Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS60301.roa
File:                     AS60301.roa (raw, json)
Hash identifier:          DYPoTGU9v7mJWDrKBUE5H2ZxkpxB+2rvVuresV0Bu/0=
Subject key identifier:   D6:DA:D4:0C:EF:B6:BC:1F:BF:56:42:DE:1C:DB:C6:EF:65:A1:90:6A
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       0B263C6E2853EF72A08C54DDA1E06E04C37FA5E7
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS60301.roa
Signing time:             Fri 04 Jul 2025 06:53:03 +0000
ROA not before:           Fri 04 Jul 2025 06:48:03 +0000
ROA not after:            Fri 03 Jul 2026 06:53:03 +0000
asID:                     60301
IP address blocks:        2a05:dfc1:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:26:3c:6e:28:53:ef:72:a0:8c:54:dd:a1:e0:6e:04:c3:7f:a5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:03 2025 GMT
            Not After : Jul  3 06:53:03 2026 GMT
        Subject: CN=D6DAD40CEFB6BC1FBF5642DE1CDBC6EF65A1906A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:d3:33:01:e9:2b:b6:44:ac:15:17:32:87:
                    33:ae:61:6f:f7:38:ce:96:be:c8:7c:e8:76:b6:4f:
                    8a:41:a4:21:9a:26:95:67:bc:1b:28:7e:52:ff:39:
                    73:65:50:f8:97:1a:62:8a:4d:0b:6b:23:e0:6e:6c:
                    d1:0b:64:00:04:76:7d:e3:0f:77:20:bb:bd:3b:bf:
                    e1:9c:08:f2:66:9b:b8:b8:a4:07:0c:46:e0:53:60:
                    44:b3:b7:8b:6e:51:d5:0f:8e:6b:f3:85:b0:e8:8a:
                    fc:f7:c8:a1:ee:9a:63:da:cb:65:8e:1c:4c:7e:77:
                    0e:e4:67:c0:39:bc:b2:1c:ef:2d:3a:65:20:96:ac:
                    e2:ae:a0:66:0c:c2:51:60:46:06:05:ec:3b:6f:31:
                    5e:bf:d5:53:83:0a:64:99:4f:61:e3:ac:b1:8f:d4:
                    4b:f7:69:e0:22:f1:dc:81:02:74:5f:d5:da:c4:5c:
                    58:88:7c:ca:96:8c:cb:97:bb:ce:7c:e8:85:15:56:
                    4f:3c:c9:93:fe:f1:d2:17:ae:c3:76:12:0f:1f:e5:
                    43:2f:ee:15:40:49:9d:4d:7d:46:8d:f8:22:ab:b5:
                    f0:f8:bd:fd:0f:ee:a6:3b:ce:80:42:5d:4c:15:7d:
                    4c:8c:ab:8e:39:e6:86:b9:48:27:97:0c:1a:d6:4b:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DA:D4:0C:EF:B6:BC:1F:BF:56:42:DE:1C:DB:C6:EF:65:A1:90:6A
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS60301.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d0:b9:d8:64:94:8d:8f:90:bd:e6:8a:39:3b:aa:36:f3:c6:f3:
         f3:ef:34:dc:00:02:3f:c0:15:87:b0:91:d5:b9:ba:fd:29:45:
         15:21:ec:69:c3:a2:72:7c:28:8d:34:8f:81:1a:68:8c:c9:72:
         d5:d1:56:2a:63:54:13:06:95:4f:fe:c8:e7:0e:6e:e9:33:f2:
         4b:4c:74:b3:04:7c:6e:b5:50:97:17:76:4e:dc:a6:28:3b:ba:
         97:5b:d4:f7:0d:25:5e:57:c4:ba:e1:39:f3:3a:6c:20:af:af:
         67:a8:5f:ba:a4:af:f0:b3:57:a9:8e:e3:c9:17:e0:32:7f:89:
         50:b6:90:dc:f1:70:46:85:78:41:2b:bb:8b:94:f8:ec:2d:1f:
         fa:d6:58:91:41:38:51:1d:e8:fb:1a:da:30:62:81:ec:4b:e1:
         f7:e5:1e:e7:0b:62:e1:db:41:e1:6b:b6:46:88:97:ce:7c:af:
         4c:34:68:81:e7:70:9b:a1:77:29:75:99:ac:1b:1e:3b:e0:7f:
         81:8e:88:72:65:7d:40:cd:b7:4b:84:7e:50:0c:47:db:df:12:
         e0:33:ee:bb:2c:74:0e:39:46:54:49:5f:79:04:2b:e4:35:09:
         a9:a3:94:e7:90:6d:4f:9b:1d:38:48:d6:de:91:44:2d:dd:56:
         26:64:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:44:17 2025 by rpki-client