Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197815.roa
File:                     AS197815.roa (raw, json)
Hash identifier:          rUUaoUlyn5GeZsoRE6bDRMpDQgB+14tzuozeIjGz1is=
Subject key identifier:   CC:54:C5:73:16:04:70:BB:32:52:65:F2:F8:DF:FA:C0:9F:37:86:2D
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       41D89F34F55F37BCE4572D70AAC06B8EC1DBA036
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197815.roa
Signing time:             Fri 05 Jun 2026 07:12:28 +0000
ROA not before:           Fri 05 Jun 2026 07:07:28 +0000
ROA not after:            Fri 04 Jun 2027 07:12:28 +0000
asID:                     197815
IP address blocks:        2a05:dfc1:6800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:9f:34:f5:5f:37:bc:e4:57:2d:70:aa:c0:6b:8e:c1:db:a0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:28 2026 GMT
            Not After : Jun  4 07:12:28 2027 GMT
        Subject: CN=CC54C573160470BB325265F2F8DFFAC09F37862D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:d8:8e:3c:10:4d:c3:6b:78:41:4f:02:ef:
                    70:67:38:5a:ce:dc:1b:8b:c3:87:de:99:5f:34:c5:
                    77:06:40:42:46:ad:b3:11:cc:cd:84:c5:d6:1b:ca:
                    0e:5b:fa:bf:2b:bd:64:78:bc:43:43:79:51:b3:2b:
                    31:38:59:6f:2e:2e:86:ec:ac:43:39:d7:4e:e2:d4:
                    82:8a:88:7f:bd:36:89:32:58:eb:3c:fa:51:d1:c8:
                    b4:61:8b:5d:c8:cb:0d:88:2b:9b:f7:68:dc:31:b7:
                    0b:8b:fc:2b:5b:24:75:8c:b7:69:46:c2:af:f8:29:
                    c5:96:27:ea:f9:db:a0:fc:68:94:f3:bc:bb:1e:3f:
                    00:fd:1d:a7:7c:c2:7e:df:57:b0:5e:95:26:ea:07:
                    7c:72:db:38:c9:07:e8:fe:3d:99:9c:e7:13:b6:3d:
                    22:24:15:75:d1:2d:c0:5d:5e:a0:04:56:d4:e9:ca:
                    44:21:34:a2:34:f8:9c:a4:1f:e7:5c:7c:ea:17:4a:
                    7b:ea:d4:de:9a:0e:47:11:6b:2f:db:5a:8d:37:b2:
                    42:fa:e3:58:1c:60:e5:2d:40:50:40:58:f3:51:38:
                    a2:38:18:3c:0f:86:64:98:8d:d6:c5:f0:b4:a2:00:
                    f5:d4:21:ff:ef:ee:b7:67:ce:3b:90:e4:03:c8:29:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:54:C5:73:16:04:70:BB:32:52:65:F2:F8:DF:FA:C0:9F:37:86:2D
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197815.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:5b:90:78:c6:90:42:e4:bf:b0:4e:d8:0a:a9:7a:4c:8d:89:
         02:83:55:8a:2e:0d:22:f7:45:e6:8f:dc:96:f5:cf:1d:97:d8:
         74:d3:3c:2e:2d:4e:d7:bc:2e:19:75:4d:a3:1f:b1:d0:49:c2:
         44:da:55:eb:43:49:96:f8:cd:53:b9:d4:56:8e:0e:7f:08:76:
         ab:86:62:63:7f:61:8d:dd:65:a2:33:5b:cc:d5:d7:b9:68:b8:
         13:d8:8b:36:6c:d1:df:6b:6d:ed:8f:3c:a7:a3:8a:f5:fb:ff:
         c3:46:77:09:30:75:da:20:f7:50:37:c2:dd:f6:14:71:89:0e:
         c2:4e:39:25:7c:70:f4:12:d5:c9:d8:3f:c2:24:02:70:44:d3:
         2f:5f:95:77:76:c6:38:93:6a:98:be:79:ec:33:ea:d1:f6:8e:
         0d:d7:d0:13:4d:03:7d:9e:f7:5e:58:7a:ee:8b:54:09:70:c6:
         ce:a4:de:ac:5f:5b:00:71:fc:18:0b:32:eb:79:2f:31:c1:20:
         b6:96:59:d8:f1:fa:a8:a4:ca:8b:a0:79:d2:5f:4d:5e:45:17:
         a0:0f:bf:36:16:95:9b:28:ef:35:c0:1c:b5:2b:bc:40:45:b6:
         67:a3:24:58:48:72:9b:c6:eb:c8:d4:a2:0b:51:d3:41:d9:6a:
         a8:34:26:e2
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUQdifNPVfN7zkVy1wqsBrjsHboDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjhaFw0yNzA2MDQwNzEyMjhaMDMxMTAvBgNV
BAMTKENDNTRDNTczMTYwNDcwQkIzMjUyNjVGMkY4REZGQUMwOUYzNzg2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtk9iOPBBNw2t4QU8C73BnOFrO
3BuLw4femV80xXcGQEJGrbMRzM2ExdYbyg5b+r8rvWR4vENDeVGzKzE4WW8uLobs
rEM5107i1IKKiH+9NokyWOs8+lHRyLRhi13Iyw2IK5v3aNwxtwuL/CtbJHWMt2lG
wq/4KcWWJ+r526D8aJTzvLsePwD9Had8wn7fV7BelSbqB3xy2zjJB+j+PZmc5xO2
PSIkFXXRLcBdXqAEVtTpykQhNKI0+JykH+dcfOoXSnvq1N6aDkcRay/bWo03skL6
41gcYOUtQFBAWPNROKI4GDwPhmSYjdbF8LSiAPXUIf/v7rdnzjuQ5APIKSK7AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUzFTFcxYEcLsyUmXy+N/6wJ83hi0wHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMTk3ODE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwWgwDQYJKoZIhvcNAQELBQADggEBAAdb
kHjGkELkv7BO2AqpekyNiQKDVYouDSL3ReaP3Jb1zx2X2HTTPC4tTte8Lhl1TaMf
sdBJwkTaVetDSZb4zVO51FaODn8IdquGYmN/YY3dZaIzW8zV17louBPYizZs0d9r
be2PPKejivX7/8NGdwkwddog91A3wt32FHGJDsJOOSV8cPQS1cnYP8IkAnBE0y9f
lXd2xjiTapi+eewz6tH2jg3X0BNNA32e915Yeu6LVAlwxs6k3qxfWwBx/BgLMut5
LzHBILaWWdjx+qikyougedJfTV5FF6APvzYWlZso7zXAHLUrvEBFtmejJFhIcpvG
68jUogtR00HZaqg0JuI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:23 2026 by rpki-client