Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS61142.roa
File:                     AS61142.roa (raw, json)
Hash identifier:          4O61deZ+srW2y0NtMRLDnc6cMM8zisUJtSr+4Hd+dTo=
Subject key identifier:   78:81:B2:FA:AB:1F:80:29:E8:73:A4:21:C8:15:B9:CA:0E:E0:41:AD
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       449E919AE171159A7B7209266579A9AFB882064E
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS61142.roa
Signing time:             Fri 04 Jul 2025 06:53:27 +0000
ROA not before:           Fri 04 Jul 2025 06:48:27 +0000
ROA not after:            Fri 03 Jul 2026 06:53:27 +0000
asID:                     61142
IP address blocks:        2a06:9f81:5800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9e:91:9a:e1:71:15:9a:7b:72:09:26:65:79:a9:af:b8:82:06:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:27 2025 GMT
            Not After : Jul  3 06:53:27 2026 GMT
        Subject: CN=7881B2FAAB1F8029E873A421C815B9CA0EE041AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:9c:93:19:08:2c:b8:8a:cc:25:c7:ce:7d:
                    c5:a8:30:06:f5:ed:5a:32:8a:dc:79:9a:00:d6:1a:
                    91:66:2d:f7:bd:95:4c:e5:d8:71:90:0f:3f:9c:c7:
                    1c:06:1d:c5:2f:24:fe:02:63:df:d6:4f:68:44:3f:
                    11:6e:0c:8c:68:43:93:7c:95:17:fa:6b:1e:6c:7d:
                    4c:ae:d9:dd:93:5d:16:4a:8b:80:fe:8d:bd:b0:76:
                    9d:1d:77:86:a2:34:3e:e1:d8:d8:bb:da:e8:53:3b:
                    0a:96:92:3c:aa:e2:0f:b1:d8:05:44:f0:0c:cb:bd:
                    dd:31:82:1b:60:ef:e2:21:02:33:96:2b:9a:61:8c:
                    7f:ce:fd:3d:f7:63:80:c9:62:2b:5a:e3:8e:c1:cb:
                    ae:17:32:51:74:f3:eb:45:0c:99:88:45:f8:96:9f:
                    50:ca:07:7b:40:85:5b:18:de:49:07:d3:23:c5:22:
                    5b:80:13:e6:86:59:77:97:dd:b5:a2:71:79:b4:86:
                    c0:62:f2:14:07:c6:87:cb:90:b8:e8:ff:6d:7e:8a:
                    de:74:e1:ed:19:df:60:1b:7c:51:97:f6:cf:0d:8f:
                    48:31:90:1c:ae:8d:84:d2:d8:f6:d6:74:74:58:31:
                    0c:07:20:69:33:82:16:f5:48:df:7e:64:79:5b:07:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:81:B2:FA:AB:1F:80:29:E8:73:A4:21:C8:15:B9:CA:0E:E0:41:AD
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS61142.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:5800::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:e5:78:b1:83:b6:6f:7a:1d:8c:99:46:65:73:43:54:17:
         c2:c1:50:53:84:97:3c:ac:ac:ae:da:00:6e:d7:17:52:9c:58:
         7b:4a:40:9a:43:ec:1e:21:b6:a0:e7:00:56:52:c7:71:94:57:
         da:ad:c6:68:d9:cb:de:7b:56:1c:2e:30:66:b4:11:40:bf:4d:
         7b:e7:f0:3c:b5:30:d2:c9:8e:5a:d7:df:e7:ac:0c:0b:e0:23:
         34:e9:d7:e3:18:b1:dd:05:6c:a8:f9:67:d5:e5:3a:65:2a:a0:
         fe:e3:41:5c:ba:5a:01:0e:51:cc:d0:f6:0d:23:bb:ed:81:3b:
         94:a7:46:d0:1e:95:b5:c3:2e:4d:2b:1e:a0:0b:e2:d2:ff:44:
         65:d7:97:c7:cf:62:24:62:ae:09:77:f5:00:fc:ac:e0:63:04:
         4c:73:51:39:f3:3f:ce:bd:9a:34:67:8f:f8:63:78:c9:59:8b:
         7b:a0:6e:04:de:6d:b3:fb:ea:68:4b:00:12:fd:06:88:d3:7d:
         26:82:84:00:ff:6b:7b:6e:ee:7d:a5:16:27:57:28:4c:af:33:
         b7:21:f6:ce:e9:e8:f1:31:c4:64:f0:d7:15:46:c3:db:78:11:
         99:63:13:6c:04:6c:18:25:6f:3e:01:27:4f:57:a5:08:cc:8a:
         38:de:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:51:19 2025 by rpki-client