Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200556.roa
File:                     AS200556.roa (raw, json)
Hash identifier:          L8h+bWBRDQl+dFJKzRGzf1Siy7Bkdljg+WezIRI7EHw=
Subject key identifier:   25:D8:84:20:98:46:77:31:15:00:6C:8A:CF:C3:12:53:A5:35:35:3D
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       63286A13ADDEBD0A12523E7EB073B9793E688771
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200556.roa
Signing time:             Fri 05 Jun 2026 07:12:17 +0000
ROA not before:           Fri 05 Jun 2026 07:07:17 +0000
ROA not after:            Fri 04 Jun 2027 07:12:17 +0000
asID:                     200556
IP address blocks:        2a0a:6040:1600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:28:6a:13:ad:de:bd:0a:12:52:3e:7e:b0:73:b9:79:3e:68:87:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:17 2026 GMT
            Not After : Jun  4 07:12:17 2027 GMT
        Subject: CN=25D884209846773115006C8ACFC31253A535353D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:9f:46:5a:64:36:00:8d:09:d6:5e:0c:a6:
                    75:5d:f1:3d:3f:41:b1:57:d6:79:ec:0a:41:92:64:
                    8e:2c:52:b6:dc:a9:47:fd:e0:b9:e0:12:aa:64:ce:
                    15:22:2e:9f:f9:2d:91:cf:f9:52:5e:05:c1:b3:3c:
                    56:ff:b0:e7:86:ed:18:46:e6:c9:95:e1:f3:47:f4:
                    6e:55:de:27:f1:db:bd:57:9a:13:03:74:fa:9d:71:
                    1f:9b:9e:2e:5b:5d:bc:bd:6c:c9:5c:e7:2a:42:df:
                    a3:19:6e:48:12:5f:5b:6a:da:37:45:0b:67:fb:29:
                    84:0c:70:c7:16:1b:c0:a9:5c:77:77:ac:1c:1b:bf:
                    8a:f7:76:04:0a:5c:5c:be:74:d2:37:a9:bf:f9:33:
                    0a:09:a6:c2:5a:e2:98:e7:c4:53:b0:a3:23:a2:c0:
                    0e:14:d8:91:da:80:7b:ee:7a:d0:f6:42:84:e7:94:
                    85:50:53:13:16:3a:65:cf:02:e0:f7:a1:fc:b4:2b:
                    13:41:57:c0:d7:47:63:79:b2:b6:87:86:82:4e:13:
                    f0:61:20:98:61:d1:2a:d3:0f:1f:59:a2:ec:a1:4e:
                    9b:5b:fd:d2:f4:46:f5:b5:24:95:bb:f8:d4:6d:0d:
                    17:c6:fa:f4:54:f7:8f:3b:89:d4:df:ca:6b:a7:54:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D8:84:20:98:46:77:31:15:00:6C:8A:CF:C3:12:53:A5:35:35:3D
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200556.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:7a:ff:49:d8:a8:ee:0a:96:cb:05:99:2c:58:43:86:2d:94:
         53:b4:d0:61:c9:ac:0f:dd:58:f6:04:cf:7a:dc:0f:ff:b4:b0:
         a3:e5:8e:b7:e3:ea:85:97:0f:d2:d1:a6:01:c7:e0:3e:55:7b:
         34:83:b2:9f:a8:f2:26:01:1c:8b:b0:0e:17:72:26:e6:2a:65:
         38:22:d9:26:c6:22:b1:bc:b8:e3:aa:4d:7e:e2:6e:90:3e:e9:
         43:62:b2:94:2d:0a:95:5f:71:f0:c7:cd:a8:da:18:cc:26:ef:
         41:71:33:92:f9:06:9e:67:46:25:5b:a3:7d:27:d6:58:65:48:
         b0:b8:59:93:6f:9b:ef:6b:ce:33:63:90:d3:64:a9:7c:d0:25:
         24:6f:6a:4f:30:39:2a:b3:f7:42:b3:22:b1:9a:db:cd:73:aa:
         64:21:18:d3:e9:fa:6b:69:eb:95:af:71:69:61:54:98:61:5f:
         ab:31:d1:0c:a3:f2:6e:63:2a:09:92:08:69:67:32:77:6b:ba:
         c3:7f:45:81:1a:a8:75:e2:e1:01:03:c9:66:47:97:a9:08:3d:
         fa:98:4e:12:99:76:30:d8:11:e9:6f:2d:80:2e:55:2a:1a:53:
         9b:ac:bd:a2:05:60:54:81:ac:b8:5b:51:21:fd:83:c6:8a:43:
         48:ec:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:01 2026 by rpki-client