Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200809.roa
File:                     AS200809.roa (raw, json)
Hash identifier:          Y/K/XoQk6+49McujQJgP4n0ES+o48hKIxkxfbJvFCT8=
Subject key identifier:   26:9A:22:F1:16:69:94:5E:AA:E2:07:4E:92:A9:6F:72:E0:D7:AD:89
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       1F073F6BEF0D6254176D056E6D5EEA165DA0D5B2
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200809.roa
Signing time:             Fri 05 Jun 2026 07:12:11 +0000
ROA not before:           Fri 05 Jun 2026 07:07:11 +0000
ROA not after:            Fri 04 Jun 2027 07:12:11 +0000
asID:                     200809
IP address blocks:        2a0a:6040:2200::/40 maxlen: 48
                          2a0a:6040:2300::/40 maxlen: 48
                          2a0a:6040:6600::/40 maxlen: 48
                          2a0a:6040:8800::/40 maxlen: 48
                          2a0a:6040:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:07:3f:6b:ef:0d:62:54:17:6d:05:6e:6d:5e:ea:16:5d:a0:d5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:11 2026 GMT
            Not After : Jun  4 07:12:11 2027 GMT
        Subject: CN=269A22F11669945EAAE2074E92A96F72E0D7AD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:dc:64:17:b9:af:71:aa:fb:ee:8d:b9:ff:
                    cc:75:60:4d:48:f8:8e:d0:47:b3:a2:1b:46:6e:8a:
                    df:b6:26:01:f0:3f:ec:15:c8:a5:9a:b4:a1:69:6f:
                    2d:af:e5:e4:d1:6c:80:54:2a:1d:cb:41:44:54:c3:
                    fc:70:d3:d2:89:bb:56:5b:1d:10:e6:73:b9:23:dc:
                    7b:79:b6:8c:22:5a:62:41:93:b7:09:c3:79:c4:26:
                    53:f5:18:68:ab:07:91:03:4a:30:39:b6:d3:84:65:
                    aa:fe:a3:20:9b:fc:84:1d:0b:d7:d4:ca:52:e0:94:
                    8e:7c:6d:f5:02:b7:51:e4:4c:2e:3b:31:b6:37:25:
                    e8:b8:e8:58:c0:f0:2f:dd:39:b1:03:d4:62:06:40:
                    34:d0:e1:55:14:65:05:09:ae:a5:e3:a0:f9:62:d6:
                    e4:7d:8b:ea:d1:b7:34:73:6b:21:4c:a2:96:c4:01:
                    7c:a4:6e:bb:4c:8e:f9:36:47:ce:bd:65:1a:e7:d4:
                    15:8f:34:b2:a0:e1:cb:69:3e:41:4a:92:0e:30:c6:
                    d5:7a:94:e7:cc:ec:c4:82:00:4d:f3:6e:b7:b7:1a:
                    25:bb:cd:2d:ba:de:61:4c:ac:87:ba:7b:59:d2:5a:
                    a8:de:2e:6d:62:89:63:26:09:72:22:0b:e8:35:85:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:22:F1:16:69:94:5E:AA:E2:07:4E:92:A9:6F:72:E0:D7:AD:89
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2200::/39
                  2a0a:6040:6600::/40
                  2a0a:6040:8800::/40
                  2a0a:6040:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:f8:fe:ea:16:e8:3c:14:5e:cb:91:1a:2a:e7:24:92:a0:58:
         c4:bc:79:0c:6f:db:52:f6:2b:bf:56:8c:25:ea:f9:80:6c:b4:
         3e:66:82:bc:b7:d9:eb:4b:f8:0d:be:8b:98:0d:fa:a7:96:93:
         0a:98:16:22:49:df:1e:69:24:b0:4a:e7:02:07:1d:c2:b9:2e:
         1c:6e:0e:6e:6c:d3:39:e5:3c:03:f2:77:68:fc:67:fb:3d:76:
         72:5e:f9:a8:96:6e:e3:86:90:67:ab:d0:0b:e1:7d:9e:f1:79:
         c1:03:19:4d:c8:0f:93:e8:c6:40:5f:4a:d3:25:44:3a:f5:85:
         4b:2b:05:a8:fa:6b:d5:4d:c1:c5:a3:4c:a7:a4:72:29:7a:00:
         9b:18:be:a3:bf:b5:8c:e3:bf:e1:4e:e2:c0:e0:db:fe:27:bc:
         6d:0a:01:8d:25:46:a3:e2:78:50:d3:2f:b4:ce:77:fe:b2:bf:
         33:1a:fc:11:89:09:f0:c1:ac:e0:f7:23:88:0b:35:7d:71:d3:
         2b:20:04:00:f9:52:15:80:c0:15:58:51:81:42:2b:4c:19:fa:
         69:ac:18:56:49:e9:8e:76:03:e6:28:ad:76:6c:2f:35:0b:e6:
         0b:16:57:00:e5:0a:37:d4:41:b2:1c:d3:2d:14:ab:8e:66:e6:
         e1:ab:1d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:11 2026 by rpki-client