Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200074.roa
File:                     AS200074.roa (raw, json)
Hash identifier:          pAgQzACnMNRfH8uEBGMePnenNCqp+JPNlKprSHzUdFw=
Subject key identifier:   6E:CE:C9:EF:36:51:35:CB:21:1A:6D:7A:2C:9E:E4:10:B0:61:C0:23
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       7E193D53C8F3452F2CA8BEA8027B4C30ACC586D7
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200074.roa
Signing time:             Fri 05 Jun 2026 07:12:10 +0000
ROA not before:           Fri 05 Jun 2026 07:07:10 +0000
ROA not after:            Fri 04 Jun 2027 07:12:10 +0000
asID:                     200074
IP address blocks:        2a0a:6040:1700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:19:3d:53:c8:f3:45:2f:2c:a8:be:a8:02:7b:4c:30:ac:c5:86:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:10 2026 GMT
            Not After : Jun  4 07:12:10 2027 GMT
        Subject: CN=6ECEC9EF365135CB211A6D7A2C9EE410B061C023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:97:f4:05:15:2d:74:27:38:65:87:cc:79:
                    7b:7c:2c:73:1f:a4:9b:cb:5d:34:22:c8:d1:9b:53:
                    a1:66:cb:06:ee:21:36:07:1e:e7:6c:f6:a8:ae:6a:
                    74:2b:db:a5:1b:40:07:e4:9b:82:ec:ce:13:1e:d5:
                    2b:37:34:1f:c0:64:79:8b:56:d1:83:ca:32:4a:53:
                    e6:ad:50:a8:bb:b8:61:6c:ec:3d:33:22:7e:e8:3c:
                    64:df:5a:15:90:49:2d:f7:af:89:17:60:ad:cc:3d:
                    cd:a7:68:e0:7c:37:24:43:ff:ec:69:7b:28:2f:6b:
                    7a:f6:d9:4b:f4:4b:1e:8b:a0:0c:62:1f:69:ba:29:
                    f6:63:46:af:fe:6e:60:3c:31:3b:00:54:72:f5:f2:
                    ce:d1:14:f2:a1:e2:e7:89:36:79:0c:6e:ca:99:d6:
                    c2:94:68:e2:b6:bc:c7:12:c2:3d:06:6e:66:b5:ef:
                    9a:fd:70:87:54:26:11:80:83:43:f0:1f:8a:27:ca:
                    dd:c8:05:dc:8d:d4:7a:29:2e:ea:ac:3d:fa:e6:8a:
                    8e:73:fa:cb:9d:dc:35:00:c6:dd:09:45:e5:a3:27:
                    00:f9:17:57:14:75:73:b5:49:32:0d:54:88:2a:66:
                    dc:dd:67:3d:ce:e0:95:21:c3:5e:a2:ce:09:82:6c:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CE:C9:EF:36:51:35:CB:21:1A:6D:7A:2C:9E:E4:10:B0:61:C0:23
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200074.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:4e:cf:fd:21:2d:57:33:cf:5e:70:d0:ad:0e:d0:28:41:e5:
         8d:de:ba:05:7d:1b:8c:a2:31:37:e4:90:03:01:05:64:2c:29:
         7e:44:3c:b9:43:f4:66:d5:29:2a:9e:e5:5b:f0:cd:15:ad:6f:
         ab:d9:34:23:51:78:05:e3:fe:06:3e:f2:dc:34:66:1a:8b:88:
         6d:65:af:41:ee:be:fb:ea:5f:7e:ce:e0:16:41:f6:a6:01:70:
         59:80:53:79:55:5b:24:cf:b1:34:cf:3d:a9:85:d9:da:44:43:
         df:e9:82:49:3d:ca:9c:44:cc:d6:7a:9d:30:83:e7:12:88:28:
         20:7f:c8:7d:80:0a:6b:78:9f:92:6e:b9:47:d9:4d:4a:cc:fc:
         ae:7f:e5:dd:d6:ea:30:26:66:61:c1:81:d2:81:ae:08:82:c3:
         00:3f:8f:6b:44:6c:b1:9b:8a:dd:b8:f2:48:b4:ba:b8:84:63:
         d7:54:ab:07:4f:d7:96:1a:6b:3f:9e:0b:c5:34:7c:1d:fe:69:
         60:99:ed:0d:e6:28:87:23:d2:b6:b9:01:b7:69:16:7c:7d:e9:
         a5:4c:f6:f8:67:6b:95:7d:ec:da:98:a0:1d:9b:c3:c2:6f:c3:
         35:54:52:83:f2:0c:da:44:2f:77:ad:ce:ed:81:16:b1:0c:df:
         d2:93:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:27 2026 by rpki-client