Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212762.roa
File:                     AS212762.roa (raw, json)
Hash identifier:          GbzZVcK6szboyeip7L9kJkAqY/n7FT5nhaJDM8Hgi3A=
Subject key identifier:   F2:6B:8D:B5:65:B6:B1:95:37:4D:4B:C8:48:82:EB:37:F7:61:FE:FD
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       3CF4388F31381E9E3ACB0E141CC5A8A35788919B
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212762.roa
Signing time:             Fri 05 Jun 2026 07:12:31 +0000
ROA not before:           Fri 05 Jun 2026 07:07:31 +0000
ROA not after:            Fri 04 Jun 2027 07:12:31 +0000
asID:                     212762
IP address blocks:        2a05:dfc1:5500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f4:38:8f:31:38:1e:9e:3a:cb:0e:14:1c:c5:a8:a3:57:88:91:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:31 2026 GMT
            Not After : Jun  4 07:12:31 2027 GMT
        Subject: CN=F26B8DB565B6B195374D4BC84882EB37F761FEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:9b:03:a2:7e:6a:16:6c:0a:9e:27:62:ed:
                    41:5a:89:af:58:40:33:04:d9:99:c1:99:4f:39:9f:
                    07:91:ef:6b:7b:9e:dc:75:f1:50:7f:49:61:76:78:
                    29:c0:27:7b:62:fe:b0:15:3b:c4:64:c6:9f:50:3e:
                    07:84:6e:82:ec:62:64:6d:d8:a4:2d:10:8f:66:ad:
                    6f:6b:f7:17:e5:ad:6e:14:66:6a:78:d0:4b:55:f1:
                    75:5e:de:44:8b:46:b3:19:26:07:7a:4b:47:3f:5d:
                    07:4a:b2:06:16:5d:c2:c8:bc:65:e5:25:8f:3d:19:
                    0e:ba:13:3e:f3:fc:b0:ec:8f:05:0f:40:6d:ed:eb:
                    f1:09:d5:26:92:ff:5b:d5:80:86:a7:8e:6c:24:91:
                    04:6b:b1:f8:fb:5c:a5:3a:43:3a:1f:a6:53:5d:44:
                    15:6f:53:87:a3:cf:0b:e1:88:da:09:7b:cc:0d:1b:
                    b2:4e:05:87:d8:58:2e:36:22:08:9c:d6:40:d2:51:
                    93:00:da:43:3c:4f:74:50:2d:e9:93:6f:40:9a:41:
                    2d:10:ed:06:4d:90:2a:43:7e:43:eb:d3:7e:a9:a1:
                    1a:6f:59:a9:ae:6e:bd:af:29:50:3f:26:b5:91:a3:
                    64:e6:1e:41:98:8f:31:6f:45:38:46:c8:2b:80:67:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6B:8D:B5:65:B6:B1:95:37:4D:4B:C8:48:82:EB:37:F7:61:FE:FD
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5500::/40

    Signature Algorithm: sha256WithRSAEncryption
         e4:1d:c4:a3:ac:2c:a6:26:1b:37:1e:75:f0:d5:0d:ec:44:69:
         01:62:97:dc:8c:44:f5:65:e1:32:45:39:8c:93:09:12:94:62:
         e2:b3:ab:68:fe:02:4e:d7:40:53:75:67:ad:80:15:ff:a1:c0:
         7b:ac:b0:8d:0c:c6:86:ac:74:95:f4:28:7b:0b:01:60:61:f7:
         bc:b4:7d:32:73:98:a4:66:d4:5e:0a:9d:17:f3:8d:ca:2c:0b:
         42:30:e7:d2:c4:12:bc:84:05:07:73:2f:51:a8:91:97:9b:57:
         f8:3f:94:bf:50:a7:40:7d:f4:4a:f1:13:7f:a7:dd:96:5c:16:
         34:23:46:71:e6:c7:53:23:f7:60:18:eb:9c:10:ff:84:fc:4c:
         ba:2b:0b:d1:2e:83:7b:31:36:46:2a:0b:7b:bf:18:24:78:93:
         d9:ec:1e:d1:96:63:22:06:64:71:42:42:84:aa:6d:b1:7c:8f:
         09:31:b1:90:1a:f9:27:4e:59:5a:13:fc:4d:14:9d:b8:ca:e2:
         cc:84:45:e5:b5:c1:8c:4a:38:d7:b9:9a:b8:4c:95:a6:6c:11:
         90:35:4b:9a:62:f0:e1:3c:34:5a:03:d0:3d:22:49:fd:3c:be:
         57:94:21:44:44:66:2d:2d:ba:3c:c4:58:cf:3b:5f:51:7b:06:
         fd:69:38:01
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUPPQ4jzE4Hp46yw4UHMWoo1eIkZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzFaFw0yNzA2MDQwNzEyMzFaMDMxMTAvBgNV
BAMTKEYyNkI4REI1NjVCNkIxOTUzNzRENEJDODQ4ODJFQjM3Rjc2MUZFRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdpsDon5qFmwKnidi7UFaia9Y
QDME2ZnBmU85nweR72t7ntx18VB/SWF2eCnAJ3ti/rAVO8Rkxp9QPgeEboLsYmRt
2KQtEI9mrW9r9xflrW4UZmp40EtV8XVe3kSLRrMZJgd6S0c/XQdKsgYWXcLIvGXl
JY89GQ66Ez7z/LDsjwUPQG3t6/EJ1SaS/1vVgIanjmwkkQRrsfj7XKU6QzofplNd
RBVvU4ejzwvhiNoJe8wNG7JOBYfYWC42Igic1kDSUZMA2kM8T3RQLemTb0CaQS0Q
7QZNkCpDfkPr036poRpvWamubr2vKVA/JrWRo2TmHkGYjzFvRThGyCuAZzR3AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU8muNtWW2sZU3TUvISILrN/dh/v0wHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjEyNzYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwVUwDQYJKoZIhvcNAQELBQADggEBAOQd
xKOsLKYmGzcedfDVDexEaQFil9yMRPVl4TJFOYyTCRKUYuKzq2j+Ak7XQFN1Z62A
Ff+hwHussI0MxoasdJX0KHsLAWBh97y0fTJzmKRm1F4KnRfzjcosC0Iw59LEEryE
BQdzL1GokZebV/g/lL9Qp0B99ErxE3+n3ZZcFjQjRnHmx1Mj92AY65wQ/4T8TLor
C9Eug3sxNkYqC3u/GCR4k9nsHtGWYyIGZHFCQoSqbbF8jwkxsZAa+SdOWVoT/E0U
nbjK4syEReW1wYxKONe5mrhMlaZsEZA1S5pi8OE8NFoD0D0iSf08vleUIUREZi0t
ujzEWM87X1F7Bv1pOAE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:09 2026 by rpki-client