Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200766.roa
File:                     AS200766.roa (raw, json)
Hash identifier:          3K/SVGyMOhZpShoyw58QRi+lnJ6W0iXypUmrQQaphss=
Subject key identifier:   53:EB:43:AE:1B:B4:1C:C2:9B:A5:E8:21:C3:8C:2B:69:F9:DF:42:33
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       1EB8BD381675E23C9F35DE34B1AC5CBC755222C7
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200766.roa
Signing time:             Fri 05 Jun 2026 07:12:36 +0000
ROA not before:           Fri 05 Jun 2026 07:07:36 +0000
ROA not after:            Fri 04 Jun 2027 07:12:36 +0000
asID:                     200766
IP address blocks:        2a0a:6040:c100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b8:bd:38:16:75:e2:3c:9f:35:de:34:b1:ac:5c:bc:75:52:22:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:36 2026 GMT
            Not After : Jun  4 07:12:36 2027 GMT
        Subject: CN=53EB43AE1BB41CC29BA5E821C38C2B69F9DF4233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:29:02:1c:ae:bf:84:2b:2b:eb:a4:ba:8a:89:
                    06:0f:77:50:e3:a4:f3:36:45:3f:b2:2b:31:7f:4c:
                    fb:fa:16:12:df:b7:4a:5a:09:c5:bb:15:0f:0b:41:
                    0c:8e:3c:a4:b7:94:91:14:d4:a2:0e:51:fc:de:50:
                    b8:ef:b0:84:e0:0c:e1:71:cd:4b:f7:dd:c6:1e:d0:
                    8c:b0:20:6a:3f:fe:57:2e:3f:a7:df:46:04:87:d9:
                    bb:e5:7b:3a:e0:2a:db:74:03:5c:7f:a8:f6:d8:0e:
                    10:c8:ae:80:69:16:f1:97:a2:b1:1f:ef:7c:de:03:
                    f6:da:7e:70:8f:12:57:53:ee:9b:db:53:c3:f4:75:
                    bc:94:1f:fa:4b:c7:ee:a8:15:bc:25:23:64:fe:72:
                    a0:82:55:b3:a2:a8:a1:f4:a9:6a:66:d3:61:6d:f7:
                    ff:c1:08:c3:16:22:59:08:74:e1:64:70:0f:4d:0b:
                    a5:20:c8:01:fa:58:7b:ed:37:91:56:2d:46:01:06:
                    e3:db:ec:bc:65:6d:df:0a:36:d6:ee:4f:b2:0a:31:
                    c1:68:9f:49:e5:8d:db:df:5d:f8:b5:62:82:cd:cd:
                    e5:8d:da:f5:b2:69:b1:be:3d:30:e2:26:45:a8:1f:
                    41:d8:c4:23:69:cb:19:30:95:59:7e:14:8a:84:50:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EB:43:AE:1B:B4:1C:C2:9B:A5:E8:21:C3:8C:2B:69:F9:DF:42:33
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200766.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:b2:5a:c0:f0:c1:c8:6f:db:02:de:ff:b9:2c:ef:91:9b:
         51:a6:60:0c:d0:83:52:1a:5a:d8:e3:6b:e6:37:45:c2:76:de:
         b1:32:58:c0:37:5a:80:cf:06:d8:d0:5c:50:45:df:1e:b2:d2:
         09:b4:a6:0e:f1:e4:4c:7f:12:cc:55:00:38:b8:b5:4a:04:ab:
         ef:23:7b:bd:fd:ef:9a:78:0e:c7:5b:58:32:b0:13:ad:8c:86:
         28:6a:8a:4a:9f:3b:b3:89:f1:6d:49:c3:73:81:ad:b7:75:ed:
         b3:77:7f:7a:9e:3d:cd:d3:18:49:b2:a3:f0:86:8b:49:99:19:
         5d:5b:4e:26:d3:5e:d0:ab:0e:e3:d9:f3:d5:d4:75:21:0f:13:
         ce:37:30:6d:69:8f:1e:fb:e6:a6:5a:6d:35:4a:7b:43:97:59:
         93:e8:de:fd:67:b9:ac:36:08:49:c8:50:b1:20:5a:f8:ff:bd:
         cf:fb:43:83:18:fe:87:d2:6e:05:7f:c2:39:92:7b:a5:be:d2:
         8d:04:6c:9c:0c:37:18:e3:ca:17:ee:32:24:cf:52:b5:c1:53:
         d5:ae:c4:58:db:53:c7:d7:c3:34:5f:5c:3e:bf:2e:d6:75:dc:
         92:42:c2:d5:d5:c3:55:a9:32:40:d9:a7:f3:78:48:7f:15:35:
         01:fd:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:16 2026 by rpki-client