Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203868.roa
File:                     AS203868.roa (raw, json)
Hash identifier:          FPElixnuWpiZ++0x4cwnm4nhHkyoWP9hmwCAwVVPCXY=
Subject key identifier:   B9:BA:FA:BC:BF:60:E9:F1:F4:7D:34:E3:4C:11:CA:D9:A0:A7:D2:54
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       4ADD575F8D409EE4578C7974D3D5BC20C2CA3A22
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203868.roa
Signing time:             Fri 05 Jun 2026 07:12:44 +0000
ROA not before:           Fri 05 Jun 2026 07:07:44 +0000
ROA not after:            Fri 04 Jun 2027 07:12:44 +0000
asID:                     203868
IP address blocks:        2a0a:6040:dd00::/40 maxlen: 48
                          2a0a:6040:fb00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:dd:57:5f:8d:40:9e:e4:57:8c:79:74:d3:d5:bc:20:c2:ca:3a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:44 2026 GMT
            Not After : Jun  4 07:12:44 2027 GMT
        Subject: CN=B9BAFABCBF60E9F1F47D34E34C11CAD9A0A7D254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:25:ff:d6:82:32:73:07:05:ca:50:36:72:
                    3b:07:79:26:72:e5:a7:21:4d:33:ab:d1:85:de:c2:
                    f2:f6:61:ae:4e:d9:88:84:06:76:d0:e5:91:f1:46:
                    cb:f7:c2:7e:27:fc:5c:42:58:8e:22:9b:61:98:ac:
                    19:04:c8:29:59:7b:fa:e3:d4:1d:9d:52:4a:e9:bd:
                    1f:75:c5:6c:d0:91:2f:25:f2:d9:6c:80:cd:4d:66:
                    d0:5f:5b:23:b0:6a:78:7f:fe:25:cc:58:e2:79:17:
                    7d:ae:e7:43:55:53:b4:12:c6:81:6e:72:63:c3:95:
                    88:54:7c:7a:03:d8:3b:fc:3c:3b:d7:c8:64:76:d2:
                    07:aa:0a:cc:05:8c:14:46:50:e4:4e:85:c1:0e:71:
                    af:66:36:e2:59:cb:5f:45:f3:73:b1:51:cf:23:48:
                    68:d1:0d:d9:dc:ba:80:5e:a1:c1:c0:12:92:9d:ff:
                    4b:32:eb:0c:20:47:f2:fa:45:46:0c:7f:9d:e6:23:
                    83:ee:dc:e4:88:09:31:e6:38:ed:86:78:04:cd:e2:
                    bf:6b:88:1f:8d:e1:d5:4d:41:25:67:bc:21:f1:58:
                    28:7f:03:bc:da:d2:f6:6d:19:0d:2e:2d:5a:04:45:
                    aa:48:90:5e:86:61:76:12:56:c4:b5:3e:0a:9b:3c:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BA:FA:BC:BF:60:E9:F1:F4:7D:34:E3:4C:11:CA:D9:A0:A7:D2:54
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203868.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:dd00::/40
                  2a0a:6040:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:3e:46:1c:0a:ad:eb:4c:9e:ae:6e:33:e9:fa:0e:2d:4c:09:
         70:47:52:6a:c8:6a:1a:ea:c5:35:4e:f8:4c:3d:78:a1:fe:ae:
         e5:1d:fb:69:26:d4:51:b6:38:0e:49:7c:90:90:bd:21:49:4f:
         d7:82:a6:c2:3c:1f:b0:71:43:b5:18:e2:5a:bf:73:e3:ff:bf:
         30:ab:b4:77:d6:b2:c1:06:d7:2a:ad:54:4e:9b:57:dc:ef:3a:
         15:fe:cd:d2:18:6b:b2:90:53:9e:5e:bc:f0:ca:c3:f4:31:f4:
         35:91:4a:50:1b:66:b1:fd:e6:9f:b0:24:a1:08:bd:77:d3:40:
         64:ae:93:1b:ba:61:3c:1f:0f:a5:fd:86:b9:75:5b:4a:f7:f4:
         f0:f7:b6:42:e5:85:8f:af:24:1c:6c:15:ec:21:fb:0b:2d:ba:
         66:e7:82:b6:ea:76:56:ac:ae:53:f6:04:f9:fe:b5:ee:32:56:
         d9:8a:af:73:cf:6e:99:00:7c:67:f4:d7:51:d4:8f:20:de:49:
         6f:ce:18:eb:0e:e6:d8:07:48:3f:85:cb:44:b0:5c:f6:ab:11:
         56:8d:d7:e0:d0:6a:63:1c:03:17:5d:83:19:5d:f9:83:6a:58:
         bf:d2:70:86:c1:06:4f:3d:87:e8:f4:87:73:3c:e7:f2:4c:b8:
         b4:85:17:9a
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUSt1XX41AnuRXjHl009W8IMLKOiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDRaFw0yNzA2MDQwNzEyNDRaMDMxMTAvBgNV
BAMTKEI5QkFGQUJDQkY2MEU5RjFGNDdEMzRFMzRDMTFDQUQ5QTBBN0QyNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkiX/1oIycwcFylA2cjsHeSZy
5achTTOr0YXewvL2Ya5O2YiEBnbQ5ZHxRsv3wn4n/FxCWI4im2GYrBkEyClZe/rj
1B2dUkrpvR91xWzQkS8l8tlsgM1NZtBfWyOwanh//iXMWOJ5F32u50NVU7QSxoFu
cmPDlYhUfHoD2Dv8PDvXyGR20geqCswFjBRGUOROhcEOca9mNuJZy19F83OxUc8j
SGjRDdncuoBeocHAEpKd/0sy6wwgR/L6RUYMf53mI4Pu3OSICTHmOO2GeATN4r9r
iB+N4dVNQSVnvCHxWCh/A7za0vZtGQ0uLVoERapIkF6GYXYSVsS1PgqbPKbDAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUubr6vL9g6fH0fTTjTBHK2aCn0lQwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAzODY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF
BwEHAQH/BBowGDAWBAIAAjAQAwYAKgpgQN0DBgAqCmBA+zANBgkqhkiG9w0BAQsF
AAOCAQEArj5GHAqt60yerm4z6foOLUwJcEdSashqGurFNU74TD14of6u5R37aSbU
UbY4Dkl8kJC9IUlP14KmwjwfsHFDtRjiWr9z4/+/MKu0d9aywQbXKq1UTptX3O86
Ff7N0hhrspBTnl688MrD9DH0NZFKUBtmsf3mn7AkoQi9d9NAZK6TG7phPB8Ppf2G
uXVbSvf08Pe2QuWFj68kHGwV7CH7Cy26ZueCtup2VqyuU/YE+f617jJW2Yqvc89u
mQB8Z/TXUdSPIN5Jb84Y6w7m2AdIP4XLRLBc9qsRVo3X4NBqYxwDF12DGV35g2pY
v9JwhsEGTz2H6PSHczzn8ky4tIUXmg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:25 2026 by rpki-client