Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200179.roa
File:                     AS200179.roa (raw, json)
Hash identifier:          FjKGfsv5F71237x9FzuEWE1H1zWgW4kppFUTB6EjERM=
Subject key identifier:   39:0B:A7:01:65:67:F9:44:DF:15:BC:D9:B5:B0:25:39:88:75:11:3F
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       17CFCEB9AA0BB7A9F7A400306F31CF4EC2E4EA59
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200179.roa
Signing time:             Fri 05 Jun 2026 07:12:22 +0000
ROA not before:           Fri 05 Jun 2026 07:07:22 +0000
ROA not after:            Fri 04 Jun 2027 07:12:22 +0000
asID:                     200179
IP address blocks:        2a05:dfc1:9500::/40 maxlen: 48
                          2a0a:6040:4900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cf:ce:b9:aa:0b:b7:a9:f7:a4:00:30:6f:31:cf:4e:c2:e4:ea:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:22 2026 GMT
            Not After : Jun  4 07:12:22 2027 GMT
        Subject: CN=390BA7016567F944DF15BCD9B5B025398875113F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6c:d3:5d:03:51:e4:a9:65:51:83:43:dc:25:
                    59:12:e0:a6:b4:b9:89:09:72:76:f7:09:07:2b:28:
                    7b:6e:dc:21:f3:8b:5d:30:a7:8a:06:e2:f9:7d:61:
                    01:d5:a0:b3:ab:05:3c:e6:b6:e4:c9:df:3a:e1:05:
                    03:fb:b6:2c:e3:15:8b:0c:48:97:6c:02:48:d7:85:
                    16:db:e5:d6:fc:5c:39:e0:a0:2c:a6:c0:f3:76:8c:
                    a1:0f:23:27:a3:c4:53:4b:ef:b5:fe:24:04:ea:aa:
                    86:24:04:8c:ac:64:08:72:de:91:d2:2b:b0:68:7f:
                    e0:d0:cb:2d:3a:07:70:33:87:4c:0f:72:a5:8e:88:
                    24:df:d6:e0:4a:d1:d3:39:a7:ac:53:f9:ac:24:b9:
                    b9:5f:2a:ce:52:fb:6b:e2:ef:ab:75:78:a7:bd:d5:
                    c0:62:b4:bf:f6:5b:00:93:28:b4:35:f8:8c:2e:03:
                    95:7c:0a:06:54:2d:58:17:34:8e:f0:a8:4e:60:6b:
                    02:c3:f8:b3:2c:f9:0d:d3:d9:fe:9f:82:7c:45:07:
                    16:b8:29:9c:a3:1d:26:a9:f2:92:56:06:f6:a4:4f:
                    62:de:55:2d:4d:ba:66:9d:62:fe:a8:c9:d7:e7:ee:
                    81:98:6b:a0:8b:cd:7f:87:2c:13:7c:94:55:2f:aa:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0B:A7:01:65:67:F9:44:DF:15:BC:D9:B5:B0:25:39:88:75:11:3F
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9500::/40
                  2a0a:6040:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         d0:47:e9:6c:30:ae:fc:00:d4:02:c0:3c:af:7d:b3:84:39:88:
         1b:3a:dc:e9:cd:f8:84:e4:3d:66:9b:65:f1:43:c9:75:a0:86:
         a6:9c:94:b0:ee:1e:cf:53:10:b2:ec:aa:20:34:53:f8:e1:50:
         4f:b4:0b:0a:a6:89:eb:0d:f6:bc:b8:b9:95:f9:c6:9e:2f:86:
         26:d8:4c:e1:ff:64:a5:68:ef:2d:e2:a0:d5:5a:6a:f7:2c:2a:
         75:bb:86:84:53:5f:f6:70:3d:a6:1c:5d:c0:86:ed:f5:b6:4e:
         08:51:d3:03:82:01:ba:26:8e:9b:50:6e:82:9d:b1:51:24:d7:
         a1:69:b4:09:65:27:eb:7c:64:54:50:c7:87:99:a9:64:5a:fc:
         bd:ba:27:90:6b:f4:d7:3d:63:d3:1d:cf:f8:2a:96:8b:81:df:
         ee:fc:7a:b2:36:17:4c:db:28:bd:17:db:77:b6:94:34:e7:0b:
         53:62:c5:de:40:24:88:22:bf:be:cd:ea:a5:ed:a1:8b:6d:ec:
         32:ea:c7:b2:4b:af:c6:5d:80:53:da:11:48:bd:6e:3d:74:98:
         e8:14:65:35:8f:8e:17:a8:f0:05:f9:57:68:b6:62:62:ca:9b:
         15:d9:4c:6f:e9:ed:a7:37:0c:2b:97:55:47:af:96:57:0b:a0:
         d4:95:06:55
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUF8/OuaoLt6n3pAAwbzHPTsLk6lkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjJaFw0yNzA2MDQwNzEyMjJaMDMxMTAvBgNV
BAMTKDM5MEJBNzAxNjU2N0Y5NDRERjE1QkNEOUI1QjAyNTM5ODg3NTExM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdbNNdA1HkqWVRg0PcJVkS4Ka0
uYkJcnb3CQcrKHtu3CHzi10wp4oG4vl9YQHVoLOrBTzmtuTJ3zrhBQP7tizjFYsM
SJdsAkjXhRbb5db8XDngoCymwPN2jKEPIyejxFNL77X+JATqqoYkBIysZAhy3pHS
K7Bof+DQyy06B3Azh0wPcqWOiCTf1uBK0dM5p6xT+awkublfKs5S+2vi76t1eKe9
1cBitL/2WwCTKLQ1+IwuA5V8CgZULVgXNI7wqE5gawLD+LMs+Q3T2f6fgnxFBxa4
KZyjHSap8pJWBvakT2LeVS1NumadYv6oydfn7oGYa6CLzX+HLBN8lFUvqk1fAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUOQunAWVn+UTfFbzZtbAlOYh1ET8wHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwMTc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF
BwEHAQH/BBowGDAWBAIAAjAQAwYAKgXfwZUDBgAqCmBASTANBgkqhkiG9w0BAQsF
AAOCAQEA0EfpbDCu/ADUAsA8r32zhDmIGzrc6c34hOQ9Zptl8UPJdaCGppyUsO4e
z1MQsuyqIDRT+OFQT7QLCqaJ6w32vLi5lfnGni+GJthM4f9kpWjvLeKg1Vpq9ywq
dbuGhFNf9nA9phxdwIbt9bZOCFHTA4IBuiaOm1Bugp2xUSTXoWm0CWUn63xkVFDH
h5mpZFr8vbonkGv01z1j0x3P+CqWi4Hf7vx6sjYXTNsovRfbd7aUNOcLU2LF3kAk
iCK/vs3qpe2hi23sMurHskuvxl2AU9oRSL1uPXSY6BRlNY+OF6jwBflXaLZiYsqb
FdlMb+ntpzcMK5dVR6+WVwug1JUGVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:01 2026 by rpki-client