Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200728.roa
File:                     AS200728.roa (raw, json)
Hash identifier:          ArL2s0Bt4y+LlrhL+pE8ZDMmF7bffYJwdCElFjIft4w=
Subject key identifier:   1F:EF:2B:76:3D:30:77:ED:EC:B5:0E:48:BF:E6:34:49:49:88:CB:F3
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       5C84EBC315CDCADB18E721539F803C8E13C346BB
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200728.roa
Signing time:             Fri 05 Jun 2026 07:12:45 +0000
ROA not before:           Fri 05 Jun 2026 07:07:45 +0000
ROA not after:            Fri 04 Jun 2027 07:12:45 +0000
asID:                     200728
IP address blocks:        2a0a:6040:7e00::/40 maxlen: 48
                          2a0a:6040:d000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:84:eb:c3:15:cd:ca:db:18:e7:21:53:9f:80:3c:8e:13:c3:46:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:45 2026 GMT
            Not After : Jun  4 07:12:45 2027 GMT
        Subject: CN=1FEF2B763D3077EDECB50E48BFE634494988CBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:13:fc:87:99:3c:02:0f:e9:84:38:1c:16:
                    24:a5:f5:3d:1c:78:f1:85:77:ee:9d:1d:17:3e:1d:
                    b9:f8:f9:68:4e:e2:09:e3:a5:61:32:9c:b1:f5:fe:
                    61:ef:d2:6d:9e:c9:e9:b3:4e:e3:27:f8:76:57:da:
                    4d:34:90:71:2b:eb:38:5f:68:2a:c7:dd:02:63:3d:
                    95:07:56:b8:4f:d5:f2:e0:39:bd:b2:25:8e:a3:0d:
                    70:86:b3:55:9d:fc:1d:6c:e5:98:20:a3:96:bc:19:
                    7a:46:15:fa:c4:f3:ce:d2:dd:51:87:10:88:2d:a2:
                    f8:af:97:56:67:4e:14:57:06:01:a7:34:4e:c4:5e:
                    ae:73:ab:97:5f:79:9b:cc:aa:f9:d5:ab:eb:b6:69:
                    e5:3b:e8:62:1b:36:5c:15:f1:86:ed:b3:79:e7:29:
                    df:f3:64:fb:d5:5d:67:56:42:3d:ef:71:f3:e2:58:
                    82:83:0e:18:26:dd:e7:16:cd:1f:8e:df:a3:8b:d0:
                    5c:4f:d0:76:80:43:87:ad:e7:a0:1c:2d:29:2c:a2:
                    a5:30:cc:14:a2:ef:2f:6c:da:4f:d9:30:68:77:d0:
                    5d:2f:ba:f0:c6:0c:51:e8:8f:9e:43:7d:2d:3c:9d:
                    b7:2f:90:00:7a:f8:af:bd:c2:0b:20:a9:1c:2c:4e:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EF:2B:76:3D:30:77:ED:EC:B5:0E:48:BF:E6:34:49:49:88:CB:F3
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200728.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7e00::/40
                  2a0a:6040:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:f7:e1:be:36:69:49:eb:8f:28:1a:6b:93:61:2f:18:ab:
         f4:a5:40:99:18:fd:f1:25:80:7d:62:0d:1b:aa:69:1a:df:a7:
         3e:80:ca:48:c3:d6:4f:90:cf:63:9b:2a:82:d1:4f:77:c1:f7:
         dd:8b:cf:99:b5:a3:57:5b:84:a2:b6:84:18:2f:8a:9f:3e:6c:
         0f:db:0c:d6:f7:93:b3:3f:06:40:c4:5b:84:39:3b:1b:99:63:
         91:cc:5d:1f:f3:e7:8c:10:53:a5:77:88:b9:17:08:20:d2:35:
         d6:a1:f2:85:81:6d:5c:3a:85:65:58:ca:ac:c8:01:da:99:5e:
         cb:6e:15:d8:c1:77:01:10:ed:22:49:15:99:eb:f3:5f:95:08:
         5b:60:6e:41:98:6b:22:cf:6e:81:55:d9:d3:9e:7c:88:06:b2:
         a0:a6:2c:a5:22:0d:0c:12:ac:5e:a0:b8:71:ad:99:6b:a0:a4:
         28:6b:6d:17:c6:74:a9:91:c2:6d:79:cc:de:dd:86:f9:a6:1c:
         21:f9:ae:5e:ad:3f:d6:b4:64:08:54:51:f7:90:67:d1:0e:e9:
         7e:ba:92:fe:d7:f7:f1:6a:37:15:1b:19:43:b7:98:a9:6e:d3:
         9f:30:b9:8a:e5:e3:66:8d:d3:0a:7a:cf:4d:7c:ad:fb:42:38:
         6c:78:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:14 2026 by rpki-client