Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197866.roa
File:                     AS197866.roa (raw, json)
Hash identifier:          jSoJYixw+nwcEKdds9uA2rwS2GeBRcuh41vN13W0PJ0=
Subject key identifier:   E8:C6:6C:A8:18:49:35:FE:FE:DD:5B:E4:21:BF:16:5B:A8:30:EB:A1
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       3523BD78844F8E83EB8181EF5C4182A0F689CC32
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197866.roa
Signing time:             Fri 05 Jun 2026 07:12:12 +0000
ROA not before:           Fri 05 Jun 2026 07:07:12 +0000
ROA not after:            Fri 04 Jun 2027 07:12:12 +0000
asID:                     197866
IP address blocks:        2a05:dfc1:6600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:23:bd:78:84:4f:8e:83:eb:81:81:ef:5c:41:82:a0:f6:89:cc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:12 2026 GMT
            Not After : Jun  4 07:12:12 2027 GMT
        Subject: CN=E8C66CA8184935FEFEDD5BE421BF165BA830EBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:9d:fb:94:00:3f:92:3a:ae:45:c1:cd:f3:
                    18:6f:19:eb:b5:ab:2f:e8:33:a2:04:8c:86:b8:fc:
                    84:74:35:9c:f7:c5:e3:3c:9e:3f:83:4e:02:20:d6:
                    a8:04:3d:ab:f7:7c:07:d3:08:8d:a8:6c:cf:d0:e1:
                    d4:c7:e5:61:f2:83:ed:ee:8c:2b:66:88:dc:76:f0:
                    fd:ac:30:af:f1:85:d2:01:13:e8:02:f8:a0:7d:12:
                    4a:a1:8a:1c:8b:b3:ec:62:65:95:89:d2:3e:de:18:
                    34:44:f9:d1:10:c9:14:dc:05:85:20:33:ce:95:3d:
                    be:c8:81:16:c0:31:b0:4a:56:25:11:85:0f:6d:43:
                    f2:c1:8f:0b:e2:e3:73:c9:57:cc:7f:f4:50:9f:d0:
                    b1:7c:16:ee:18:82:30:e3:fa:a5:39:f6:d9:94:55:
                    b5:c8:71:71:31:d3:a0:a5:58:e2:7a:dd:ce:87:2a:
                    5b:ba:80:34:67:84:8e:8f:df:7f:1a:58:36:52:88:
                    27:4a:8b:d8:0c:9e:c5:15:ad:4b:18:cf:6a:2f:47:
                    e8:28:88:84:d9:11:e4:f9:2f:a4:af:bb:9e:10:4e:
                    4c:a7:86:14:8f:9e:af:6f:62:5b:84:1a:6d:e0:20:
                    3f:c6:eb:f6:13:11:06:37:1a:1d:93:de:e1:63:4b:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C6:6C:A8:18:49:35:FE:FE:DD:5B:E4:21:BF:16:5B:A8:30:EB:A1
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         e1:a0:a8:9b:08:98:72:90:31:c0:3c:d1:71:de:83:fb:b2:3c:
         e6:ba:b8:91:70:d1:cb:0f:3e:39:6d:7c:4d:0d:36:1e:da:0c:
         85:31:f5:c1:10:e8:53:cd:1f:e0:8f:91:dc:d8:e0:2d:89:ff:
         d9:71:ce:b9:9e:a0:45:cb:5d:7e:2d:db:cc:c9:74:c5:dc:a1:
         78:17:12:9a:a1:4d:34:d6:cf:68:f4:90:b2:b3:64:30:0e:b2:
         53:36:7c:79:fa:b9:26:9d:c1:71:b8:f1:f5:c1:16:78:34:7a:
         29:4a:fc:d6:73:f2:6e:1d:07:3b:d9:38:18:de:4f:3e:09:97:
         8c:be:3e:54:b4:3f:03:bb:db:2f:f8:c3:9a:8f:cb:d4:e4:6d:
         33:61:5a:50:f4:ef:1b:67:1a:3d:42:b5:15:dd:75:74:5b:ef:
         3f:3b:cc:b0:55:30:f4:c5:46:1c:7a:a9:e7:32:21:d0:c2:6c:
         c0:df:5a:27:8d:4e:b3:55:10:ab:46:4b:a3:f9:c6:a3:18:52:
         9b:e7:56:47:e2:17:43:ee:b7:86:04:51:be:50:db:a2:02:23:
         a6:0f:16:1d:eb:1e:94:57:13:a0:a7:4a:ff:78:8d:75:ac:88:
         87:83:89:06:66:59:2f:d2:a7:1c:1c:9d:f9:fe:85:7c:ba:76:
         6a:61:1c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:25 2026 by rpki-client