Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200959.roa
File:                     AS200959.roa (raw, json)
Hash identifier:          RB2mxx/H8awzZXTP9PN5Aok8TMz061Dadolb/TaACdE=
Subject key identifier:   5D:B8:27:90:30:D2:EC:99:9F:E3:E1:43:4A:74:FE:53:21:E8:AB:0E
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       09702C8AA026AA298B41400342DAF92B9CE796F9
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200959.roa
Signing time:             Fri 05 Jun 2026 07:12:34 +0000
ROA not before:           Fri 05 Jun 2026 07:07:34 +0000
ROA not after:            Fri 04 Jun 2027 07:12:34 +0000
asID:                     200959
IP address blocks:        2a0a:6040:6c00::/40 maxlen: 48
                          2a0a:6040:e500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:70:2c:8a:a0:26:aa:29:8b:41:40:03:42:da:f9:2b:9c:e7:96:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:34 2026 GMT
            Not After : Jun  4 07:12:34 2027 GMT
        Subject: CN=5DB8279030D2EC999FE3E1434A74FE5321E8AB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:f1:b7:aa:28:b2:44:4f:28:89:fa:17:9d:
                    f6:7d:b3:dc:6b:8a:29:54:33:af:bf:a7:38:e6:64:
                    31:7e:fe:e6:bd:68:38:d5:e4:55:79:a8:82:60:82:
                    0c:e9:24:6b:0c:22:2f:4d:6e:fb:a2:0f:6f:e6:8b:
                    ff:36:91:39:50:90:80:57:d0:d8:68:21:53:ec:cc:
                    4a:96:fe:21:53:56:25:e3:2e:cd:bb:6b:40:d2:de:
                    2c:1d:fb:d0:5b:ce:10:fd:89:1f:74:66:53:fd:fc:
                    20:0f:e5:9d:dc:b8:65:86:c5:57:d8:7c:0d:a7:31:
                    33:74:55:8a:c5:c1:de:4b:4a:ad:31:00:dd:aa:95:
                    b6:80:fa:13:0e:7b:d3:f7:2a:f3:8f:ae:f6:9c:8f:
                    15:19:00:51:21:23:11:2e:f2:55:78:53:80:47:33:
                    c0:fa:34:f3:f4:50:af:23:48:76:1e:22:da:c6:f0:
                    8f:44:e7:a3:69:ef:25:fe:c8:ae:d6:25:f9:9a:7f:
                    39:36:07:54:3c:16:84:82:09:7f:70:0f:6c:83:93:
                    3f:80:13:7b:b2:78:d4:65:d3:cc:17:02:53:bb:2b:
                    c8:83:85:8c:2e:7f:3f:9f:cc:9f:4b:76:39:64:b5:
                    c1:7e:77:f3:3e:86:f8:42:1a:21:4a:a3:57:55:2e:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B8:27:90:30:D2:EC:99:9F:E3:E1:43:4A:74:FE:53:21:E8:AB:0E
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200959.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6c00::/40
                  2a0a:6040:e500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:01:18:38:4b:52:75:6f:ea:5a:8f:a7:21:89:dc:98:d9:
         ab:30:1f:e7:bf:c3:f3:91:d9:a1:13:62:28:f8:5e:11:0f:ee:
         02:69:43:30:9e:c3:d8:85:eb:a1:e7:ba:35:30:f7:29:85:be:
         11:08:16:cf:34:07:7f:e7:e6:5e:9f:70:3b:f6:8a:de:6c:c7:
         7b:c8:2a:1a:a5:50:7f:94:2d:a6:c8:30:0b:eb:7a:fb:40:2f:
         38:7e:8f:fa:06:49:9a:8d:e3:59:9f:4e:bb:9d:e2:ed:5e:4a:
         75:22:c5:4a:8d:c5:f4:a8:e4:87:b9:78:1b:07:38:f6:0d:c8:
         b3:31:fd:94:be:07:be:8c:97:75:aa:0d:14:41:c7:a5:40:c1:
         4d:b2:0b:65:34:61:04:df:c0:5c:bd:d3:47:11:45:e6:ef:20:
         78:7d:24:17:7e:bc:8e:59:98:89:60:f9:d2:78:33:f9:c1:65:
         16:9e:f7:77:47:b3:7d:14:05:74:1f:5b:b7:97:68:07:0a:9c:
         bb:88:1e:ba:95:d1:ab:d4:59:2b:57:3f:a0:36:d6:47:0f:17:
         6d:cf:cc:c5:52:ab:4e:6f:c4:1b:e8:74:96:e7:c4:a3:18:b7:
         ce:30:9f:ed:39:a5:ce:38:8d:53:c5:7b:24:e7:99:f6:bd:d1:
         a9:13:54:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:26 2026 by rpki-client