Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS62425.roa
File:                     AS62425.roa (raw, json)
Hash identifier:          +uR7DetPXczZyseSlTdGvWja0mYcQGJmPVb2Hu9Ds0A=
Subject key identifier:   8D:FD:61:1E:A4:C8:25:A2:63:05:80:CB:62:8E:87:51:F0:2D:D1:95
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       0E5E526A26434A4816A4585B3FC8CE9EEE1F3358
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS62425.roa
Signing time:             Fri 04 Jul 2025 06:53:27 +0000
ROA not before:           Fri 04 Jul 2025 06:48:27 +0000
ROA not after:            Fri 03 Jul 2026 06:53:27 +0000
asID:                     62425
IP address blocks:        2a05:dfc1:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5e:52:6a:26:43:4a:48:16:a4:58:5b:3f:c8:ce:9e:ee:1f:33:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:27 2025 GMT
            Not After : Jul  3 06:53:27 2026 GMT
        Subject: CN=8DFD611EA4C825A2630580CB628E8751F02DD195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:90:93:16:6e:92:29:00:99:e8:e5:9e:f7:
                    6c:b4:52:2d:c7:0b:43:5d:e5:9f:75:bd:b3:89:a3:
                    e2:b3:a7:12:45:93:ad:a3:b2:0e:f5:90:08:56:b4:
                    4f:88:e3:0b:3d:55:58:00:81:8d:96:31:53:9b:96:
                    91:93:92:16:b9:e0:ea:12:e7:db:e4:21:e4:19:1e:
                    14:06:6f:70:e2:13:27:e8:51:46:90:b8:44:60:99:
                    51:33:c4:84:bf:28:a5:d8:c8:13:62:aa:ea:84:3c:
                    17:73:f2:e6:70:5e:40:ef:14:95:76:81:26:17:53:
                    9f:3c:64:36:2b:e1:3c:d1:b0:75:d7:aa:5d:a5:75:
                    2e:63:61:55:3c:ed:e6:6f:7f:d6:32:70:ca:59:c4:
                    a2:32:23:0e:6a:fd:dd:51:50:bd:1e:78:51:9e:7a:
                    8c:60:e0:bd:13:42:a1:ee:25:fd:50:47:33:e6:a6:
                    7f:a3:4e:01:3b:c6:2d:52:a0:8b:5a:37:3e:72:20:
                    95:f3:d9:2f:42:90:46:1a:e7:c5:e6:8a:f2:4d:01:
                    4f:30:75:45:5d:84:bd:f0:4c:23:b0:f2:e1:1b:b7:
                    7a:56:9c:3c:81:70:35:91:2f:ef:b7:32:7b:a1:97:
                    79:73:89:45:b1:78:8c:4c:11:66:bb:ae:cd:1c:31:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FD:61:1E:A4:C8:25:A2:63:05:80:CB:62:8E:87:51:F0:2D:D1:95
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS62425.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:29:b9:4b:ce:8e:50:a8:9a:43:cd:d8:e4:87:ef:0a:08:6b:
         fc:5f:94:30:3a:2c:99:19:04:00:8f:3f:f0:cb:b0:8d:7f:4c:
         68:dc:9c:31:f5:45:1e:81:1c:8c:e0:a0:1f:28:91:85:ac:74:
         5f:9a:19:d4:14:93:c1:cb:a2:6f:49:9b:a8:ec:cf:1d:bf:91:
         d2:69:6a:0d:ef:a4:02:af:2e:55:5a:52:cb:52:07:bc:79:5e:
         ee:e5:1b:ca:a1:1d:bd:60:26:ee:ac:52:a7:e3:e0:90:33:1b:
         36:63:8e:31:1c:c2:f9:01:f5:ce:77:63:41:24:0b:c4:3c:69:
         a1:57:db:9e:b7:a5:00:7c:b4:74:42:b3:e9:c9:35:c5:ad:53:
         53:85:07:dd:8f:6f:05:d2:17:9b:ba:e1:e2:d2:e1:0f:bb:7a:
         e3:3d:c1:74:6b:6d:20:2e:73:da:f4:6d:92:83:77:1b:cd:a3:
         c9:e3:3c:c2:9d:94:3f:8c:52:c2:65:05:8f:a6:94:93:c7:db:
         f0:bb:1c:e2:03:ce:26:77:ce:91:56:5f:99:2f:36:8d:d0:d7:
         02:67:6d:27:76:63:6c:13:ba:59:8f:24:75:2f:93:fe:71:4c:
         29:1f:60:bd:89:9c:c0:ed:08:5f:c2:43:e3:cd:48:d1:6e:5f:
         84:28:e7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:44:16 2025 by rpki-client