Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200782.roa
File:                     AS200782.roa (raw, json)
Hash identifier:          CptDHdysWkNcgEdRcPOTC0p5+ugt2xywC5C0yq8+TuU=
Subject key identifier:   48:E4:F7:26:00:CF:2E:0C:6A:EE:1A:E6:E5:4F:C3:B5:73:CB:A6:FE
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       6D306AD02640D3B4C0C678F8AB132236FD79A3CF
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200782.roa
Signing time:             Fri 05 Jun 2026 07:12:19 +0000
ROA not before:           Fri 05 Jun 2026 07:07:19 +0000
ROA not after:            Fri 04 Jun 2027 07:12:19 +0000
asID:                     200782
IP address blocks:        2a0a:6040:ce00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:30:6a:d0:26:40:d3:b4:c0:c6:78:f8:ab:13:22:36:fd:79:a3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:19 2026 GMT
            Not After : Jun  4 07:12:19 2027 GMT
        Subject: CN=48E4F72600CF2E0C6AEE1AE6E54FC3B573CBA6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:5c:34:63:e3:2a:c2:f9:91:d7:d0:65:f7:
                    ca:8c:02:9d:70:52:96:ed:4f:0d:9b:bf:26:cf:52:
                    2c:12:40:4f:ce:1f:00:66:e2:18:b3:79:4f:5e:74:
                    1e:2f:21:1b:c3:f2:16:95:5c:71:e3:11:81:c2:c6:
                    86:52:5a:b2:f3:21:28:23:11:3c:b3:0d:46:7e:84:
                    52:bc:3c:a1:b6:5e:ce:a3:3c:66:6f:ca:2a:89:a1:
                    19:6d:d2:01:fd:55:6a:ba:90:e8:bf:df:6e:d3:dc:
                    99:f7:bd:37:59:b2:58:c9:4a:11:6f:7e:7f:f2:0d:
                    30:a6:50:ff:94:ce:27:f1:3b:7c:38:ea:81:e2:b3:
                    9c:e1:ee:7f:38:56:79:c7:60:c9:62:bf:bd:98:c8:
                    b5:23:ee:84:f6:c9:50:cf:97:61:a6:48:5e:00:b8:
                    21:75:aa:01:4c:c1:8b:30:82:16:db:7c:e6:dd:33:
                    75:70:27:61:25:b7:09:46:73:3f:25:d9:a6:bc:38:
                    1b:6f:14:36:da:0a:61:78:11:16:99:3d:60:83:59:
                    e1:32:a3:c4:ab:17:f4:b2:e5:09:ec:d5:ae:74:18:
                    e5:4b:57:ca:a7:53:ce:33:2a:be:ef:31:29:72:92:
                    d9:64:9a:be:e2:c2:47:f1:1e:8f:1d:cb:f4:af:84:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:F7:26:00:CF:2E:0C:6A:EE:1A:E6:E5:4F:C3:B5:73:CB:A6:FE
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200782.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ce00::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:a2:df:39:19:87:91:c3:55:c4:db:3d:38:1c:25:58:72:
         7a:42:01:28:2e:c4:9c:46:d7:f3:74:c3:9e:22:48:43:af:6b:
         48:e8:5d:80:79:7a:16:1c:57:2a:52:0c:0a:87:a5:e7:8d:76:
         8d:43:9a:4f:5f:35:5b:5c:3d:bb:d8:6a:1a:40:bd:74:8f:2a:
         8e:ff:6e:a5:5d:75:c0:b2:01:7c:a4:66:e3:4b:b7:e4:60:05:
         de:da:1d:0d:9c:20:09:2d:f8:13:2d:33:7d:97:9d:e9:90:27:
         52:6b:da:84:4c:60:5b:86:28:34:b4:c8:c6:97:d8:de:61:2c:
         50:ba:bb:59:47:fb:9c:b6:1d:e3:2d:39:7c:8d:60:21:d6:ab:
         a7:e7:ab:f8:66:82:eb:27:2d:4b:45:e3:99:b1:d9:5e:8f:d6:
         7a:9a:71:e5:14:83:7d:d9:3f:bd:70:b6:b6:41:ab:9c:be:7c:
         b9:7a:14:6c:85:66:a1:e8:50:09:83:8f:aa:59:b7:42:58:2f:
         95:6d:61:07:0d:44:de:ba:65:f3:d8:ba:1f:bb:1e:a3:92:2a:
         c2:bd:b3:7c:22:a1:d1:74:db:92:29:14:52:a6:25:e4:b3:32:
         5e:2f:cd:fc:8f:b7:48:65:c5:a1:71:b4:2c:7c:d2:54:53:53:
         80:b1:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:53 2026 by rpki-client