Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197841.roa
File:                     AS197841.roa (raw, json)
Hash identifier:          YKLIpFS66B1GUGbyB5LO1m9GOsxWfw+Pu2doXkwLI00=
Subject key identifier:   AB:A9:A9:FE:44:A7:21:D7:C5:4B:59:D3:61:A2:91:6E:8C:BF:2A:BC
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       12D0FCFA30181962055443634DB8CC356916A507
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197841.roa
Signing time:             Fri 05 Jun 2026 07:12:17 +0000
ROA not before:           Fri 05 Jun 2026 07:07:17 +0000
ROA not after:            Fri 04 Jun 2027 07:12:17 +0000
asID:                     197841
IP address blocks:        2a05:dfc1:a00::/40 maxlen: 48
                          2a05:dfc1:6b00::/40 maxlen: 48
                          2a05:dfc1:9700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d0:fc:fa:30:18:19:62:05:54:43:63:4d:b8:cc:35:69:16:a5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:17 2026 GMT
            Not After : Jun  4 07:12:17 2027 GMT
        Subject: CN=ABA9A9FE44A721D7C54B59D361A2916E8CBF2ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f0:4f:bc:13:f6:39:15:eb:ea:06:47:db:84:
                    31:6f:cd:7c:df:dc:c2:1e:9f:e1:51:9a:c9:e7:17:
                    c3:f8:f1:9f:dd:8b:20:d9:1d:c1:09:d1:af:46:db:
                    db:fe:3c:0e:fb:c7:22:b1:20:d7:df:50:e1:1d:3f:
                    db:4a:38:b2:35:4c:92:96:07:ee:97:19:b9:27:9f:
                    56:33:51:7a:88:9e:5c:bb:2e:c9:02:e7:dc:0e:97:
                    1d:7e:77:3d:6c:54:0b:73:04:c8:6c:1d:32:39:14:
                    73:e8:4b:9c:ad:51:a2:0e:32:78:93:25:c7:c7:a4:
                    55:34:ea:9b:06:24:6d:ca:17:a0:75:df:28:a4:e6:
                    17:3c:88:2c:b8:80:80:54:48:e2:00:3a:1c:c8:7f:
                    c1:d0:db:48:a8:0c:85:f5:d0:50:83:58:b2:b8:4f:
                    58:ab:6e:00:64:fc:73:18:c4:3e:53:b6:1b:0d:65:
                    f7:eb:21:b6:a1:9c:18:fa:77:67:6f:4f:6c:a2:50:
                    c1:e4:2d:3c:12:52:0d:55:5d:b9:ee:b7:7d:57:29:
                    33:95:a0:ea:15:a2:f9:0b:e7:c7:9b:cd:b4:e7:78:
                    59:bd:a8:1c:9a:aa:d2:f7:41:50:29:9d:9c:e6:aa:
                    bd:89:95:6a:c2:6f:bf:8e:ef:b4:67:d7:aa:17:20:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A9:A9:FE:44:A7:21:D7:C5:4B:59:D3:61:A2:91:6E:8C:BF:2A:BC
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197841.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:a00::/40
                  2a05:dfc1:6b00::/40
                  2a05:dfc1:9700::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:99:c9:88:04:53:e7:52:69:20:aa:8c:4c:a6:11:c0:81:41:
         8a:1a:7d:95:8e:27:3d:26:c4:2c:97:4b:65:f2:15:c3:2c:9b:
         ae:d6:84:d0:89:53:ef:12:bd:cf:0d:86:8f:72:10:a1:a8:f7:
         d8:fc:b4:73:0f:cb:70:2d:7f:15:3e:11:d7:2a:9a:49:42:a1:
         7d:e5:aa:79:d9:2d:ae:38:35:42:21:73:2b:70:5b:b5:2f:d8:
         4c:45:ee:69:c5:93:06:7b:bd:9f:29:9c:f6:45:8d:6f:94:53:
         b3:b5:7f:33:9e:95:87:62:23:eb:9d:b5:e6:de:d0:48:87:f1:
         82:ef:df:2b:31:69:9e:8a:64:02:15:9c:b3:36:67:18:67:24:
         ef:33:e8:78:b4:eb:68:75:75:54:ec:81:c8:d6:d4:0c:f0:45:
         60:24:a5:86:ae:15:63:57:ef:b1:69:29:4e:4b:9f:4b:1d:ae:
         6d:3e:25:39:61:4e:b0:dd:ac:9a:94:85:f4:d3:42:f8:74:b0:
         87:52:e9:15:6a:f1:fe:f1:0a:c9:6d:c8:bf:bf:d5:f6:d5:86:
         43:55:2c:6a:ee:d1:98:3e:73:60:9a:8e:52:de:6a:d4:96:5c:
         a1:e3:e0:64:1f:c9:6c:d1:39:1b:42:bb:da:73:10:49:89:4c:
         c8:11:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:22:56 2026 by rpki-client