Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211562.roa
File:                     AS211562.roa (raw, json)
Hash identifier:          sWBGZ6wlsePqj0tyhXTYpb4dbB2CgCwUxHU2rQ+J3kw=
Subject key identifier:   80:01:42:41:B7:B7:1D:D5:D4:6C:0A:8F:79:B9:6D:52:3E:79:09:84
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       2A24396C5E38104CE6D6424EFEB173A61D54C502
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211562.roa
Signing time:             Fri 05 Jun 2026 07:12:33 +0000
ROA not before:           Fri 05 Jun 2026 07:07:33 +0000
ROA not after:            Fri 04 Jun 2027 07:12:33 +0000
asID:                     211562
IP address blocks:        2a06:9f81:3500::/40 maxlen: 48
                          2a06:9f81:3600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:24:39:6c:5e:38:10:4c:e6:d6:42:4e:fe:b1:73:a6:1d:54:c5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:33 2026 GMT
            Not After : Jun  4 07:12:33 2027 GMT
        Subject: CN=80014241B7B71DD5D46C0A8F79B96D523E790984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:9b:2f:cf:d0:d0:90:70:85:fd:53:86:92:
                    9c:f8:ed:a7:f6:14:da:60:c5:0c:ff:79:1a:a4:a0:
                    e0:12:bd:94:42:93:4b:10:52:f7:f5:ad:4a:77:08:
                    27:7f:6b:6e:24:44:aa:aa:9c:f7:2b:da:00:62:19:
                    5e:dc:1f:50:40:63:6a:3d:5f:26:11:c5:3a:c8:56:
                    66:5b:a9:e0:cf:ce:ab:69:e9:6f:b1:80:7b:3d:41:
                    3d:60:fd:92:8d:a1:72:9e:fa:bf:a4:1b:80:81:fa:
                    9f:69:cb:35:d4:63:c7:29:54:7a:67:e5:ee:e0:03:
                    bc:9f:92:b9:c1:b7:95:84:48:19:5b:2a:61:5e:98:
                    60:1e:04:25:ad:27:8f:c2:b1:40:e3:7d:c4:20:fe:
                    a3:f5:90:b0:04:5e:43:69:13:5c:a6:c9:1e:f9:13:
                    cc:aa:84:ff:07:b7:6f:18:39:68:e7:94:44:e6:46:
                    ee:02:91:5e:0c:68:45:f0:07:31:9e:df:8e:5b:e7:
                    cf:43:c3:a1:82:f6:3e:21:cb:31:2c:c5:15:1f:1e:
                    51:e5:d8:4b:8c:8f:0a:40:98:a7:51:9e:7e:93:c6:
                    5c:c3:6c:ef:45:a2:18:47:3a:9b:41:fa:22:f2:2e:
                    bb:65:a4:05:6f:93:a5:de:ed:6e:cb:33:f3:18:96:
                    15:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:01:42:41:B7:B7:1D:D5:D4:6C:0A:8F:79:B9:6D:52:3E:79:09:84
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211562.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3500::-2a06:9f81:36ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ba:c7:bd:05:d3:c9:2a:51:07:7a:4d:a2:a4:9b:18:05:51:ab:
         21:84:03:f8:a2:88:63:94:a3:13:fc:1c:9c:dd:24:86:50:d0:
         1c:b0:02:12:b9:3e:8b:11:5a:19:8e:59:4a:8f:8a:f3:03:ae:
         7b:85:5f:d7:0f:a6:66:7f:9c:f8:21:06:d6:60:03:2c:7f:e0:
         12:5c:9f:5d:89:4e:f6:4c:af:d4:5c:d3:0f:c9:d9:31:92:62:
         fe:f4:b9:e5:47:b6:4b:22:1f:58:b8:b4:73:bd:0b:10:0d:35:
         08:2f:ff:34:cd:05:df:b0:0c:fa:04:16:e7:69:62:fc:a5:8c:
         af:0c:61:54:c0:e5:8e:8e:50:37:18:29:8a:3b:d2:7a:77:cd:
         7c:3a:c3:9e:15:8f:15:0d:3f:61:09:bc:30:b7:1f:7d:72:99:
         bb:38:5b:6e:81:05:da:51:8c:d4:91:a8:21:df:25:8a:cb:e3:
         75:54:d5:80:71:0e:f9:41:ef:7d:53:30:91:18:f1:78:01:d8:
         7e:12:24:80:84:41:4d:ed:e8:c5:86:57:be:a8:29:f4:f1:b0:
         b5:3f:f2:89:8e:a7:c7:c0:e5:5b:a2:b4:08:e6:11:9f:05:44:
         01:48:20:bc:3c:1d:98:bd:4c:f2:1b:0f:f6:f5:44:4d:36:43:
         d0:34:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:08 2026 by rpki-client