Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198308.roa
File:                     AS198308.roa (raw, json)
Hash identifier:          NOPTfDPmBouCxp4cK/9g4YFeA25nukRRV+PNTCvq4qA=
Subject key identifier:   BE:C1:7B:E0:DB:0C:A4:CD:CB:9C:67:29:E3:39:DB:C2:23:D7:89:F6
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       40B0BF4B34361E37C537CE279A96FEB5E51A54DE
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198308.roa
Signing time:             Fri 05 Jun 2026 07:12:30 +0000
ROA not before:           Fri 05 Jun 2026 07:07:30 +0000
ROA not after:            Fri 04 Jun 2027 07:12:30 +0000
asID:                     198308
IP address blocks:        2a05:dfc1:4d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b0:bf:4b:34:36:1e:37:c5:37:ce:27:9a:96:fe:b5:e5:1a:54:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:30 2026 GMT
            Not After : Jun  4 07:12:30 2027 GMT
        Subject: CN=BEC17BE0DB0CA4CDCB9C6729E339DBC223D789F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:50:4d:cd:d6:46:4d:3c:03:e8:b5:fd:d9:
                    12:b3:74:49:65:71:e7:e8:72:33:48:0b:ea:2e:fe:
                    fc:42:00:10:3a:5f:f1:dd:f6:d6:ae:6b:04:3e:5d:
                    06:dd:31:8d:f8:df:f0:9d:12:b4:59:92:26:9b:f7:
                    bd:08:83:17:15:0d:11:0f:99:06:ec:6d:52:6e:5d:
                    10:5c:ee:ad:e5:cf:03:0b:39:ba:89:30:47:50:af:
                    b9:fc:1d:ca:07:f0:5e:e7:99:6f:15:a4:1a:96:9a:
                    b3:24:aa:99:ca:56:28:c2:40:9f:51:01:84:50:c8:
                    a4:83:d3:11:9b:00:5f:9d:c5:3a:e6:de:b5:d2:37:
                    e8:0d:10:ef:38:0f:fb:00:4d:ad:66:ef:01:10:30:
                    1c:57:c4:83:fa:f7:0c:e2:e8:1e:8c:5c:ab:71:d7:
                    d5:aa:ae:bc:ff:10:10:1f:9f:cb:97:b7:a8:83:f9:
                    18:b5:c3:90:46:b9:d9:a4:fc:2b:12:af:93:b0:10:
                    25:84:f8:a2:44:1e:0a:35:bd:05:76:4a:31:74:01:
                    ad:78:74:c3:49:87:59:49:9e:b6:a6:6c:d2:33:63:
                    66:1e:00:32:a1:eb:76:72:db:1f:56:1d:aa:29:f9:
                    46:18:ca:f2:d5:a0:e3:6a:2a:2f:7f:b7:d5:f6:af:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:7B:E0:DB:0C:A4:CD:CB:9C:67:29:E3:39:DB:C2:23:D7:89:F6
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198308.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:4d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         d8:48:2e:be:0b:77:94:78:ee:ae:76:b8:82:30:c9:d2:c2:60:
         54:9b:6c:5a:ac:a4:eb:bd:91:b3:d6:0a:aa:cf:04:16:20:cf:
         b5:90:6f:5a:a2:a0:5b:79:94:00:4e:aa:85:ce:82:64:0d:dd:
         76:28:58:fb:3e:57:d7:4f:a3:39:dc:62:9b:f3:8c:f3:65:06:
         2b:80:83:b6:73:9a:60:cc:f3:ec:71:ed:f0:73:64:26:e3:10:
         9b:4e:ef:32:fc:cb:0a:0d:5d:2e:99:89:5f:91:3f:79:fb:09:
         3d:50:b2:84:72:29:39:ab:3b:26:3c:50:6d:4f:18:de:42:ef:
         05:65:0a:ee:ff:fe:91:f4:1f:6b:f2:e4:41:a8:cb:ff:88:b5:
         28:5f:a8:9a:2a:ab:f9:7b:b0:8d:b7:00:08:cc:48:c9:86:e8:
         d3:3c:8a:1e:1f:89:8e:97:28:12:1b:79:c7:68:71:56:c0:e4:
         e4:0c:07:99:89:51:59:b5:80:75:58:3e:cc:5e:54:f2:cf:d3:
         01:cb:65:83:51:89:28:1a:0b:bf:fb:5b:a6:d5:e4:d0:8b:78:
         85:f9:0b:16:34:6d:77:18:97:ad:98:7b:1b:7a:91:c4:0a:45:
         5c:d6:17:5a:0c:53:26:37:92:6b:e0:89:d0:b8:56:89:09:b1:
         3b:7f:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:53 2026 by rpki-client