Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200690.roa
File:                     AS200690.roa (raw, json)
Hash identifier:          p3qvBeAWJ2Hfbms8XXKOBpnloM55X1TrrbToFHayNbU=
Subject key identifier:   52:D2:B5:6A:C4:85:1A:D4:8B:AA:F6:D2:D3:7C:BC:97:7F:77:BD:B5
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       08572C3BB963BE608D15A75A8369817753252D8D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200690.roa
Signing time:             Fri 05 Jun 2026 07:12:16 +0000
ROA not before:           Fri 05 Jun 2026 07:07:16 +0000
ROA not after:            Fri 04 Jun 2027 07:12:16 +0000
asID:                     200690
IP address blocks:        2a0a:6040:a300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:57:2c:3b:b9:63:be:60:8d:15:a7:5a:83:69:81:77:53:25:2d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:16 2026 GMT
            Not After : Jun  4 07:12:16 2027 GMT
        Subject: CN=52D2B56AC4851AD48BAAF6D2D37CBC977F77BDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:8f:5f:87:54:47:51:3c:66:a1:0e:dd:e9:
                    ea:f3:e4:24:1a:47:5f:00:6d:bc:6f:76:62:41:50:
                    df:0e:25:48:4c:fe:43:f4:8a:4f:19:1d:e8:a2:a2:
                    9d:41:0c:91:99:c8:d9:44:d8:9d:27:ed:61:58:02:
                    eb:e5:50:21:16:b8:0d:85:95:aa:f0:9a:0a:cc:04:
                    8e:f8:3b:f3:71:db:80:4e:c7:d4:5f:3e:5d:1a:de:
                    79:6f:12:ba:7b:35:5a:1d:15:3e:fc:65:e3:82:06:
                    65:10:0a:ef:19:f4:a5:73:3e:d3:f5:35:54:96:c7:
                    9a:5d:f0:35:98:72:17:a3:c9:b4:dc:da:f7:74:fe:
                    04:64:f1:7f:d2:1d:38:b8:6c:85:86:ea:32:b2:1d:
                    a8:9b:77:49:10:db:16:b0:fb:42:40:b9:d5:f4:8a:
                    bc:f4:b7:0c:a8:ac:e9:e4:11:dc:21:6c:5e:08:2e:
                    d3:0a:02:54:6e:7f:5c:8e:f3:e9:01:63:d9:a9:33:
                    22:00:9c:e6:12:61:9d:fe:52:bd:69:a6:89:eb:62:
                    fc:4a:e2:70:e5:e2:05:4c:72:23:dd:05:20:72:8b:
                    f6:68:c2:77:57:b0:bf:55:91:42:11:fe:c3:ff:70:
                    46:8f:67:27:ee:53:23:32:62:73:34:99:2c:b6:4d:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D2:B5:6A:C4:85:1A:D4:8B:AA:F6:D2:D3:7C:BC:97:7F:77:BD:B5
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a300::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:dd:5e:3f:6f:f5:8f:99:e6:7e:fa:61:ed:f7:2d:0c:a6:
         da:b9:3e:6d:5b:83:83:9e:70:6d:64:9c:a3:31:7f:2f:57:6a:
         5e:8f:d0:97:a4:dc:04:27:03:5e:ba:72:19:0f:a7:01:df:b1:
         a8:1e:12:35:4b:91:c6:3f:f7:22:28:82:ba:f8:cf:5c:1e:1d:
         79:09:7b:f3:51:90:82:cb:8b:f1:27:c4:a7:81:7f:84:fb:4d:
         59:9c:63:7f:f7:a2:13:14:65:26:d9:9f:be:72:d0:a8:62:f9:
         2b:bb:d5:99:3b:11:0a:5a:8b:be:f6:8e:78:bd:85:4e:3b:54:
         e9:90:34:5b:39:ff:32:17:57:cf:ce:fb:4a:c8:75:7c:91:b2:
         d9:c0:d3:b8:07:8e:4e:5e:9f:3d:52:c4:c4:4f:ea:4f:1d:cb:
         39:c1:e7:3c:2f:7d:3d:f5:e8:b3:a0:bb:9f:09:68:ae:78:b2:
         55:a4:29:28:65:0b:8a:a9:fb:15:d6:8f:23:22:15:c2:f7:27:
         a6:06:7f:43:ab:15:2d:dc:d2:aa:a0:7f:fe:4e:d4:d3:68:d5:
         51:b0:6d:4f:22:c9:c6:ac:61:d1:26:20:71:71:e6:d0:5a:30:
         48:96:9d:60:cb:43:00:41:da:e1:96:c7:bd:70:d1:36:fe:28:
         bb:53:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:07 2026 by rpki-client