Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS151349.roa
File:                     AS151349.roa (raw, json)
Hash identifier:          AmP3UOzj+H4bs5DIw58wyXU99T8AcA8t/S9/NGKCn5w=
Subject key identifier:   A6:F7:09:37:DE:30:F9:60:4F:85:E1:78:26:5E:F1:C0:48:19:15:74
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       75A977766C746E36E0934A3EA1CED0F7FF4AB844
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS151349.roa
Signing time:             Fri 05 Jun 2026 07:12:48 +0000
ROA not before:           Fri 05 Jun 2026 07:07:48 +0000
ROA not after:            Fri 04 Jun 2027 07:12:48 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a9:77:76:6c:74:6e:36:e0:93:4a:3e:a1:ce:d0:f7:ff:4a:b8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:48 2026 GMT
            Not After : Jun  4 07:12:48 2027 GMT
        Subject: CN=A6F70937DE30F9604F85E178265EF1C048191574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:fa:39:27:53:33:f7:25:5a:fa:2e:1c:3f:
                    ca:dc:8e:28:ce:6c:f3:57:f2:41:41:84:79:9a:ac:
                    74:ba:0e:45:df:73:6b:75:7a:1a:db:06:93:09:73:
                    0b:6e:8d:55:e7:63:e6:95:11:71:69:16:fd:c3:a0:
                    fd:53:18:68:bc:28:66:93:2d:fd:5a:a7:43:9e:11:
                    7c:19:4b:5a:72:ce:e8:e6:f4:aa:12:a0:8a:f1:05:
                    b8:0b:19:78:a6:6c:15:05:04:5e:2f:da:b8:2a:fb:
                    9f:8d:c5:67:c5:ea:0b:68:c8:be:e5:80:2f:6e:10:
                    fd:bd:10:38:88:fa:31:e8:54:67:9a:b8:96:82:1b:
                    aa:75:a9:f5:d4:f7:1c:54:c1:64:2a:78:93:7f:bb:
                    d8:78:6a:27:b8:65:43:f0:12:4b:52:91:48:df:19:
                    3f:88:33:f0:9f:a4:96:48:63:dc:3b:fe:22:71:df:
                    99:7f:b8:1b:41:bf:68:d9:d1:48:39:64:ad:cc:d9:
                    1d:a1:bc:89:cf:cc:b5:ff:61:11:ad:3a:fc:7d:cd:
                    93:70:52:9c:8d:a0:ed:37:02:1d:73:99:c9:73:b3:
                    c0:91:77:70:56:e2:5e:82:24:13:99:b3:6f:98:5d:
                    8f:e7:34:10:ef:39:1e:ac:c4:42:55:70:88:a8:0f:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F7:09:37:DE:30:F9:60:4F:85:E1:78:26:5E:F1:C0:48:19:15:74
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS151349.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:a3:34:9c:c6:88:13:61:c8:f9:56:88:0a:3f:11:8c:d5:bc:
         c5:45:e6:29:c3:5f:7e:68:36:38:81:f2:07:b4:88:6e:92:34:
         0f:cd:02:ec:47:f2:e0:40:42:a9:16:8e:f9:98:c7:39:82:08:
         4d:2d:1c:28:63:b7:7b:d2:48:09:0c:d8:04:7f:9d:28:0d:d1:
         38:7b:88:2a:33:7b:df:d9:d5:c9:04:7c:73:df:13:d5:12:bc:
         2c:08:c2:5c:d9:6d:8d:f8:ac:9a:2c:c7:81:ef:29:ea:16:c7:
         ed:07:cf:6f:7f:21:e9:e3:b5:22:dd:ba:1e:48:e9:d4:3b:ab:
         e6:aa:60:9a:c9:95:d1:a3:b5:93:22:0c:ed:d5:8d:f6:ca:bf:
         05:27:ce:73:e3:5b:c0:fc:15:e4:fd:af:4c:fb:f1:36:19:26:
         27:80:73:b6:53:38:b1:ac:f9:6b:42:cb:17:b0:a0:bc:31:48:
         4b:ed:5d:1f:82:04:ba:08:ac:39:5c:1a:ab:de:5b:b3:09:0a:
         cb:14:c1:24:45:2f:13:0c:77:5f:cc:0d:9b:94:55:42:e1:4a:
         2f:10:1e:69:c6:d3:59:be:c0:e2:3c:e5:15:5d:b4:ff:12:7f:
         67:99:bd:be:1f:68:21:3a:2e:e3:04:bc:1a:d5:f3:df:17:b0:
         73:ef:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:22:57 2026 by rpki-client