Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200226.roa
File:                     AS200226.roa (raw, json)
Hash identifier:          j1+wR/5HXjCJk4uOT+0RsGgsUAstQtvwB1HGe6f9qao=
Subject key identifier:   C7:CB:25:98:7F:79:A4:B1:51:3B:06:FE:1D:B0:E8:A4:C7:63:BF:D8
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       05BAAE6B3EB78FFEA0555013BB55703C7DD7F5E3
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200226.roa
Signing time:             Fri 05 Jun 2026 07:12:24 +0000
ROA not before:           Fri 05 Jun 2026 07:07:24 +0000
ROA not after:            Fri 04 Jun 2027 07:12:24 +0000
asID:                     200226
IP address blocks:        2a0a:6040:3a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ba:ae:6b:3e:b7:8f:fe:a0:55:50:13:bb:55:70:3c:7d:d7:f5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:24 2026 GMT
            Not After : Jun  4 07:12:24 2027 GMT
        Subject: CN=C7CB25987F79A4B1513B06FE1DB0E8A4C763BFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:d4:1f:3f:e6:c2:23:df:e7:8d:4c:5f:a4:
                    69:33:1a:c4:a2:d2:d8:5d:74:76:db:d4:bd:ba:62:
                    61:d5:68:5a:84:93:b5:b3:09:6b:26:91:58:89:30:
                    6b:90:a2:3b:8a:e1:f9:94:79:a1:58:4d:b6:26:db:
                    25:1f:75:21:a1:fb:cd:2d:6b:b5:03:a1:c6:6b:56:
                    59:32:a8:26:ae:06:23:0d:fa:f6:ab:ff:e9:28:f1:
                    72:27:4e:20:3a:70:9e:46:59:e5:8a:e4:16:09:1d:
                    e9:c0:62:2b:87:8d:73:f4:9f:41:fd:4a:02:c4:34:
                    ee:b4:4e:db:4f:00:6d:74:a9:30:24:87:76:db:68:
                    39:05:ca:7f:f4:3b:e7:35:2d:71:f0:0c:dc:07:40:
                    3e:9a:bf:1f:d4:27:75:cf:a1:81:63:8e:81:cf:b6:
                    1f:1c:c2:d2:d8:31:4d:85:db:98:3d:1a:60:63:27:
                    62:2f:46:35:45:5d:3c:87:5d:c0:0c:24:8b:be:99:
                    12:fe:b5:f2:ec:8a:c9:3a:19:86:d4:95:8e:fe:af:
                    6b:e9:1f:39:02:e8:b2:06:f6:c1:1b:d6:d2:2a:82:
                    f2:f6:95:96:ce:2a:02:34:ca:47:c7:92:bf:52:5d:
                    e0:9f:77:0a:5a:78:f7:fc:e1:51:d6:0f:c5:6e:95:
                    2f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CB:25:98:7F:79:A4:B1:51:3B:06:FE:1D:B0:E8:A4:C7:63:BF:D8
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200226.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:46:ba:e6:57:d0:03:4b:c3:9e:16:5f:c4:87:c0:71:0d:b5:
         96:82:bf:52:85:09:f1:06:23:90:4e:f1:7a:e4:e4:cb:63:30:
         f6:ed:4a:35:00:c0:8c:e1:2b:c6:6e:d8:94:10:6c:46:e9:fb:
         be:c6:01:df:00:af:11:97:bc:f6:6f:7e:e9:d6:4d:b6:40:5d:
         9e:0b:bf:8f:e6:28:8b:a3:b3:21:77:87:fb:84:66:f6:b7:8c:
         32:a7:86:1f:7c:7e:5c:78:ee:cd:f3:aa:72:12:d3:12:1b:ce:
         b1:81:0b:d5:31:cd:cc:04:9b:70:7c:ab:31:2a:a5:6b:dc:f2:
         75:4c:8d:28:8f:0a:c3:55:b6:e7:c5:36:ea:a8:fb:69:d2:00:
         56:25:38:49:a2:97:89:ea:72:9f:8d:a6:bd:2a:b6:4f:b1:8f:
         ef:2b:54:59:bc:f7:b5:fd:e8:b8:57:e4:6a:db:8d:15:a1:da:
         10:56:a8:04:3e:53:53:df:e2:80:1b:28:a6:54:9b:6a:d6:12:
         98:5b:f4:0c:20:e6:56:6d:17:f3:8f:c4:21:30:8b:f4:c3:16:
         ec:58:3d:77:48:6a:0a:1d:b6:ba:50:22:a2:cc:80:13:62:d3:
         36:e3:eb:b4:1a:8a:d7:6e:41:a5:80:1b:b8:32:e4:2d:b8:13:
         62:a2:80:0e
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUBbquaz63j/6gVVATu1VwPH3X9eMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjRaFw0yNzA2MDQwNzEyMjRaMDMxMTAvBgNV
BAMTKEM3Q0IyNTk4N0Y3OUE0QjE1MTNCMDZGRTFEQjBFOEE0Qzc2M0JGRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxudQfP+bCI9/njUxfpGkzGsSi
0thddHbb1L26YmHVaFqEk7WzCWsmkViJMGuQojuK4fmUeaFYTbYm2yUfdSGh+80t
a7UDocZrVlkyqCauBiMN+var/+ko8XInTiA6cJ5GWeWK5BYJHenAYiuHjXP0n0H9
SgLENO60TttPAG10qTAkh3bbaDkFyn/0O+c1LXHwDNwHQD6avx/UJ3XPoYFjjoHP
th8cwtLYMU2F25g9GmBjJ2IvRjVFXTyHXcAMJIu+mRL+tfLsisk6GYbUlY7+r2vp
HzkC6LIG9sEb1tIqgvL2lZbOKgI0ykfHkr9SXeCfdwpaePf84VHWD8VulS/HAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUx8slmH95pLFROwb+HbDopMdjv9gwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwMjI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDowDQYJKoZIhvcNAQELBQADggEBABhG
uuZX0ANLw54WX8SHwHENtZaCv1KFCfEGI5BO8Xrk5MtjMPbtSjUAwIzhK8Zu2JQQ
bEbp+77GAd8ArxGXvPZvfunWTbZAXZ4Lv4/mKIujsyF3h/uEZva3jDKnhh98flx4
7s3zqnIS0xIbzrGBC9UxzcwEm3B8qzEqpWvc8nVMjSiPCsNVtufFNuqo+2nSAFYl
OEmil4nqcp+Npr0qtk+xj+8rVFm897X96LhX5GrbjRWh2hBWqAQ+U1Pf4oAbKKZU
m2rWEphb9Awg5lZtF/OPxCEwi/TDFuxYPXdIagodtrpQIqLMgBNi0zbj67Qaitdu
QaWAG7gy5C24E2KigA4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:13:15 2026 by rpki-client