1SG3gxA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:04:12 2025 by rpki-client