Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200263.roa
File:                     AS200263.roa (raw, json)
Hash identifier:          eCTZ890QQtJQ1/qoScNCdkWa1iQxSLTR+Gc9e5lKIEA=
Subject key identifier:   5F:1F:C7:26:F0:0C:C0:51:E3:28:0A:2B:8B:0D:FB:55:2C:C2:9B:CE
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       43ADEF92227CC17DCA941583F9A08548E2CC081A
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200263.roa
Signing time:             Fri 05 Jun 2026 07:12:38 +0000
ROA not before:           Fri 05 Jun 2026 07:07:38 +0000
ROA not after:            Fri 04 Jun 2027 07:12:38 +0000
asID:                     200263
IP address blocks:        2a0a:6040:2b00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ad:ef:92:22:7c:c1:7d:ca:94:15:83:f9:a0:85:48:e2:cc:08:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:38 2026 GMT
            Not After : Jun  4 07:12:38 2027 GMT
        Subject: CN=5F1FC726F00CC051E3280A2B8B0DFB552CC29BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:95:43:6a:9a:02:c9:f6:ed:94:2c:ad:ef:e6:
                    c4:fd:1d:22:1b:ef:08:16:45:d9:8f:8d:16:16:a0:
                    7f:53:27:c2:79:ae:ca:ea:53:7f:34:7d:5d:b0:56:
                    9a:b7:25:0a:0d:2d:d7:8f:17:d0:ad:8a:a3:19:ad:
                    5d:97:02:92:b9:7e:00:cd:b6:96:03:a2:0e:1c:bd:
                    0f:d6:18:be:db:d4:74:24:43:a2:6b:fc:6e:57:c8:
                    c6:3d:cc:db:b2:80:9e:bc:fa:84:e6:a9:30:db:64:
                    f6:cc:35:34:25:34:a5:3b:a6:92:07:42:38:ca:7e:
                    59:11:88:ca:df:f0:28:b1:30:d9:7f:bb:47:ee:fe:
                    f1:fd:4e:c3:d5:b8:58:72:33:1e:9a:b6:61:0d:24:
                    83:7e:f0:8d:3d:18:98:ac:a5:79:6f:50:21:89:6e:
                    7b:e1:9e:b7:8c:d5:94:86:fd:73:4f:07:fb:7e:aa:
                    45:05:93:8b:90:e5:21:ce:97:8d:bd:ff:80:6b:29:
                    51:91:bc:2e:59:f4:dc:cf:55:ba:2e:01:7b:c1:32:
                    8a:9b:00:7d:5f:28:f4:f9:f1:97:d9:e5:f3:3c:56:
                    33:48:c4:5b:dc:da:ea:f6:cc:c2:5c:a8:fe:47:3e:
                    fc:51:95:79:9e:b2:47:fe:28:26:65:60:59:a5:2a:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1F:C7:26:F0:0C:C0:51:E3:28:0A:2B:8B:0D:FB:55:2C:C2:9B:CE
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200263.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:02:5b:54:db:c1:10:15:b2:6d:9b:cc:c1:7d:b9:86:a1:35:
         e8:75:15:de:63:29:19:8b:e1:a3:a0:ad:a3:89:07:2b:a3:bb:
         49:b8:97:85:aa:96:99:a5:dd:dc:05:6e:62:3d:93:7e:97:7e:
         34:05:b6:75:5a:08:b5:06:18:58:04:f0:64:f2:e7:e2:29:4f:
         77:3e:4e:4f:47:28:a3:1d:ef:49:b6:bf:a0:c3:76:aa:ae:b8:
         a5:3b:79:fd:fc:6b:37:b0:9d:73:c1:bd:7c:8d:45:5f:d4:26:
         54:0b:87:6d:56:c0:a5:02:c3:a7:fa:05:47:b7:67:cf:3f:41:
         e8:7f:b6:f5:7e:2f:f5:bc:42:61:54:6d:14:77:58:8c:a3:97:
         e5:91:f2:ca:3f:c9:1f:a5:0d:20:c0:ff:ca:b7:52:2d:a5:ca:
         03:e4:ff:c4:99:05:f1:c6:dc:dc:0b:e5:0a:50:66:5d:a7:e5:
         02:db:dd:44:69:f8:b9:83:86:34:a9:88:53:70:2c:e8:2c:cc:
         13:f7:71:8e:55:86:8c:17:03:fb:ad:bd:9e:2d:65:6d:8b:0b:
         db:93:b0:85:49:1b:34:37:6a:7c:f6:5e:b4:1c:20:57:29:72:
         94:8f:ae:67:20:14:36:28:c0:14:b5:2e:6b:8f:e4:1b:cd:84:
         93:22:51:a8
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUQ63vkiJ8wX3KlBWD+aCFSOLMCBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzhaFw0yNzA2MDQwNzEyMzhaMDMxMTAvBgNV
BAMTKDVGMUZDNzI2RjAwQ0MwNTFFMzI4MEEyQjhCMERGQjU1MkNDMjlCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCblUNqmgLJ9u2ULK3v5sT9HSIb
7wgWRdmPjRYWoH9TJ8J5rsrqU380fV2wVpq3JQoNLdePF9CtiqMZrV2XApK5fgDN
tpYDog4cvQ/WGL7b1HQkQ6Jr/G5XyMY9zNuygJ68+oTmqTDbZPbMNTQlNKU7ppIH
QjjKflkRiMrf8CixMNl/u0fu/vH9TsPVuFhyMx6atmENJIN+8I09GJispXlvUCGJ
bnvhnreM1ZSG/XNPB/t+qkUFk4uQ5SHOl429/4BrKVGRvC5Z9NzPVbouAXvBMoqb
AH1fKPT58ZfZ5fM8VjNIxFvc2ur2zMJcqP5HPvxRlXmeskf+KCZlYFmlKiiJAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUXx/HJvAMwFHjKAoriw37VSzCm84wHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwMjYzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQCswDQYJKoZIhvcNAQELBQADggEBAFYC
W1TbwRAVsm2bzMF9uYahNeh1Fd5jKRmL4aOgraOJByuju0m4l4Wqlpml3dwFbmI9
k36XfjQFtnVaCLUGGFgE8GTy5+IpT3c+Tk9HKKMd70m2v6DDdqquuKU7ef38azew
nXPBvXyNRV/UJlQLh21WwKUCw6f6BUe3Z88/Qeh/tvV+L/W8QmFUbRR3WIyjl+WR
8so/yR+lDSDA/8q3Ui2lygPk/8SZBfHG3NwL5QpQZl2n5QLb3URp+LmDhjSpiFNw
LOgszBP3cY5VhowXA/utvZ4tZW2LC9uTsIVJGzQ3anz2XrQcIFcpcpSPrmcgFDYo
wBS1LmuP5BvNhJMiUag=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:25 2026 by rpki-client