Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199832.roa
File:                     AS199832.roa (raw, json)
Hash identifier:          4gmxSAasQFLZN/q6zOjB64pYhvC7ubvbE6kX1f8OkKM=
Subject key identifier:   56:67:C0:89:09:A6:88:79:48:0F:3D:BB:41:C0:CA:2D:E9:F0:70:F9
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       699FDA901D91C1B0A3074A984D1E19FE5E781621
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199832.roa
Signing time:             Fri 05 Jun 2026 07:12:43 +0000
ROA not before:           Fri 05 Jun 2026 07:07:43 +0000
ROA not after:            Fri 04 Jun 2027 07:12:43 +0000
asID:                     199832
IP address blocks:        2a0a:6040:2200::/39 maxlen: 48
                          2a0a:6040:2200::/40 maxlen: 48
                          2a0a:6040:2300::/40 maxlen: 48
                          2a0a:6040:6600::/40 maxlen: 48
                          2a0a:6040:8800::/40 maxlen: 48
                          2a0a:6040:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9f:da:90:1d:91:c1:b0:a3:07:4a:98:4d:1e:19:fe:5e:78:16:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:43 2026 GMT
            Not After : Jun  4 07:12:43 2027 GMT
        Subject: CN=5667C08909A68879480F3DBB41C0CA2DE9F070F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:ef:87:44:0e:de:41:71:e8:ac:ae:c1:7c:
                    5c:60:a1:71:49:7c:b1:b6:36:4b:68:45:cc:b2:f4:
                    95:f2:c8:ed:5b:03:34:55:08:29:cf:a1:a1:cd:85:
                    9a:e5:8d:a7:83:c8:c1:c7:c4:54:44:af:ec:b7:27:
                    17:b2:be:e7:c5:ad:66:8e:cb:6e:2d:bd:62:03:e0:
                    84:8d:32:9e:f3:e4:9d:d2:12:07:64:93:d4:27:20:
                    94:bb:60:d4:34:c4:47:0a:b4:b7:25:e5:15:54:b8:
                    32:de:6f:3c:e1:8e:ea:f5:b2:36:54:9a:25:02:8e:
                    68:22:8a:b7:c9:fd:9e:4f:2d:61:04:a0:b7:27:55:
                    27:58:16:be:a9:f7:85:27:db:ea:1e:6b:16:99:f5:
                    3b:63:76:4c:ef:f8:16:78:95:cf:f1:1b:b9:43:59:
                    db:a3:09:eb:e4:68:ea:5f:6a:5a:9e:d0:8f:18:8d:
                    a5:97:20:d9:f4:4a:9b:bd:bd:c0:ab:65:b7:5c:d7:
                    e6:71:8f:83:64:7b:2f:19:d8:d8:ce:27:7b:b2:5c:
                    c2:75:5a:6b:92:39:87:e5:dd:2e:4a:dc:a5:dd:66:
                    a8:2d:1e:b3:14:26:e7:d6:b2:24:37:4b:02:29:f9:
                    a0:f5:61:81:c5:38:d6:88:e8:8e:dc:8b:04:1d:ed:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:67:C0:89:09:A6:88:79:48:0F:3D:BB:41:C0:CA:2D:E9:F0:70:F9
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2200::/39
                  2a0a:6040:6600::/40
                  2a0a:6040:8800::/40
                  2a0a:6040:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         e8:ca:96:cf:da:7e:92:52:88:58:52:80:3d:f2:08:ea:28:7b:
         28:3c:8b:ee:e1:64:62:8e:2f:54:9c:29:6d:49:0b:fd:30:9b:
         93:8b:bd:66:88:3c:69:65:c7:72:e3:a1:16:76:de:ac:eb:d2:
         c5:81:b2:e3:83:55:38:8b:3b:94:4c:cc:aa:4f:81:30:42:0c:
         79:8d:ef:e5:52:99:b6:a4:75:88:38:61:e3:0e:b9:26:a7:41:
         50:f4:55:ed:93:77:9c:3d:cb:f0:5a:fa:7d:9e:d0:c6:74:6e:
         21:a0:1f:2d:94:33:41:da:aa:0b:80:ca:28:5c:66:06:48:86:
         7f:2f:77:d3:d6:d6:2d:13:e7:d7:15:60:b4:e0:65:49:46:82:
         25:da:61:26:d6:e4:28:d0:5c:44:d3:7d:a2:2b:15:05:05:82:
         ac:61:f9:5e:1a:a4:0c:14:6e:f1:34:7d:1c:81:4f:0f:65:45:
         5f:b8:6e:66:e3:f0:86:1f:3f:2f:c0:0b:2a:27:9a:9a:95:6c:
         98:25:7d:63:d1:67:bf:04:aa:b5:47:82:a0:1f:0c:c5:d7:99:
         01:38:cd:40:c3:63:80:5d:2d:61:52:23:26:23:82:ff:ba:87:
         b2:b4:57:fc:b3:b3:65:70:cb:b0:68:4e:28:ee:93:80:61:1c:
         c6:c4:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:25 2026 by rpki-client