Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212332.roa
File:                     AS212332.roa (raw, json)
Hash identifier:          yGenRJu9v4R7CRhNXfaG6E0RmkAuhW4aG6xtdK50fws=
Subject key identifier:   00:FC:AB:55:E9:96:F0:1A:A9:35:D5:AC:57:23:2B:50:B0:7C:FC:18
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       6C69D3B4370BBB6AA1716DEC899AE2C32C249449
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212332.roa
Signing time:             Fri 05 Jun 2026 07:12:33 +0000
ROA not before:           Fri 05 Jun 2026 07:07:33 +0000
ROA not after:            Fri 04 Jun 2027 07:12:33 +0000
asID:                     212332
IP address blocks:        2a05:dfc1:8a00::/40 maxlen: 48
                          2a06:9f81:1500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:69:d3:b4:37:0b:bb:6a:a1:71:6d:ec:89:9a:e2:c3:2c:24:94:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:33 2026 GMT
            Not After : Jun  4 07:12:33 2027 GMT
        Subject: CN=00FCAB55E996F01AA935D5AC57232B50B07CFC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:50:d9:31:f8:1d:8c:87:f3:9f:9b:99:19:
                    d1:b1:52:a7:f9:92:b8:6f:23:f7:2a:fc:85:c4:a0:
                    b2:ba:7c:5f:54:8e:f0:be:28:a7:ac:c9:29:1d:b1:
                    0f:9e:ef:2d:7e:82:99:eb:e8:2b:b6:ba:85:4f:53:
                    f3:17:9e:e1:02:ad:54:b8:2c:8a:ae:e1:9a:15:d8:
                    e7:6b:da:d6:8e:00:ff:20:0c:b8:73:fd:16:98:b5:
                    68:1c:3c:29:ce:ed:0e:cc:ad:04:95:52:8c:b2:bc:
                    4d:06:c5:3c:a0:6d:a4:9f:67:7c:b5:a8:ec:a8:2e:
                    fd:88:28:e0:1b:4a:0a:29:50:41:08:24:f5:11:43:
                    aa:b6:d0:8a:77:95:69:cd:5d:6d:19:47:4c:9e:b5:
                    2e:b5:16:1a:6f:b8:2e:ff:9f:0f:60:9a:b5:43:ad:
                    2c:a5:68:c1:7f:eb:2a:f2:54:1c:ad:08:30:8e:f4:
                    22:be:8f:73:55:1a:e9:0e:10:fb:5a:93:20:61:dd:
                    7f:49:9d:fb:87:15:af:d0:f4:07:46:10:24:69:70:
                    e0:18:c1:ee:e2:3d:18:02:18:f9:4b:0f:6f:13:59:
                    5d:89:e7:01:90:29:19:43:ac:c3:2f:b1:03:41:63:
                    4a:01:c9:01:44:4a:54:a4:69:0e:26:c7:16:de:07:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:AB:55:E9:96:F0:1A:A9:35:D5:AC:57:23:2B:50:B0:7C:FC:18
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8a00::/40
                  2a06:9f81:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:6e:a3:15:c2:07:f0:11:c8:b0:7e:41:0c:a2:01:f4:c8:
         4a:e0:42:f4:2e:8a:d3:01:59:c6:bc:15:18:08:ae:cd:78:62:
         80:57:be:6c:d7:4a:fd:ea:64:da:18:2c:2d:44:ec:10:f7:69:
         b3:8f:61:42:0f:b4:8f:70:e2:61:ec:75:17:07:48:99:9e:47:
         54:d5:42:86:ca:db:90:9e:86:13:3c:fa:9d:9d:60:26:46:56:
         4e:18:74:bb:e4:1b:f6:a5:6f:d7:b3:6f:c0:66:77:aa:1a:ba:
         b0:a4:a4:29:02:3d:ee:5f:46:e7:58:44:02:cc:2d:51:29:6e:
         68:16:85:ea:77:41:52:1a:4c:a1:ab:b2:05:e9:e2:b3:c8:e3:
         8d:c1:c5:85:14:e8:bd:76:83:05:12:bc:bc:5c:e4:6a:8e:1a:
         7d:f3:92:b3:ad:e6:9f:3d:c2:d2:ce:f0:a0:6d:a4:a6:b6:4f:
         c2:51:fc:23:f5:a4:aa:c1:05:32:ca:7a:78:19:c6:e1:cb:30:
         27:ac:9b:54:50:43:a2:e6:49:06:5f:d3:98:f1:e6:62:ec:3c:
         d5:a5:57:9d:c0:a1:ef:3b:c6:5e:08:8f:28:8c:bd:26:cd:b7:
         8a:89:b1:96:cf:69:7e:ea:f0:b9:e3:57:e2:9b:13:a3:28:bb:
         7b:f9:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:21 2026 by rpki-client