Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200007.roa
File:                     AS200007.roa (raw, json)
Hash identifier:          u2sRTyBoRRi17n0ZsDGJzJeNuH2MrRA6rmjhzZflfXE=
Subject key identifier:   9D:55:E9:4D:99:E8:AB:1B:28:6A:55:07:D0:10:E9:3F:D8:F2:9A:A7
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       63B1DA3EE30FEB0A98804D882AEA45BDC1D25B62
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200007.roa
Signing time:             Fri 05 Jun 2026 07:12:34 +0000
ROA not before:           Fri 05 Jun 2026 07:07:34 +0000
ROA not after:            Fri 04 Jun 2027 07:12:34 +0000
asID:                     200007
IP address blocks:        2a0a:6040:5900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b1:da:3e:e3:0f:eb:0a:98:80:4d:88:2a:ea:45:bd:c1:d2:5b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:34 2026 GMT
            Not After : Jun  4 07:12:34 2027 GMT
        Subject: CN=9D55E94D99E8AB1B286A5507D010E93FD8F29AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:5c:8e:4e:40:a7:a5:e3:d9:d7:34:61:58:
                    71:53:6c:7d:3d:64:92:b7:24:d6:c6:a9:01:9c:43:
                    99:42:e3:9f:6b:01:f1:38:9c:bc:cc:ec:a8:4d:e8:
                    46:94:4d:7f:37:be:8f:88:b0:0a:0b:af:75:d2:0a:
                    7e:01:46:90:4e:3c:f8:87:4d:b7:2b:c0:bb:4e:21:
                    6a:69:28:2f:a2:d0:5a:3d:b3:17:fc:35:cf:bf:ab:
                    a7:1e:7a:d0:f0:9d:e9:8a:8d:85:85:46:0e:b2:47:
                    57:af:86:a5:11:3c:d2:ca:13:51:c7:4b:f8:87:29:
                    10:87:5c:2d:92:d7:cc:7d:d8:28:1c:20:35:96:29:
                    35:f1:a5:29:de:e7:cd:eb:f7:8a:d1:d9:d5:00:e5:
                    85:0b:dd:dd:c7:7b:f3:85:76:21:fb:c2:44:69:98:
                    4f:29:03:95:ca:26:c2:2e:26:39:f6:02:c4:8d:dd:
                    95:c8:2b:a9:d3:20:dd:5e:75:4c:1f:d6:be:33:1e:
                    b8:4d:7d:d2:04:92:2d:d9:45:15:9f:56:e1:c2:95:
                    8a:5f:e0:72:1b:9b:7c:78:0b:2b:79:cc:af:2e:e0:
                    8b:7a:9f:53:a2:fd:6f:74:15:7a:e9:6d:b5:72:72:
                    48:24:8d:a8:4e:ff:26:77:88:ca:cf:ad:56:76:3b:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:55:E9:4D:99:E8:AB:1B:28:6A:55:07:D0:10:E9:3F:D8:F2:9A:A7
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200007.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5900::/40

    Signature Algorithm: sha256WithRSAEncryption
         d6:0e:f7:47:b9:e0:9a:70:77:60:fa:19:75:69:42:6f:b9:7d:
         88:1a:0d:9a:e3:0c:a2:c9:26:7f:d2:a7:2b:fe:e7:ed:f0:76:
         8b:a7:65:e6:79:fe:98:d6:35:84:e4:d8:4f:a2:05:da:0b:82:
         bb:51:4c:aa:a4:f4:df:66:d3:a1:b7:54:5a:b0:fc:a1:b9:64:
         f9:85:81:5b:87:b1:f8:b5:d3:2b:0b:ca:3d:b4:c7:bc:74:aa:
         bc:96:4e:3a:41:73:35:a2:67:6b:44:b5:4f:16:70:48:20:b4:
         42:91:72:71:12:b4:31:07:72:48:81:58:de:12:f9:5d:d7:01:
         b9:79:0e:72:c8:7c:b2:08:c6:8e:ea:e8:f2:0b:3b:82:0d:56:
         1d:d4:4a:a3:2d:52:9e:28:67:6a:14:fe:ce:2f:fe:90:86:7f:
         ea:4e:b1:ba:5c:f4:d3:55:c9:19:c4:f3:c9:80:bf:57:d8:ec:
         c8:f0:e0:fa:76:1e:54:bd:62:f3:90:96:04:78:f4:9f:ec:02:
         55:96:50:0f:e5:b7:c4:14:11:5a:fe:66:49:50:2c:99:33:76:
         cf:36:85:bb:a3:e6:fb:22:0f:d1:77:64:ef:7c:ae:b7:8b:6c:
         ae:b1:be:d4:34:96:fc:de:11:52:8e:8d:70:a4:35:33:5b:d7:
         32:4b:a9:b2
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUY7HaPuMP6wqYgE2IKupFvcHSW2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzRaFw0yNzA2MDQwNzEyMzRaMDMxMTAvBgNV
BAMTKDlENTVFOTREOTlFOEFCMUIyODZBNTUwN0QwMTBFOTNGRDhGMjlBQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzF1yOTkCnpePZ1zRhWHFTbH09
ZJK3JNbGqQGcQ5lC459rAfE4nLzM7KhN6EaUTX83vo+IsAoLr3XSCn4BRpBOPPiH
TbcrwLtOIWppKC+i0Fo9sxf8Nc+/q6ceetDwnemKjYWFRg6yR1evhqURPNLKE1HH
S/iHKRCHXC2S18x92CgcIDWWKTXxpSne583r94rR2dUA5YUL3d3He/OFdiH7wkRp
mE8pA5XKJsIuJjn2AsSN3ZXIK6nTIN1edUwf1r4zHrhNfdIEki3ZRRWfVuHClYpf
4HIbm3x4Cyt5zK8u4It6n1Oi/W90FXrpbbVyckgkjahO/yZ3iMrPrVZ2O1LVAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUnVXpTZnoqxsoalUH0BDpP9jymqcwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwMDA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQFkwDQYJKoZIhvcNAQELBQADggEBANYO
90e54Jpwd2D6GXVpQm+5fYgaDZrjDKLJJn/Spyv+5+3wdounZeZ5/pjWNYTk2E+i
BdoLgrtRTKqk9N9m06G3VFqw/KG5ZPmFgVuHsfi10ysLyj20x7x0qryWTjpBczWi
Z2tEtU8WcEggtEKRcnEStDEHckiBWN4S+V3XAbl5DnLIfLIIxo7q6PILO4INVh3U
SqMtUp4oZ2oU/s4v/pCGf+pOsbpc9NNVyRnE88mAv1fY7Mjw4Pp2HlS9YvOQlgR4
9J/sAlWWUA/lt8QUEVr+ZklQLJkzds82hbuj5vsiD9F3ZO98rreLbK6xvtQ0lvze
EVKOjXCkNTNb1zJLqbI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:17 2026 by rpki-client