Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS205183.roa
File:                     AS205183.roa (raw, json)
Hash identifier:          7RJK3nhAE2qwgi3CZvkSWWa4CaRmPGGeGzWm6CrU+g0=
Subject key identifier:   B9:EB:DC:68:01:33:CC:D8:55:20:0E:58:88:FD:F1:F8:90:C4:1C:85
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       5E6A724EF8D3D5DEC64637491F29BBF576CE251F
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS205183.roa
Signing time:             Fri 05 Jun 2026 07:12:48 +0000
ROA not before:           Fri 05 Jun 2026 07:07:48 +0000
ROA not after:            Fri 04 Jun 2027 07:12:48 +0000
asID:                     205183
IP address blocks:        2a0a:6040:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6a:72:4e:f8:d3:d5:de:c6:46:37:49:1f:29:bb:f5:76:ce:25:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:48 2026 GMT
            Not After : Jun  4 07:12:48 2027 GMT
        Subject: CN=B9EBDC680133CCD855200E5888FDF1F890C41C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:cb:88:fa:09:d8:3c:f8:77:11:98:2a:4c:
                    35:e2:09:7c:84:1f:f7:c7:c7:99:9f:42:72:81:b0:
                    11:c7:53:81:d9:61:e0:11:41:c8:e3:e4:f8:7c:df:
                    7e:f6:dd:71:92:33:43:b9:27:2e:d0:0f:46:f3:22:
                    43:f1:76:c6:e7:80:3e:a0:85:fa:c3:d7:59:86:23:
                    61:48:30:cd:d5:75:fa:a6:47:ff:79:f8:58:e5:8c:
                    52:88:cf:bf:82:6c:e3:9f:70:b1:56:e3:1b:0c:44:
                    b7:f9:e3:21:42:a8:9f:4e:2f:fd:b6:5f:10:60:47:
                    fa:5e:dd:05:75:28:dd:8c:f3:3e:9a:09:fa:ba:89:
                    c7:29:0d:4f:9d:2a:d8:b9:c2:2d:38:21:1d:64:12:
                    33:d3:1e:a8:d2:c6:95:51:a0:19:fa:9e:b4:09:e2:
                    65:1f:26:53:cc:d2:71:f3:c6:e3:3a:af:6c:3b:ef:
                    5d:e4:17:a9:32:b4:cc:6f:e3:3c:12:39:3f:b4:a0:
                    0c:dd:75:7c:e2:d9:87:b8:09:98:7a:30:62:39:b3:
                    2c:d4:d3:4b:0f:b1:cf:ce:f1:75:c5:3c:4a:8d:05:
                    76:62:da:b8:e3:84:51:ba:80:a3:04:db:ee:a7:c2:
                    69:e3:c0:78:a9:b3:22:c3:22:08:52:95:a2:ec:f1:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EB:DC:68:01:33:CC:D8:55:20:0E:58:88:FD:F1:F8:90:C4:1C:85
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS205183.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         e2:92:2c:e0:2a:8e:cc:1d:e1:0e:7d:ef:ae:5e:b5:1a:f0:f6:
         72:c6:81:09:54:12:59:cb:d9:e3:f0:6a:7c:a5:b3:54:1a:c8:
         81:12:67:7d:ed:fc:f3:2d:88:42:ad:d0:df:27:03:36:62:f5:
         f1:59:77:53:95:70:c2:56:a5:d2:26:37:1f:e0:93:72:2e:04:
         dd:63:5f:6a:a7:49:79:f8:81:f2:70:92:b2:d5:fb:6f:65:1f:
         77:73:ee:dc:00:fc:fa:98:4a:bb:cd:e1:3b:d2:61:05:36:79:
         54:91:67:33:77:ff:a9:ba:76:66:d4:94:1a:e3:07:1a:d3:34:
         44:56:c5:a7:e2:41:4e:8d:59:2b:49:c3:61:2f:e0:87:ac:2f:
         0d:8e:4b:74:bb:cd:88:ef:25:9c:29:cc:e3:e7:76:e8:2b:ce:
         be:5d:d1:9f:ef:13:84:5b:36:21:76:5e:16:c1:3f:10:25:45:
         8f:e1:db:1a:94:4e:5d:57:e1:ff:13:5c:2c:5a:e6:97:bc:94:
         86:9b:03:2b:b5:da:7a:06:b1:c5:b5:f9:6d:a7:39:42:1b:cd:
         6a:ba:ed:a3:43:2a:94:3d:44:6c:b7:a6:c3:c3:f3:30:e9:d6:
         b0:b2:22:fa:6c:05:4e:5d:cc:bf:64:cc:3f:82:8e:51:87:a3:
         fd:fa:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:24 2026 by rpki-client