Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61350.roa
File:                     AS61350.roa (raw, json)
Hash identifier:          1w4eL2zEhc2BYiV46vOFY+CM9obSyn7kTJXVrhSqCa0=
Subject key identifier:   BA:EF:AE:34:2E:68:41:56:7A:77:83:A7:74:D5:BE:CB:09:7E:E1:AD
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       26D542AEAEB8DFD844A687DC4EC0EB57305FE86E
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61350.roa
Signing time:             Thu 19 Jun 2025 09:46:38 +0000
ROA not before:           Thu 19 Jun 2025 09:41:38 +0000
ROA not after:            Thu 18 Jun 2026 09:46:38 +0000
asID:                     61350
IP address blocks:        2a06:9f81:5700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d5:42:ae:ae:b8:df:d8:44:a6:87:dc:4e:c0:eb:57:30:5f:e8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jun 19 09:41:38 2025 GMT
            Not After : Jun 18 09:46:38 2026 GMT
        Subject: CN=BAEFAE342E6841567A7783A774D5BECB097EE1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:54:07:e2:f1:31:53:65:07:17:bf:ae:80:
                    13:ed:78:fc:0d:7d:81:59:e7:89:67:8d:2f:13:71:
                    fd:ef:cb:06:b9:14:3a:e5:3d:c9:69:18:ee:f4:6e:
                    64:e2:84:07:38:d2:05:e1:a3:cd:b6:0d:b2:27:6f:
                    27:55:63:06:ba:e6:50:b3:c9:99:9a:d2:a5:b8:5d:
                    7f:22:c4:09:4f:52:a0:8b:f5:1d:34:82:7a:be:f6:
                    95:e3:45:dc:7e:fb:93:3b:c6:5c:40:30:1a:12:04:
                    36:cf:02:b4:c3:d4:18:21:d7:cd:11:9a:83:2c:8f:
                    62:20:1f:49:c4:77:70:8f:f9:0a:d0:48:27:60:18:
                    6e:25:d9:1e:c1:6b:fa:d3:8e:ea:f7:f5:5f:09:8e:
                    5c:0e:2a:32:18:17:14:23:37:89:36:15:3b:a4:1c:
                    ed:73:75:49:58:dd:fa:18:e9:b9:5f:f4:29:50:57:
                    f3:7a:22:27:4d:b0:6d:d4:ec:c7:fe:62:4f:e0:51:
                    f6:21:ed:b0:d2:84:7d:5d:61:ec:1e:7a:17:fe:58:
                    27:67:da:ae:5a:69:27:c4:d4:8a:80:67:93:27:64:
                    06:d4:57:09:a5:a3:15:21:ef:26:ff:d8:a9:98:a4:
                    9c:e1:3f:e9:bd:5b:54:59:9d:0b:98:7a:04:10:a6:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EF:AE:34:2E:68:41:56:7A:77:83:A7:74:D5:BE:CB:09:7E:E1:AD
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61350.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:5700::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:d8:58:17:d0:40:8f:2a:e3:f6:2d:c2:96:8e:8b:19:39:cf:
         76:dd:89:e1:61:ae:18:00:76:f1:28:d5:92:79:1e:20:db:78:
         99:ce:9d:a0:72:06:0a:26:f6:aa:39:4c:9b:5c:3a:81:b6:d0:
         f9:f2:1b:57:19:c0:95:d5:f3:ab:b8:28:27:78:0f:60:b3:5a:
         32:23:81:7b:ae:a8:ca:92:c2:c3:ed:c8:bb:5b:b4:bb:9c:05:
         3f:bf:ef:17:0d:bf:42:3e:d8:0a:9f:1b:8c:f0:f1:76:1c:fa:
         9f:18:25:0d:00:09:54:ac:a3:f3:15:2e:7f:fa:94:ff:da:6d:
         b6:b6:32:b8:13:ba:ed:04:85:77:e1:1a:05:19:5d:9a:95:e0:
         51:7d:33:5d:78:5c:84:03:98:2c:d3:23:7e:68:76:80:f5:ca:
         62:bf:35:3b:9d:26:a8:64:71:0e:4a:f0:14:63:cb:3d:b0:b9:
         e0:93:08:7f:24:f2:b3:d5:3b:d1:8c:7f:dc:ce:14:d0:65:e2:
         ea:20:9e:a0:d0:32:1f:fe:bb:04:d5:ac:a5:60:21:4f:4b:7f:
         09:a8:b5:f8:3e:bc:12:96:c3:80:6d:7c:52:ce:10:d8:00:0b:
         dc:f4:70:25:57:ef:8d:f8:3d:b8:6d:fd:f5:fe:74:47:72:4b:
         8e:87:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:38:03 2025 by rpki-client