Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199266.roa
File:                     AS199266.roa (raw, json)
Hash identifier:          ROUM5TRaQFNjpiPu0YRrvd0GCcqBexzWuINer0z3vHA=
Subject key identifier:   4C:CB:42:0D:CF:E6:7C:9B:91:7D:BA:EA:D8:6F:D6:04:16:88:29:84
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       7D4F2DC6E493AF6EDDD8BC1894A75F2ED978E509
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199266.roa
Signing time:             Fri 05 Jun 2026 07:12:26 +0000
ROA not before:           Fri 05 Jun 2026 07:07:26 +0000
ROA not after:            Fri 04 Jun 2027 07:12:26 +0000
asID:                     199266
IP address blocks:        2a0a:6040:8900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4f:2d:c6:e4:93:af:6e:dd:d8:bc:18:94:a7:5f:2e:d9:78:e5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:26 2026 GMT
            Not After : Jun  4 07:12:26 2027 GMT
        Subject: CN=4CCB420DCFE67C9B917DBAEAD86FD60416882984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:a6:40:3c:0e:2c:75:76:84:d0:df:e0:94:
                    cc:26:25:42:a0:98:1c:f4:00:47:f2:3f:97:6a:3d:
                    45:06:19:dc:9d:b5:31:5c:a2:a5:1e:f1:7b:ed:96:
                    17:2d:30:7f:eb:5a:db:07:47:11:79:89:6e:8d:38:
                    6a:5f:26:e8:75:94:52:a7:5b:aa:24:01:dd:0f:49:
                    38:97:38:48:37:a3:f6:9a:9c:e3:9e:0c:7b:46:56:
                    9f:67:7b:62:1c:d0:cf:94:b1:17:c2:c4:83:bf:37:
                    84:c9:ec:1e:38:6f:bb:84:fb:11:e2:07:3d:de:85:
                    14:99:e8:18:87:9f:77:98:9a:b6:a6:8f:e1:3d:39:
                    f6:20:69:26:a4:8b:d3:e6:12:58:58:98:bc:dc:7b:
                    97:fe:aa:4e:dd:bd:5b:1f:64:e5:03:a0:c3:55:25:
                    87:aa:94:3c:a9:d5:c3:ec:ec:99:4f:89:70:12:98:
                    a1:85:ba:e9:17:45:bc:6f:66:2e:5d:ea:dd:11:fa:
                    2b:35:dd:81:0c:e6:64:b9:ac:b9:34:e8:fb:02:30:
                    69:41:c8:c0:43:d9:e6:e9:ab:19:ea:58:1a:82:c3:
                    e9:ea:48:8a:50:be:33:87:21:4e:5a:4d:ed:d9:c5:
                    aa:dd:7a:74:6d:60:16:cf:5c:f0:b8:e0:4a:17:c8:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CB:42:0D:CF:E6:7C:9B:91:7D:BA:EA:D8:6F:D6:04:16:88:29:84
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         d5:4b:e6:68:6b:33:78:e5:1a:34:78:87:07:08:4f:f4:75:73:
         96:02:a4:0a:1a:72:bb:ca:8f:0c:96:b0:19:70:08:9e:78:3d:
         3e:88:eb:34:e3:24:57:67:b8:41:85:4f:69:70:3f:61:62:1c:
         c2:06:83:dc:4c:c8:d5:70:4c:35:76:fa:bf:e0:d6:8c:59:5c:
         b7:fd:64:7d:04:bf:48:ae:ec:14:40:6b:b7:79:0b:e1:19:d6:
         2e:df:9d:81:ed:57:6d:b5:50:f5:da:ae:4b:ae:54:49:b7:42:
         90:3b:e1:de:b9:d3:37:e5:42:d5:c6:c5:df:f1:2d:e1:82:ad:
         fc:f6:66:78:16:50:f5:1e:ab:ae:d8:d4:90:f6:3a:55:25:2d:
         34:d1:8f:11:4b:91:e6:6e:f0:4b:52:ce:9a:bf:a5:05:a1:ec:
         03:3b:dc:0f:a5:87:95:0a:d6:0e:f0:43:d6:17:9a:17:be:bf:
         47:e4:0d:9c:25:82:96:c1:ba:61:3e:49:51:e9:08:09:65:c8:
         2f:17:d3:80:5a:7f:18:76:a4:03:19:49:fe:7c:f7:62:ee:9a:
         f7:d3:60:3a:14:e5:43:69:94:e8:9e:bd:52:d9:2c:ec:8c:60:
         58:58:1c:e2:5a:6d:d6:a0:41:5d:fb:8e:dc:fa:e8:a5:a9:b7:
         f5:ef:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:05 2026 by rpki-client