Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215592.roa
File:                     AS215592.roa (raw, json)
Hash identifier:          3i+AQVrFW4whQsMZYBrK995neC4tU01aO5J/OOvplfE=
Subject key identifier:   C2:0B:40:91:1A:64:D8:33:FD:CB:49:3B:29:FE:1D:70:CB:AD:C6:D6
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7DB4CF98DCC3E25D1EB93B49C5543D1DB3E03565
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215592.roa
Signing time:             Sun 15 Jun 2025 05:46:36 +0000
ROA not before:           Sun 15 Jun 2025 05:41:36 +0000
ROA not after:            Sun 14 Jun 2026 05:46:36 +0000
asID:                     215592
IP address blocks:        2a06:9f81:3900::/40 maxlen: 48
                          2a06:9f81:5600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b4:cf:98:dc:c3:e2:5d:1e:b9:3b:49:c5:54:3d:1d:b3:e0:35:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jun 15 05:41:36 2025 GMT
            Not After : Jun 14 05:46:36 2026 GMT
        Subject: CN=C20B40911A64D833FDCB493B29FE1D70CBADC6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:4e:46:33:40:ef:d9:30:4b:d6:cf:92:ed:
                    c0:21:92:33:3d:1e:c3:07:21:34:9d:35:9f:8b:71:
                    e0:dc:28:d4:d1:12:74:1a:35:fe:84:5d:8a:47:7e:
                    16:98:d8:90:78:bc:ec:36:da:f8:b3:8e:a6:bc:9b:
                    ff:66:85:01:79:6f:2a:50:f7:30:11:19:da:af:b8:
                    0f:df:c9:b4:02:e7:1b:a9:47:dd:f5:e5:d7:c8:f9:
                    a0:2b:f5:cb:27:c2:1d:5b:94:ac:96:f8:c1:0c:ce:
                    47:7e:ee:08:d3:57:01:ae:55:0f:79:cf:fa:83:ac:
                    d7:89:26:c6:2d:9b:04:9d:d0:03:2f:c2:c5:e7:cc:
                    30:1c:fa:d6:2a:ad:20:cf:c9:f4:e4:df:71:49:8d:
                    ab:a6:52:e7:3d:eb:ad:b2:88:20:db:20:7c:c9:31:
                    59:05:c8:03:83:82:d9:64:30:3a:9d:10:f4:64:af:
                    e3:69:f4:e4:af:8b:56:73:48:a0:92:6d:5e:8c:1b:
                    c9:76:13:c8:a1:ba:36:fe:89:1f:0a:bb:1f:ca:99:
                    5b:3c:5f:8f:bd:ac:f3:8e:7e:23:1f:8a:20:a5:a8:
                    74:b2:41:e2:79:56:0c:10:fe:3d:e5:6c:96:e0:ed:
                    36:de:76:61:3b:fa:06:0b:2a:51:4a:73:50:fa:0f:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0B:40:91:1A:64:D8:33:FD:CB:49:3B:29:FE:1D:70:CB:AD:C6:D6
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3900::/40
                  2a06:9f81:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:0f:0d:4d:4e:98:6d:9d:80:05:19:23:ae:65:9e:31:2a:86:
         aa:d9:c3:0a:4e:dc:8b:4c:79:5d:dd:ef:df:88:53:e8:62:56:
         b1:71:88:79:25:d3:14:b9:a2:9f:87:72:01:ac:c1:99:52:0a:
         70:d5:fe:f9:66:a7:8a:43:be:f9:19:03:26:22:07:a7:05:7b:
         6a:6c:cd:25:d9:6d:7a:bd:d2:df:e6:d8:fb:7e:bb:3f:b0:b2:
         df:56:8d:89:f5:a5:46:62:fb:47:02:18:bb:d4:08:b7:35:6b:
         d8:99:98:72:12:55:7f:c7:07:d1:15:6d:6f:a2:b8:a3:77:56:
         07:91:91:8b:1a:2a:f7:e0:33:b6:d0:6b:88:11:3e:e8:47:bf:
         87:e0:1b:51:9b:25:46:e2:19:b0:84:af:1f:e6:52:e7:79:92:
         ff:a9:f8:5c:5e:2c:39:fc:9b:de:97:f1:a8:68:ca:27:78:d4:
         47:d4:89:ec:75:7a:d0:06:5e:26:de:5b:ec:08:13:86:87:83:
         52:67:d9:54:88:3b:6c:66:a4:48:06:69:70:bd:a1:95:5f:fa:
         6e:ae:41:ea:cb:3c:bd:26:8d:93:21:fe:43:b3:c6:27:bf:47:
         a9:77:e7:69:4a:00:a8:d2:c2:e6:cd:7f:44:d9:3a:70:c7:85:
         c1:cd:0e:a0
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUfbTPmNzD4l0euTtJxVQ9HbPgNWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNTA2MTUwNTQxMzZaFw0yNjA2MTQwNTQ2MzZaMDMxMTAvBgNV
BAMTKEMyMEI0MDkxMUE2NEQ4MzNGRENCNDkzQjI5RkUxRDcwQ0JBREM2RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWC05GM0Dv2TBL1s+S7cAhkjM9
HsMHITSdNZ+LceDcKNTREnQaNf6EXYpHfhaY2JB4vOw22vizjqa8m/9mhQF5bypQ
9zARGdqvuA/fybQC5xupR9315dfI+aAr9csnwh1blKyW+MEMzkd+7gjTVwGuVQ95
z/qDrNeJJsYtmwSd0AMvwsXnzDAc+tYqrSDPyfTk33FJjaumUuc9662yiCDbIHzJ
MVkFyAODgtlkMDqdEPRkr+Np9OSvi1ZzSKCSbV6MG8l2E8ihujb+iR8Kux/KmVs8
X4+9rPOOfiMfiiClqHSyQeJ5VgwQ/j3lbJbg7TbedmE7+gYLKlFKc1D6Dy9RAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUwgtAkRpk2DP9y0k7Kf4dcMutxtYwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjE1NTkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF
BwEHAQH/BBowGDAWBAIAAjAQAwYAKgafgTkDBgAqBp+BVjANBgkqhkiG9w0BAQsF
AAOCAQEAQQ8NTU6YbZ2ABRkjrmWeMSqGqtnDCk7ci0x5Xd3v34hT6GJWsXGIeSXT
FLmin4dyAazBmVIKcNX++WanikO++RkDJiIHpwV7amzNJdlter3S3+bY+367P7Cy
31aNifWlRmL7RwIYu9QItzVr2JmYchJVf8cH0RVtb6K4o3dWB5GRixoq9+AzttBr
iBE+6Ee/h+AbUZslRuIZsISvH+ZS53mS/6n4XF4sOfyb3pfxqGjKJ3jUR9SJ7HV6
0AZeJt5b7AgThoeDUmfZVIg7bGakSAZpcL2hlV/6bq5B6ss8vSaNkyH+Q7PGJ79H
qXfnaUoAqNLC5s1/RNk6cMeFwc0OoA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:38:55 2025 by rpki-client