Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200557.roa
File:                     AS200557.roa (raw, json)
Hash identifier:          BYDTPMda+pxyNM9joHadVZx64Pji+U/bmajttylJblw=
Subject key identifier:   14:13:29:3A:B7:2B:6D:3B:23:61:7B:51:A8:31:E7:87:06:41:1D:5F
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       411D3AA63C2753F832B8123A71897D0FC28A9589
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200557.roa
Signing time:             Fri 05 Jun 2026 07:12:36 +0000
ROA not before:           Fri 05 Jun 2026 07:07:36 +0000
ROA not after:            Fri 04 Jun 2027 07:12:36 +0000
asID:                     200557
IP address blocks:        2a0a:6040:1400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:3a:a6:3c:27:53:f8:32:b8:12:3a:71:89:7d:0f:c2:8a:95:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:36 2026 GMT
            Not After : Jun  4 07:12:36 2027 GMT
        Subject: CN=1413293AB72B6D3B23617B51A831E78706411D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:9c:ab:16:f0:a1:4f:d0:fc:ed:36:de:33:
                    fb:74:f6:1a:62:68:2c:48:ac:f5:87:0f:78:84:eb:
                    46:0b:9f:30:b9:d2:0a:51:00:5d:ac:5e:54:68:3e:
                    39:9a:01:2d:1d:d6:74:34:26:9f:4e:06:63:e9:e7:
                    5a:3f:e9:99:74:e9:cc:e8:c7:0b:61:57:bf:cb:ae:
                    ad:c4:45:52:65:60:e0:5e:59:e4:99:86:ba:57:00:
                    dc:c8:a8:d0:1c:74:90:a9:21:34:3d:37:61:5c:c4:
                    d2:7e:40:8f:dd:62:8b:8f:c2:94:cf:88:8c:eb:b3:
                    ad:55:61:e3:32:13:db:fd:90:fd:05:d1:56:70:0b:
                    b7:88:9b:26:68:41:e6:a7:5f:9a:c8:14:31:7e:30:
                    12:32:0a:8a:73:63:9a:e9:70:92:32:40:6a:ee:5b:
                    5a:65:d3:1c:59:e9:56:4f:ff:3d:bc:3c:d5:1f:fd:
                    15:a5:61:ce:28:ae:55:ee:4c:f1:f0:bb:ce:7a:46:
                    68:fc:b6:4b:5b:62:79:42:d9:14:a5:8a:52:fd:87:
                    3a:43:75:2a:e4:fe:ba:01:ca:94:c4:f9:4e:15:a1:
                    24:9c:ed:15:73:8c:88:18:97:ba:e4:fe:50:51:82:
                    ab:c1:45:bb:aa:63:3f:12:ad:81:a7:96:0a:0e:39:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:13:29:3A:B7:2B:6D:3B:23:61:7B:51:A8:31:E7:87:06:41:1D:5F
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200557.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:44:5a:eb:c4:19:91:ab:c3:a0:07:4e:33:3b:2a:19:73:
         56:3d:e2:0b:a0:c5:8b:80:dd:5d:15:39:73:a4:8b:fb:27:c7:
         66:5b:b7:bb:bd:64:74:55:86:9f:20:2e:b9:9f:c9:47:77:2a:
         8a:75:35:70:09:09:c2:c2:ad:95:66:96:57:7c:b9:f3:26:6a:
         ab:2c:a7:2b:0f:2f:84:f7:26:ce:c0:c3:b1:36:eb:75:b6:3f:
         92:2f:e6:1d:2a:07:68:62:39:9a:ee:e9:50:e2:90:45:b2:0e:
         02:1f:17:a9:fe:39:2a:b7:6d:03:83:dc:a5:57:dd:87:4a:b1:
         5c:1d:35:b6:42:9d:cd:fa:db:1c:a1:47:35:67:e5:fe:59:85:
         81:28:fc:a5:4b:00:22:a6:c6:77:28:66:e2:df:77:05:e2:91:
         30:46:fb:7d:94:1a:26:7b:7d:11:03:38:c9:3c:93:a2:31:7f:
         d4:03:85:51:26:a6:c3:58:2b:aa:84:97:75:d2:47:38:6a:9c:
         f5:8c:78:05:e0:33:88:2f:8b:6f:4d:d0:78:86:57:68:d0:de:
         a6:83:15:20:38:f1:52:15:d9:99:04:8a:e7:dc:bd:57:21:e9:
         fe:78:4d:8b:b7:44:e4:66:b1:8f:8d:a7:18:3f:3b:1a:14:f9:
         d1:77:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:04 2026 by rpki-client