Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199613.roa
File:                     AS199613.roa (raw, json)
Hash identifier:          eKgiRQnyjwT6GvSGm8uauobtW16jqwasPIOR72CfEMI=
Subject key identifier:   BD:DA:4F:CC:8A:96:2F:3F:2B:9D:6F:78:05:76:3A:EA:91:02:D6:E7
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       733900C823BE06975233AD6D635B66581AD59BCC
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199613.roa
Signing time:             Fri 05 Jun 2026 07:12:41 +0000
ROA not before:           Fri 05 Jun 2026 07:07:41 +0000
ROA not after:            Fri 04 Jun 2027 07:12:41 +0000
asID:                     199613
IP address blocks:        2a0a:6040:7d00::/40 maxlen: 48
                          2a0a:6040:d800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:39:00:c8:23:be:06:97:52:33:ad:6d:63:5b:66:58:1a:d5:9b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:41 2026 GMT
            Not After : Jun  4 07:12:41 2027 GMT
        Subject: CN=BDDA4FCC8A962F3F2B9D6F7805763AEA9102D6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:53:28:64:b6:6c:ed:fe:64:1c:f2:9e:ab:
                    d6:0c:94:4a:ef:24:1b:05:f0:50:e3:8d:5d:41:b3:
                    8a:12:74:04:d1:bc:f2:34:95:8f:41:53:0b:16:af:
                    71:be:2b:0d:f6:60:ac:71:2e:9a:cd:d5:ba:73:06:
                    4d:b4:7e:7f:d4:02:34:d6:65:dd:bf:03:6d:52:d9:
                    f0:f6:61:08:f9:69:83:62:10:4c:07:6d:76:e3:e6:
                    0e:47:e7:ca:fc:8e:4b:e9:98:65:a7:95:39:18:94:
                    b9:02:98:78:5e:b5:fa:51:e1:5e:71:2b:5e:d0:02:
                    0b:d2:60:09:38:80:8c:17:3c:7d:69:09:c4:89:fc:
                    b2:f5:2f:c8:bf:b9:1d:e2:58:bd:19:73:17:70:4a:
                    8a:b1:e6:93:f7:1f:12:c6:ba:f9:99:3d:b4:9c:2b:
                    d0:e7:c6:23:2f:ee:4c:c2:19:af:c4:1d:b4:97:de:
                    11:fd:fa:d5:9e:89:0e:ef:cf:26:c5:59:d6:e2:9e:
                    42:d4:7a:15:75:cf:e7:f0:40:dd:52:4f:b2:4e:d1:
                    83:0d:8e:74:d2:63:55:31:ad:40:ed:ef:29:76:6a:
                    16:69:89:62:50:23:fc:00:a1:31:ae:1e:0f:93:aa:
                    85:78:fe:fc:94:da:1d:48:42:7c:d1:39:0e:09:01:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DA:4F:CC:8A:96:2F:3F:2B:9D:6F:78:05:76:3A:EA:91:02:D6:E7
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7d00::/40
                  2a0a:6040:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:4b:6d:fd:18:4a:9c:85:e5:df:45:fa:27:8b:47:b6:67:
         6b:19:c7:04:80:f2:c3:b5:dc:3d:34:30:04:47:8e:ff:e6:08:
         b7:2e:e6:03:0d:26:62:da:c9:f5:9c:79:36:82:cb:f6:10:e1:
         6d:49:1e:11:06:5d:5d:d7:6d:55:85:13:fe:ce:4f:21:44:30:
         74:4f:ec:7d:5c:fd:70:8a:c1:55:d4:c9:ca:07:71:f5:43:9e:
         61:0a:e4:7f:4c:91:4f:5a:73:3a:33:76:0c:1b:01:3f:0c:1a:
         e3:91:98:91:f2:c9:87:ce:25:cc:47:6e:d4:a4:36:a6:3f:32:
         e8:e5:80:a2:68:69:00:11:2c:49:5e:68:ac:d1:17:53:bf:47:
         51:43:9e:2e:b1:35:d9:5b:fd:00:3e:ec:ff:eb:95:f2:13:88:
         c2:e0:76:94:6d:9f:c9:d4:14:54:dd:e0:5a:24:a3:e9:5f:f0:
         2d:5a:f0:cd:98:75:7d:e3:b0:62:2e:3a:74:81:a5:fd:f0:2e:
         52:91:28:49:05:da:94:2b:8e:78:e3:22:f4:9d:1e:48:fc:33:
         eb:f9:e7:36:8d:b1:b2:ea:16:7b:bb:49:f4:f1:c8:ab:87:78:
         2e:ff:53:fe:e9:98:5e:2a:4d:2d:7d:71:9a:6b:35:ce:49:c8:
         3b:11:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:03 2026 by rpki-client