Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200267.roa
File:                     AS200267.roa (raw, json)
Hash identifier:          61nrrvm2gkyB0fNqEHaJr/r1oqXNuo+wMeJhjPaER9o=
Subject key identifier:   50:8B:99:BE:4C:91:76:8E:C9:B1:AE:05:0D:04:C1:1F:C1:0C:47:D5
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       192AEA9AFE9D64C5AB7B5E7C5CC34BEE08260FE1
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200267.roa
Signing time:             Fri 05 Jun 2026 07:12:39 +0000
ROA not before:           Fri 05 Jun 2026 07:07:39 +0000
ROA not after:            Fri 04 Jun 2027 07:12:39 +0000
asID:                     200267
IP address blocks:        2a0a:6040:c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2a:ea:9a:fe:9d:64:c5:ab:7b:5e:7c:5c:c3:4b:ee:08:26:0f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:39 2026 GMT
            Not After : Jun  4 07:12:39 2027 GMT
        Subject: CN=508B99BE4C91768EC9B1AE050D04C11FC10C47D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ef:0f:64:77:80:bb:48:c8:ba:42:fe:3a:0c:
                    fe:65:96:ce:05:67:de:5d:d6:40:91:fa:b6:63:85:
                    3a:28:46:d0:24:37:09:7b:82:77:af:81:67:36:d2:
                    3d:48:0f:5e:f6:41:0b:29:21:e5:06:12:e8:63:8d:
                    b6:46:35:e5:56:0c:f3:6b:65:cb:90:56:75:4a:50:
                    6e:bc:e8:6e:69:96:7d:44:05:9b:31:e7:3a:5c:98:
                    6b:2f:69:52:95:3c:bd:cb:00:8d:24:58:50:e1:59:
                    c9:d8:b3:ed:d4:54:3b:a2:00:42:68:e4:1a:da:7f:
                    19:fc:77:00:f4:85:fc:33:8b:55:e3:6f:5f:0f:c1:
                    40:b8:99:97:a3:e0:32:07:37:88:a8:4f:04:fa:e1:
                    aa:21:30:4b:4b:5a:b6:51:66:7a:f4:cf:ce:70:ca:
                    2d:d8:4e:18:02:e2:d1:55:82:e1:32:f8:de:52:49:
                    67:2a:33:6c:d5:f7:18:8c:ed:20:0b:21:13:e6:c5:
                    d5:dc:75:4f:cc:c4:1c:3f:a1:23:a8:06:9e:b0:be:
                    53:03:0a:44:e8:94:a0:1b:f4:6f:32:b2:64:c7:27:
                    a4:5c:d0:98:9c:c7:c3:4d:c5:19:e5:ce:d9:c8:6a:
                    f2:93:3c:a7:11:9f:f3:eb:da:7d:d9:1f:32:bc:ed:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8B:99:BE:4C:91:76:8E:C9:B1:AE:05:0D:04:C1:1F:C1:0C:47:D5
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:4d:64:be:03:9b:ba:89:7d:a1:0e:11:57:ff:38:a9:b6:f2:
         29:b9:08:ed:12:50:3f:db:de:f4:2c:dc:b4:80:67:35:19:4f:
         6d:bf:84:0c:99:e2:a2:4b:45:fb:f7:36:ec:1a:cb:12:bd:cf:
         10:b2:02:46:ed:29:9f:30:df:f7:9d:35:99:99:ef:fc:35:f6:
         4b:6d:a9:0b:bc:42:da:6c:17:d7:53:4d:c5:31:36:95:f1:31:
         04:48:a1:bc:7d:ec:94:93:72:74:dc:2b:cd:37:2a:ae:16:40:
         b2:3b:a7:db:c3:23:a5:43:dc:aa:20:77:51:9f:d0:c3:8b:d2:
         3c:f1:80:e0:90:69:3d:63:9b:75:46:4a:e1:ee:35:26:0e:47:
         5c:f4:82:84:c5:65:a9:71:ec:00:88:5f:2b:14:54:fe:b5:b9:
         8f:1d:d5:18:d7:dc:d1:c2:41:9d:b2:b2:48:f0:cc:cc:f5:23:
         da:37:e2:88:c6:a4:ea:1e:86:bc:10:5a:ee:7a:40:8d:a2:fe:
         1d:83:b6:18:a3:60:c7:5e:4c:9e:14:3d:19:83:45:e0:79:c1:
         43:ea:77:e4:ce:29:4e:f1:14:d2:c9:40:0b:85:4c:05:ea:44:
         8c:ec:dc:7a:00:b0:9f:df:94:c2:a9:d1:07:11:e3:8e:04:d0:
         8b:f7:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:00 2026 by rpki-client