Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197532.roa
File:                     AS197532.roa (raw, json)
Hash identifier:          FMjTV96P70DJRiRaxUk4EHTPHtDBPU/NwXLKDavEKWM=
Subject key identifier:   36:29:9E:68:F7:57:56:02:33:6D:97:ED:F7:34:E1:9E:B9:59:FF:A7
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       3BFB7A4609FBA237EDF20736B44A04A5BFD85B4D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197532.roa
Signing time:             Fri 05 Jun 2026 07:12:44 +0000
ROA not before:           Fri 05 Jun 2026 07:07:44 +0000
ROA not after:            Fri 04 Jun 2027 07:12:44 +0000
asID:                     197532
IP address blocks:        2a05:dfc1:7200::/40 maxlen: 48
                          2a05:dfc1:9400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fb:7a:46:09:fb:a2:37:ed:f2:07:36:b4:4a:04:a5:bf:d8:5b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:44 2026 GMT
            Not After : Jun  4 07:12:44 2027 GMT
        Subject: CN=36299E68F7575602336D97EDF734E19EB959FFA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:01:f6:4d:ad:99:c7:86:10:72:9f:28:ec:
                    ce:65:ec:26:71:0f:f6:26:38:28:69:20:4b:af:3a:
                    8a:06:2d:6a:af:8f:2b:19:41:98:8b:2a:29:c1:4a:
                    0a:8e:36:7f:4e:f2:d9:6a:87:d9:6f:46:e9:17:d8:
                    eb:4a:73:0c:a0:58:b5:c2:a2:9b:49:9a:23:4e:50:
                    b6:4e:5a:a3:92:ea:8e:4d:71:8a:3c:30:a6:6a:bf:
                    c0:47:16:ae:a1:7a:2e:56:b2:7d:36:5c:ff:4d:65:
                    df:9a:5e:15:e9:80:e0:c2:9a:c7:cd:60:fe:57:32:
                    bf:ac:19:3e:2d:85:52:bb:85:8a:3a:73:80:10:73:
                    1c:87:18:ab:77:f2:a6:fe:4d:f9:21:e4:63:c7:6d:
                    e2:71:31:0f:a8:30:b5:e2:33:42:35:4a:a5:a5:6c:
                    23:c2:e9:c2:11:1d:cd:e1:95:10:ed:73:0b:8a:96:
                    30:3f:5f:b5:13:ed:ca:3c:d9:c7:fe:3d:12:20:a8:
                    fd:f3:b6:79:af:e8:05:91:20:2e:76:45:b1:14:80:
                    2f:53:25:62:33:a8:5c:5d:26:22:a1:98:4c:3b:84:
                    5f:69:a2:01:da:e6:da:20:23:18:58:35:9e:5f:6e:
                    b1:b3:d9:63:5a:8c:30:48:13:31:2a:6c:12:42:87:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:29:9E:68:F7:57:56:02:33:6D:97:ED:F7:34:E1:9E:B9:59:FF:A7
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:7200::/40
                  2a05:dfc1:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         da:cd:e7:d9:9a:63:54:2c:b6:89:90:5a:59:e4:0c:d1:a0:37:
         f7:b4:bf:2f:ba:59:fa:0d:23:11:03:fe:d6:d5:aa:4e:ca:be:
         4c:13:b9:fe:9f:d2:92:c3:36:23:62:3a:cd:ab:d4:8a:76:cc:
         d0:3c:fa:72:21:79:40:f7:42:0b:03:46:ad:ff:02:6e:a6:c0:
         98:6a:e9:4e:39:e2:14:9a:69:3f:2d:fc:a3:78:cf:c1:13:d7:
         c4:79:b7:e0:ad:f5:1d:a2:13:2c:24:3d:b5:5a:0a:bb:77:35:
         be:78:27:96:c3:88:77:59:20:bd:45:f6:f6:52:df:27:b5:54:
         fc:2c:8e:3d:9c:20:d3:de:9b:bf:94:15:e5:4d:48:6b:7b:0f:
         3d:cb:26:24:8b:e5:70:c6:b6:4f:32:e3:75:e8:1f:ef:23:77:
         be:86:d2:46:00:ae:f6:90:3e:9c:18:76:26:a7:e7:27:31:a4:
         5f:f2:31:30:8a:9b:a6:d5:3d:fc:b5:e9:a4:d2:6d:9a:26:db:
         a5:42:e0:c0:02:b0:c0:8e:59:30:85:bf:9b:5b:68:65:69:b6:
         5a:5a:d4:03:31:35:a2:a1:fd:e7:3f:f5:f2:b8:73:c2:df:e2:
         43:a1:a4:60:60:27:87:5b:e3:06:8d:6f:24:9d:3e:80:b3:6c:
         b4:12:0a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:54 2026 by rpki-client