Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200262.roa
File:                     AS200262.roa (raw, json)
Hash identifier:          UfXTAuTLYjGnxj/wFM2bqRSwVpG51fx7RWcv7BzWLPI=
Subject key identifier:   CB:BE:E1:17:AE:A9:4C:CA:BB:1B:E3:D2:5A:13:EF:25:98:0D:5A:BC
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       62DCEB1AEA6480EF876C0BD8967FF49AC1DA1CC0
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200262.roa
Signing time:             Fri 05 Jun 2026 07:12:38 +0000
ROA not before:           Fri 05 Jun 2026 07:07:38 +0000
ROA not after:            Fri 04 Jun 2027 07:12:38 +0000
asID:                     200262
IP address blocks:        2a0a:6040:ae00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:dc:eb:1a:ea:64:80:ef:87:6c:0b:d8:96:7f:f4:9a:c1:da:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:38 2026 GMT
            Not After : Jun  4 07:12:38 2027 GMT
        Subject: CN=CBBEE117AEA94CCABB1BE3D25A13EF25980D5ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:80:5f:ff:59:77:47:77:02:45:af:be:ef:
                    21:36:de:ec:00:90:7d:78:94:98:52:7b:3b:3b:86:
                    d3:5c:e2:f6:01:7e:0d:40:7f:f2:88:46:79:7b:02:
                    26:f7:d3:13:d6:21:90:c3:54:b7:75:50:12:58:98:
                    8c:41:09:7a:cc:bf:2d:55:2e:10:a0:24:2a:00:f9:
                    28:28:ee:d0:ee:2f:cc:97:27:ad:af:f2:3a:62:98:
                    fe:75:5d:85:3b:1e:e8:ec:b0:69:10:de:39:aa:64:
                    f2:26:3e:02:5c:96:51:64:5a:88:83:35:17:89:fc:
                    94:80:cb:2d:f7:02:4c:fb:d6:18:00:ff:66:5c:b4:
                    94:c0:bb:f8:d6:db:0f:8b:8a:66:f3:68:8b:31:74:
                    b6:92:6e:72:ff:83:6d:9f:cc:11:1f:d9:28:9c:0d:
                    6b:95:81:70:22:84:25:c0:6c:69:51:ed:93:86:49:
                    41:c1:b2:29:8a:cd:e4:4b:8d:df:84:a9:8d:27:5f:
                    13:f9:84:16:88:f8:48:f1:56:18:6b:0c:ad:a6:1c:
                    24:1f:ba:c9:95:a6:70:d4:ba:07:c0:6b:4c:49:5a:
                    ff:a3:e4:a4:2a:34:e0:ce:58:66:fb:cb:12:84:34:
                    56:72:ec:8d:04:d7:5d:01:90:2f:78:5a:d3:ce:f1:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BE:E1:17:AE:A9:4C:CA:BB:1B:E3:D2:5A:13:EF:25:98:0D:5A:BC
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:e5:b1:e3:56:28:80:3d:21:24:4a:7d:02:f1:e8:37:f2:
         fd:e7:22:5c:44:24:58:62:af:8b:2b:31:81:49:d1:c8:92:19:
         43:e9:6a:8e:b7:fd:f0:d5:cf:47:33:ef:22:4b:83:54:3f:72:
         26:39:45:5c:58:3b:2c:0d:97:4a:7e:a5:c5:2e:6a:9b:a6:24:
         c4:00:d0:7e:54:a0:09:f7:23:90:72:e7:63:83:0b:63:51:93:
         29:aa:52:94:14:8f:63:1d:1f:0b:03:e5:08:8c:20:39:f3:8e:
         ea:fc:e9:05:cd:54:87:39:56:f2:c0:20:3c:c8:f4:a3:bc:3e:
         98:77:63:e0:ea:c9:a9:c2:40:64:25:da:48:6b:b2:d2:34:d8:
         55:0b:5b:8a:b7:d5:e1:ad:cb:17:df:af:f6:33:fd:54:13:26:
         23:f3:22:6e:af:92:d0:b8:e4:a4:6f:20:34:0f:3c:96:74:ed:
         2e:5a:90:a5:3a:7c:a1:8b:ab:78:a8:62:3f:a9:e1:cd:77:3d:
         b1:7c:55:f0:07:9a:3d:50:c9:a9:4c:8a:05:a2:d3:45:4e:59:
         2c:f5:fe:a4:da:eb:d1:76:42:73:d8:1f:63:db:7b:4b:96:42:
         98:dc:92:bc:fc:27:74:a9:30:97:58:8c:99:63:1e:fd:13:5f:
         7e:f8:eb:38
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUYtzrGupkgO+HbAvYln/0msHaHMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzhaFw0yNzA2MDQwNzEyMzhaMDMxMTAvBgNV
BAMTKENCQkVFMTE3QUVBOTRDQ0FCQjFCRTNEMjVBMTNFRjI1OTgwRDVBQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VoBf/1l3R3cCRa++7yE23uwA
kH14lJhSezs7htNc4vYBfg1Af/KIRnl7Aib30xPWIZDDVLd1UBJYmIxBCXrMvy1V
LhCgJCoA+Sgo7tDuL8yXJ62v8jpimP51XYU7HujssGkQ3jmqZPImPgJcllFkWoiD
NReJ/JSAyy33Akz71hgA/2ZctJTAu/jW2w+LimbzaIsxdLaSbnL/g22fzBEf2Sic
DWuVgXAihCXAbGlR7ZOGSUHBsimKzeRLjd+EqY0nXxP5hBaI+EjxVhhrDK2mHCQf
usmVpnDUugfAa0xJWv+j5KQqNODOWGb7yxKENFZy7I0E110BkC94WtPO8TndAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUy77hF66pTMq7G+PSWhPvJZgNWrwwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwMjYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQK4wDQYJKoZIhvcNAQELBQADggEBAEFv
5bHjViiAPSEkSn0C8eg38v3nIlxEJFhir4srMYFJ0ciSGUPpao63/fDVz0cz7yJL
g1Q/ciY5RVxYOywNl0p+pcUuapumJMQA0H5UoAn3I5By52ODC2NRkymqUpQUj2Md
HwsD5QiMIDnzjur86QXNVIc5VvLAIDzI9KO8Pph3Y+DqyanCQGQl2khrstI02FUL
W4q31eGtyxffr/Yz/VQTJiPzIm6vktC45KRvIDQPPJZ07S5akKU6fKGLq3ioYj+p
4c13PbF8VfAHmj1QyalMigWi00VOWSz1/qTa69F2QnPYH2Pbe0uWQpjckrz8J3Sp
MJdYjJljHv0TX3746zg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:20 2026 by rpki-client