Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211754.roa
File:                     AS211754.roa (raw, json)
Hash identifier:          V1tUsocQ/dvMwFBlFpbCcMtHt2FK8tB/giAQXbWZVKM=
Subject key identifier:   6E:59:03:87:FB:AC:A6:DB:E3:92:88:53:27:60:88:69:39:49:56:38
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       604AE7B7F5A498FAF2827B4251D19F72EA272CBA
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211754.roa
Signing time:             Fri 05 Jun 2026 07:12:24 +0000
ROA not before:           Fri 05 Jun 2026 07:07:24 +0000
ROA not after:            Fri 04 Jun 2027 07:12:24 +0000
asID:                     211754
IP address blocks:        2a05:dfc1:a500::/40 maxlen: 48
                          2a05:dfc1:a600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4a:e7:b7:f5:a4:98:fa:f2:82:7b:42:51:d1:9f:72:ea:27:2c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:24 2026 GMT
            Not After : Jun  4 07:12:24 2027 GMT
        Subject: CN=6E590387FBACA6DBE39288532760886939495638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:ec:ae:4b:ec:51:ef:d5:c1:db:43:09:70:
                    bd:42:13:01:3b:bb:d5:da:43:ab:03:5d:8d:a1:80:
                    8e:17:85:49:08:4f:aa:37:81:b1:e5:c1:78:69:e5:
                    2f:00:87:01:e3:79:1b:4d:f5:5c:0b:e7:19:b6:0d:
                    58:a8:c5:82:20:09:26:99:c5:b4:f8:2f:c5:f4:a8:
                    5f:c5:34:13:88:b8:da:37:8e:44:55:3b:6f:34:db:
                    e0:31:0c:0c:a7:56:df:d7:01:50:2e:89:da:ac:76:
                    39:d0:76:b1:e5:83:99:dc:2b:b4:d9:a5:4c:46:60:
                    21:04:e7:5c:a0:a6:83:31:49:ff:4a:f4:02:77:5b:
                    87:4b:e9:c0:8c:7e:70:07:8b:04:8b:9f:92:0c:b3:
                    3d:ee:69:f8:00:5c:de:b5:2e:ca:c4:d9:e7:79:fb:
                    88:24:80:29:7a:32:7a:c1:01:2a:07:6b:1d:24:ca:
                    a1:14:14:52:af:be:b5:2e:b2:86:92:83:31:6e:9e:
                    5e:eb:4a:6f:2d:c9:29:5c:5f:bc:e9:df:21:f9:47:
                    fb:cd:11:42:77:ce:b3:6d:0c:40:6f:7d:8b:43:4b:
                    66:61:df:63:ac:7c:60:81:74:8f:d4:51:4a:4e:46:
                    f6:d0:24:1d:2d:ef:7b:32:65:c4:e3:d8:9c:29:99:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:59:03:87:FB:AC:A6:DB:E3:92:88:53:27:60:88:69:39:49:56:38
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211754.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:a500::-2a05:dfc1:a6ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:58:58:52:2b:0d:ee:50:46:a8:ee:85:6c:0e:7e:2b:24:
         b6:3e:4e:ff:b3:57:03:40:04:a0:2f:5c:91:56:ef:0d:e8:4b:
         b0:3e:d9:a5:4c:29:f6:03:03:73:b7:1b:f6:ba:d1:90:dd:eb:
         d8:f1:c2:81:92:46:69:1a:dc:62:f3:ef:b6:d1:88:c3:d3:02:
         22:8d:0b:a0:bf:74:33:fc:49:a9:1c:fd:be:ab:75:4f:14:df:
         5e:26:91:72:5f:bf:d1:d1:63:3a:6e:25:fd:54:11:ee:28:ad:
         e7:35:b9:21:ba:03:58:84:49:56:e8:63:bf:1f:26:93:ff:79:
         6e:f7:c3:35:79:e3:0c:76:33:6a:f0:94:87:8a:24:b6:fd:fe:
         ad:99:89:c7:14:9a:9c:f3:c4:e8:79:87:34:7a:21:3d:e7:f0:
         31:18:ff:f5:32:57:4d:6e:00:d4:d3:5b:18:7b:60:a1:b6:b3:
         89:6b:06:22:46:66:49:dd:a8:d1:ce:ca:64:45:e0:89:f8:b9:
         49:0e:0e:fb:a7:b2:bc:ac:d7:02:fc:5d:65:b2:ff:c5:23:f9:
         1e:d9:12:cf:d2:f8:99:e2:8d:1c:cb:b1:de:16:50:73:18:29:
         11:cc:92:fa:e7:8d:33:a5:2b:f7:4f:14:98:aa:ca:34:06:54:
         46:d6:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:22 2026 by rpki-client