Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200581.roa
File:                     AS200581.roa (raw, json)
Hash identifier:          tbo84buB6A7TXVwnexI5/i95IGJqGbvS03G2GIoj6/Q=
Subject key identifier:   4B:32:D6:A1:CC:F8:75:99:5A:31:16:B9:5B:C3:61:AC:86:4B:1D:4D
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       2B477F5D247A24412D76A6264C6E512171D51F56
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200581.roa
Signing time:             Fri 05 Jun 2026 07:12:19 +0000
ROA not before:           Fri 05 Jun 2026 07:07:19 +0000
ROA not after:            Fri 04 Jun 2027 07:12:19 +0000
asID:                     200581
IP address blocks:        2a0a:6040:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:47:7f:5d:24:7a:24:41:2d:76:a6:26:4c:6e:51:21:71:d5:1f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:19 2026 GMT
            Not After : Jun  4 07:12:19 2027 GMT
        Subject: CN=4B32D6A1CCF875995A3116B95BC361AC864B1D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:32:60:62:5c:f5:c0:f5:a4:3c:0e:51:17:
                    93:67:fa:76:0c:2b:29:70:95:4d:f2:49:79:7b:55:
                    bc:14:35:c5:a8:b9:f8:58:93:41:30:2a:a7:78:6c:
                    4f:3d:8a:8a:70:dc:45:48:21:22:b5:84:b7:e1:7c:
                    2f:c8:6e:c8:09:5b:44:46:69:00:d7:59:16:29:a0:
                    cb:e9:53:82:2b:c2:d1:93:a3:d2:fe:01:3b:ef:74:
                    f3:3e:11:32:25:f9:5b:cd:d0:2d:3b:c3:8e:0f:db:
                    88:8f:c8:e8:e7:78:a8:d5:d1:a7:79:c3:b3:50:33:
                    26:2c:7f:08:4d:c9:87:fc:09:71:26:06:2a:39:ed:
                    41:3e:7e:f9:98:a9:a4:f4:bd:08:6c:c6:f7:17:7b:
                    b6:f9:d9:ef:a0:e3:df:4e:6b:55:1d:f5:2d:c2:6f:
                    11:64:b4:7a:36:8a:c3:24:97:5e:7b:a7:f9:67:06:
                    2a:e3:34:1f:51:f6:ba:a6:6e:a9:13:34:c2:76:20:
                    a1:7a:91:50:91:9f:9e:9b:b9:31:3e:2b:cf:d6:eb:
                    a6:b7:a4:a9:43:50:c0:fa:ef:52:01:1b:7d:3d:36:
                    e8:9f:3d:7e:9d:5a:8e:6f:dc:c5:f1:7c:ca:81:ae:
                    a4:83:8b:ac:be:89:5d:d3:b3:2f:17:c3:fb:b9:f7:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:32:D6:A1:CC:F8:75:99:5A:31:16:B9:5B:C3:61:AC:86:4B:1D:4D
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:9f:bd:f8:5c:2b:3b:49:34:47:8f:43:a9:06:e5:74:13:db:
         b3:e0:78:07:62:a9:77:53:89:5f:5b:08:e5:48:46:a5:72:ba:
         ad:0c:22:04:14:99:1d:64:11:5e:c4:c6:39:9c:04:95:a5:7a:
         51:66:b5:aa:3b:2e:01:ca:4d:4f:da:f7:77:00:43:73:d5:e2:
         e8:a0:a2:27:5a:d6:27:7c:d9:4f:e8:28:d8:3c:9a:f9:eb:0d:
         89:f7:76:f6:57:08:34:e6:aa:cc:9e:c4:a8:56:46:29:b7:e8:
         30:90:84:76:00:08:19:43:bf:0d:e0:74:9c:9a:99:68:7e:3f:
         12:ec:91:aa:09:29:75:90:56:c3:08:51:f5:43:22:da:63:a7:
         b6:94:cc:13:4b:8b:61:3d:4f:a3:1a:a6:d8:29:2b:ed:9c:7e:
         2c:80:a4:b7:55:c8:1d:95:e4:81:2f:d6:12:99:ec:2b:9a:02:
         eb:f5:97:de:45:e3:7a:57:3c:b4:7a:51:1c:d2:a2:39:2a:7a:
         3c:bd:e9:89:cb:6f:94:96:dd:97:00:f9:62:6c:73:ce:37:f9:
         35:21:92:56:76:30:66:f8:4f:82:39:d1:1b:15:ba:8c:83:d8:
         8c:27:47:3d:df:97:28:6a:02:51:2d:0d:1e:23:57:55:07:95:
         41:25:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:08 2026 by rpki-client