Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS61350.roa
File:                     AS61350.roa (raw, json)
Hash identifier:          etjlOhQjqYZthOT3YGLi+w0TlXBCuxEIYgMm5p2uu70=
Subject key identifier:   F0:78:72:5F:97:48:09:5C:6B:EB:5B:00:9A:41:26:47:18:4D:19:DA
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       2EC8E3057B3DCF104CA3F95853C468E25BD70246
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS61350.roa
Signing time:             Fri 04 Jul 2025 06:53:04 +0000
ROA not before:           Fri 04 Jul 2025 06:48:04 +0000
ROA not after:            Fri 03 Jul 2026 06:53:04 +0000
asID:                     61350
IP address blocks:        2a06:9f81:5700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c8:e3:05:7b:3d:cf:10:4c:a3:f9:58:53:c4:68:e2:5b:d7:02:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:04 2025 GMT
            Not After : Jul  3 06:53:04 2026 GMT
        Subject: CN=F078725F9748095C6BEB5B009A412647184D19DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:d1:39:d5:2a:e0:6e:b2:a0:8e:22:08:f7:
                    27:aa:83:91:a7:9b:64:bb:f8:40:2e:62:b7:95:99:
                    b2:b5:5f:83:fe:49:33:be:37:0d:c1:35:8b:71:85:
                    45:7a:7e:b5:ef:a4:6b:43:13:1d:7d:5f:ff:5d:d7:
                    94:b2:ea:ec:df:dd:2e:b4:2f:23:6a:d6:7d:08:bb:
                    dc:30:d5:e2:1a:19:75:eb:23:44:18:0a:15:47:40:
                    ed:f6:29:0a:86:f1:39:6e:27:a5:3d:24:c0:a8:3a:
                    b9:17:c3:1c:1f:a9:9f:64:50:d6:4d:6d:19:ad:11:
                    9b:5d:51:72:2c:ae:e8:6e:8c:bf:ae:f0:2b:dd:82:
                    e2:91:dd:20:e7:de:d3:c1:39:62:5a:4b:31:ce:39:
                    1f:8e:b9:ca:67:b9:d2:ef:6e:ef:bc:74:92:ec:e6:
                    c3:ec:bd:18:c7:d0:98:66:4c:3c:e5:6e:26:33:0f:
                    6e:fa:ff:9e:6f:32:ef:50:ed:23:72:d0:35:e9:b7:
                    bd:5c:08:7e:db:e4:6c:1a:8c:5a:de:d4:b1:00:57:
                    e4:1b:09:2d:c6:32:79:b9:1e:0a:de:05:64:3d:2f:
                    a5:fb:50:91:43:0c:00:7e:f8:ab:d6:58:a4:7d:b9:
                    39:02:a4:8a:f5:ac:3d:c4:ae:4f:81:c8:af:e1:b3:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:78:72:5F:97:48:09:5C:6B:EB:5B:00:9A:41:26:47:18:4D:19:DA
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS61350.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:5700::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:89:d9:e7:23:1c:9c:99:4c:1d:ab:49:3a:a0:2c:4a:8d:d2:
         5c:2c:1c:8f:61:c6:ec:77:0d:e9:cf:98:a1:2b:69:02:3c:df:
         a3:50:62:2e:0d:a3:31:1c:48:47:8a:ef:02:c9:e9:c3:68:4d:
         0f:56:1d:6e:ec:d3:d8:5b:8e:83:64:f1:08:49:7e:24:e8:49:
         c0:f9:c8:76:fe:b8:ff:79:cf:57:62:3b:ae:8d:2f:f6:0f:e1:
         02:f2:34:d8:ff:06:9e:d8:98:c9:aa:0d:37:f6:d2:e3:0e:e9:
         58:eb:1a:6c:8e:13:60:3d:48:03:93:46:1c:f8:95:42:c2:11:
         e7:93:08:e8:ff:a1:e9:cd:6f:72:c0:b7:f3:82:be:11:90:f2:
         5e:95:37:5a:01:b3:62:7c:79:a0:86:e4:a2:f1:b2:4b:d8:51:
         4a:22:f5:a5:05:e4:31:48:45:d6:33:fa:70:80:06:b8:0d:c2:
         8f:21:4b:fc:47:33:7a:28:43:92:f4:8e:58:c7:16:d5:a9:c7:
         47:64:93:54:83:27:97:ba:d7:e1:2d:bf:86:21:de:e3:d2:0a:
         a2:1c:68:c5:4d:1b:d1:ee:de:55:1e:df:77:0d:83:c9:98:3f:
         57:e4:fd:74:f5:c7:59:0e:59:fa:6e:01:ff:96:62:69:6a:87:
         c9:66:a1:bd
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIULsjjBXs9zxBMo/lYU8Ro4lvXAkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDRaFw0yNjA3MDMwNjUzMDRaMDMxMTAvBgNV
BAMTKEYwNzg3MjVGOTc0ODA5NUM2QkVCNUIwMDlBNDEyNjQ3MTg0RDE5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWNE51SrgbrKgjiII9yeqg5Gn
m2S7+EAuYreVmbK1X4P+STO+Nw3BNYtxhUV6frXvpGtDEx19X/9d15Sy6uzf3S60
LyNq1n0Iu9ww1eIaGXXrI0QYChVHQO32KQqG8TluJ6U9JMCoOrkXwxwfqZ9kUNZN
bRmtEZtdUXIsruhujL+u8CvdguKR3SDn3tPBOWJaSzHOOR+OucpnudLvbu+8dJLs
5sPsvRjH0JhmTDzlbiYzD276/55vMu9Q7SNy0DXpt71cCH7b5GwajFre1LEAV+Qb
CS3GMnm5HgreBWQ9L6X7UJFDDAB++KvWWKR9uTkCpIr1rD3Erk+ByK/hs03RAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU8HhyX5dICVxr61sAmkEmRxhNGdowHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTNjEzNTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BVzANBgkqhkiG9w0BAQsFAAOCAQEAVonZ
5yMcnJlMHatJOqAsSo3SXCwcj2HG7HcN6c+YoStpAjzfo1BiLg2jMRxIR4rvAsnp
w2hND1YdbuzT2FuOg2TxCEl+JOhJwPnIdv64/3nPV2I7ro0v9g/hAvI02P8GntiY
yaoNN/bS4w7pWOsabI4TYD1IA5NGHPiVQsIR55MI6P+h6c1vcsC384K+EZDyXpU3
WgGzYnx5oIbkovGyS9hRSiL1pQXkMUhF1jP6cIAGuA3CjyFL/EczeihDkvSOWMcW
1anHR2STVIMnl7rX4S2/hiHe49IKohxoxU0b0e7eVR7fdw2DyZg/V+T9dPXHWQ5Z
+m4B/5ZiaWqHyWahvQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:06:15 2025 by rpki-client