Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206016.roa
File:                     AS206016.roa (raw, json)
Hash identifier:          Ne1LrGCRwNTs2HXGc6bpG01o50uZSmCuekOCGMSFiJU=
Subject key identifier:   E3:32:9D:44:44:0C:B5:95:5D:59:D0:1F:AE:80:0C:2C:54:A1:4C:AB
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       275E4B178C28B5CA9F9C168AD965F416E9D9B433
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206016.roa
Signing time:             Fri 05 Jun 2026 07:12:43 +0000
ROA not before:           Fri 05 Jun 2026 07:07:43 +0000
ROA not after:            Fri 04 Jun 2027 07:12:43 +0000
asID:                     206016
IP address blocks:        2a0a:6040:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5e:4b:17:8c:28:b5:ca:9f:9c:16:8a:d9:65:f4:16:e9:d9:b4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:43 2026 GMT
            Not After : Jun  4 07:12:43 2027 GMT
        Subject: CN=E3329D44440CB5955D59D01FAE800C2C54A14CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:0b:1f:e5:fb:6e:2a:6b:10:0a:7a:2b:c7:
                    18:5c:f5:cf:7b:d1:94:44:a7:e2:0f:c8:ba:68:40:
                    72:31:61:0f:92:30:ee:35:b9:c0:20:78:25:f8:10:
                    15:77:c6:64:11:44:99:a5:1d:6a:4e:51:93:ec:1e:
                    eb:d0:c0:79:19:1d:0d:90:30:37:36:a2:be:fc:af:
                    54:eb:d2:df:e9:d8:68:3a:6b:1b:6d:2d:52:e6:8e:
                    66:8a:e1:ed:34:d2:1a:dc:cc:b3:a7:f4:c4:a2:c2:
                    7b:bb:76:68:65:03:6e:a1:a6:39:23:bf:db:18:c3:
                    90:fe:e4:22:b8:ef:4c:e6:9d:5e:63:4a:5b:b3:3d:
                    03:6e:9e:05:d6:fa:bc:7f:1b:95:df:0f:af:a9:a0:
                    38:1f:37:d0:98:c3:ff:d5:f2:a7:0f:f3:78:37:c6:
                    d3:d9:3d:8c:3e:1b:5b:bb:9c:00:6f:9c:6b:75:18:
                    88:9b:c5:42:d7:e8:e7:3f:47:c0:49:14:88:e1:02:
                    1c:68:6d:e1:0b:c9:d0:bf:f0:20:ce:3e:27:c2:a3:
                    c5:5c:7c:38:e8:1c:d1:a9:79:bb:10:78:fd:60:73:
                    e9:24:d3:ab:7d:5c:96:0a:a7:5c:7e:cf:dd:26:e8:
                    22:c0:00:e0:83:e7:13:bc:66:58:b2:c0:1d:00:93:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:32:9D:44:44:0C:B5:95:5D:59:D0:1F:AE:80:0C:2C:54:A1:4C:AB
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:20:ae:5b:26:45:92:c5:bc:f3:7a:73:4c:6f:0b:23:ed:c3:
         ee:63:d6:17:bb:f2:4f:6f:d1:54:c4:fd:a2:0c:95:a3:44:f5:
         91:a9:56:37:80:41:d9:3e:1e:79:a4:92:a6:20:e0:23:95:18:
         2e:fa:bf:3d:ba:99:3d:42:3e:60:30:62:40:e5:62:47:a0:28:
         88:1d:bd:27:48:9c:1a:5b:05:98:57:01:d7:06:e3:90:1a:05:
         98:68:e6:e6:f1:21:85:13:44:ef:a5:ff:80:85:90:08:29:e1:
         4c:65:65:26:ff:f3:05:45:f8:b4:22:e4:6c:7f:fa:18:ba:5d:
         85:89:f7:bb:5a:21:c7:46:99:9e:de:09:24:9f:50:86:7e:0a:
         7a:4b:c9:d0:93:a0:92:ea:ac:b9:95:a2:28:2a:3e:34:fd:96:
         39:58:e7:8a:41:7d:40:55:57:2d:fd:46:44:ed:60:fb:46:63:
         d6:04:19:06:72:a3:cf:c5:07:1c:86:0b:26:f4:48:81:c3:65:
         11:ab:f8:6b:18:38:d5:d6:15:76:3c:e6:6d:29:65:89:0f:2b:
         b4:21:e5:bb:53:53:43:66:19:a4:ea:49:63:fd:e2:92:f0:57:
         d6:17:8a:30:d3:80:47:ce:e5:64:e5:c3:77:6b:13:4a:fb:ab:
         55:8f:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:10 2026 by rpki-client