Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214393.roa
File:                     AS214393.roa (raw, json)
Hash identifier:          ggNYYEvK/JswTDfXGX7sydARay0w9mrDyPyxB6fJU9M=
Subject key identifier:   1C:D0:14:A8:E7:45:C2:BA:03:39:FD:2C:C6:FB:57:4A:10:9A:DB:6B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       7A1438824958ACDB415DC386D27675AB7EA85825
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214393.roa
Signing time:             Fri 05 Jun 2026 07:12:22 +0000
ROA not before:           Fri 05 Jun 2026 07:07:22 +0000
ROA not after:            Fri 04 Jun 2027 07:12:22 +0000
asID:                     214393
IP address blocks:        2a06:9f81:6100::/40 maxlen: 48
                          2a06:9f81:6200::/40 maxlen: 48
                          2a06:9f81:6300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:14:38:82:49:58:ac:db:41:5d:c3:86:d2:76:75:ab:7e:a8:58:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:22 2026 GMT
            Not After : Jun  4 07:12:22 2027 GMT
        Subject: CN=1CD014A8E745C2BA0339FD2CC6FB574A109ADB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:ad:3e:e3:15:1b:2f:6f:86:1d:bc:f1:71:
                    74:39:ca:c9:7e:78:92:52:4e:9c:ba:2d:3e:9e:6f:
                    0d:d3:b0:27:e8:19:d0:5a:14:c0:23:ee:47:fc:44:
                    cb:95:fb:ca:49:d0:51:84:10:6c:a0:e1:5b:7e:e5:
                    27:cc:d3:7b:87:a4:c4:33:69:6c:95:39:6b:12:27:
                    06:b1:f5:bd:8c:91:e5:c0:f4:e2:a2:80:60:45:b2:
                    ce:39:2f:2d:b1:8e:bc:f1:c7:7e:f8:0c:2a:32:5e:
                    01:0e:86:e9:1d:c7:da:e5:41:4a:59:d3:12:fe:4a:
                    1c:14:24:b5:71:88:91:cc:23:76:3d:1a:a9:71:c5:
                    87:e2:c7:d9:9a:fd:76:58:a6:eb:77:ec:b1:91:1c:
                    a4:f5:56:42:42:18:90:99:b6:11:e9:34:7d:ea:ce:
                    e4:43:5f:46:40:5b:51:b6:76:e5:8b:b3:7d:1b:43:
                    91:b1:7c:ac:c5:6b:7f:66:90:43:d4:a1:92:5a:1d:
                    c8:86:77:a0:d1:a8:45:57:a4:e0:7c:1b:0f:83:67:
                    eb:3f:33:7c:0e:ee:5c:7d:80:3e:c7:ee:63:85:7b:
                    1e:9c:c7:7e:41:4a:44:5b:53:4d:20:ad:4b:b7:48:
                    b5:46:3e:c6:43:7f:f4:ac:94:6d:1e:b7:35:70:d3:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D0:14:A8:E7:45:C2:BA:03:39:FD:2C:C6:FB:57:4A:10:9A:DB:6B
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214393.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:6100::-2a06:9f81:63ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9b:3b:99:0a:01:5c:d1:23:63:15:ff:b3:10:db:77:d8:c0:9b:
         ea:92:88:70:6d:d9:32:1b:a5:3b:24:29:c5:34:6e:b6:f5:73:
         7a:1e:2c:3b:e3:97:0b:41:29:41:a3:10:d1:07:6a:8a:a3:d6:
         87:b1:0e:e0:64:a6:5b:2c:aa:f4:16:ba:24:12:55:34:84:2d:
         8c:da:3e:be:ed:8e:9d:b5:13:05:0a:75:12:b5:9a:13:a7:9a:
         ea:26:b7:c1:5c:4d:3a:82:c6:ed:3a:b4:d2:e2:09:a0:cb:96:
         da:bb:bd:d7:c8:7d:4a:3c:e9:b4:7c:26:04:54:44:b3:8d:3a:
         50:68:2d:5b:7a:02:6b:6f:c1:4e:ba:2e:5f:0c:97:cd:0d:68:
         3e:f6:ef:17:a2:af:da:b0:3d:ac:5c:00:c0:d8:24:81:c9:62:
         61:eb:b0:15:90:b3:40:06:8f:1b:2d:28:d7:5a:e7:27:80:a2:
         17:86:e2:3f:9a:c6:10:3d:e8:b2:9f:04:24:36:bc:c9:37:74:
         71:c7:24:d7:d2:eb:ab:20:8d:8a:58:96:e7:86:e9:77:27:f5:
         0c:ca:14:1b:56:e1:63:19:b9:4c:9e:e6:f7:52:a0:e8:49:52:
         69:45:b9:17:3b:13:08:ca:3f:d0:72:66:bb:2e:c7:74:b9:f4:
         ff:99:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:03 2026 by rpki-client