Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214674.roa
File:                     AS214674.roa (raw, json)
Hash identifier:          Xl9hETt6v60pZEZy8p+y6/SzapUBFcTwiDkJXAo5kJg=
Subject key identifier:   3E:B6:91:55:58:E2:8B:F2:00:5B:48:28:18:0E:A6:84:FE:9F:2E:71
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       4DD1647309A5ADB807AEF0A27DEF481C1725D0EC
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214674.roa
Signing time:             Fri 05 Jun 2026 07:12:48 +0000
ROA not before:           Fri 05 Jun 2026 07:07:48 +0000
ROA not after:            Fri 04 Jun 2027 07:12:48 +0000
asID:                     214674
IP address blocks:        2a06:9f81:5100::/40 maxlen: 48
                          2a06:9f81:5400::/40 maxlen: 48
                          2a06:9f81:6100::/40 maxlen: 48
                          2a06:9f81:6400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d1:64:73:09:a5:ad:b8:07:ae:f0:a2:7d:ef:48:1c:17:25:d0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:48 2026 GMT
            Not After : Jun  4 07:12:48 2027 GMT
        Subject: CN=3EB6915558E28BF2005B4828180EA684FE9F2E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:0f:f5:ba:4e:cf:c1:29:b1:e3:46:fe:54:
                    84:92:4c:41:c4:0f:ce:69:3e:29:c4:72:ed:67:40:
                    01:a3:20:18:71:38:12:48:d6:84:68:97:66:df:8a:
                    51:b9:a6:04:d2:ad:f6:90:13:c1:ab:e6:75:d9:43:
                    70:86:4a:92:00:7f:54:a6:04:d2:0c:bf:01:99:db:
                    f2:05:26:a3:fb:b1:9a:9f:56:9c:81:e0:f6:98:0e:
                    cc:17:65:a4:72:36:66:a8:31:02:fa:b5:de:2d:a5:
                    c7:57:2b:9c:23:2f:8e:8b:a8:ea:c4:c6:22:57:c1:
                    92:2e:e9:18:d2:40:0d:12:4e:70:53:9a:b4:dc:4c:
                    66:ae:50:86:ba:f5:76:60:95:11:07:9d:27:f2:94:
                    6a:61:1e:24:b1:2c:19:a2:5b:de:e1:09:e1:a6:f0:
                    c5:ef:37:59:2e:33:a3:98:9f:54:76:05:a3:1c:19:
                    1f:e9:6a:b4:68:3b:b0:76:14:1b:30:f6:86:33:4e:
                    30:31:a6:1d:45:a3:2d:a2:57:be:c9:d7:56:97:c1:
                    00:45:7e:9e:75:68:ec:28:b3:0a:b9:8a:cf:f4:35:
                    89:3e:9e:62:ac:4f:bf:d2:bb:33:b1:a9:07:1e:21:
                    8f:a2:4b:1a:bd:f3:ec:bd:a1:48:fa:61:9e:b1:4e:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B6:91:55:58:E2:8B:F2:00:5B:48:28:18:0E:A6:84:FE:9F:2E:71
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214674.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:5100::/40
                  2a06:9f81:5400::/40
                  2a06:9f81:6100::/40
                  2a06:9f81:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:cb:38:1b:5c:a0:11:fb:36:79:59:99:07:ef:f3:9d:fa:ba:
         f8:71:97:bb:f8:f2:37:e9:03:d8:5f:e7:d1:a1:01:70:7b:9f:
         01:4f:cf:8f:4c:e6:54:1c:fe:ef:99:ff:b1:b1:2b:c1:8d:64:
         42:ab:95:09:1f:35:ac:dc:7d:40:f1:fe:82:44:e0:86:d4:5e:
         f0:a1:ae:b6:09:97:54:9a:15:3f:28:2c:c1:49:ea:d1:a4:8c:
         21:56:2b:77:10:e8:6d:9c:91:94:de:ec:80:f9:68:c6:d8:08:
         ce:60:ca:e0:ef:48:1c:d6:b5:c2:04:fd:f5:ff:2d:69:85:74:
         ba:79:15:96:85:46:04:3e:96:23:a3:99:ad:bc:3a:25:b5:2b:
         de:1d:29:12:90:eb:9d:e3:84:4d:80:bc:c5:66:55:7b:dc:b1:
         bb:ed:81:ec:38:80:17:52:39:e0:14:c4:4e:ac:12:a0:f6:42:
         de:19:77:7a:f6:7b:1a:6a:8f:c4:f7:a8:86:e1:65:b3:d2:c1:
         2f:80:7b:79:c6:3a:ad:c0:82:db:95:96:08:b2:40:8a:a3:d1:
         3c:ae:55:47:1e:d1:06:b7:f9:19:b1:95:1c:99:59:95:bd:4e:
         27:50:bd:a9:8b:a1:4b:6f:1d:7f:6e:e5:78:1a:d0:19:12:19:
         d2:b9:a8:2c
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUTdFkcwmlrbgHrvCife9IHBcl0OwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDhaFw0yNzA2MDQwNzEyNDhaMDMxMTAvBgNV
BAMTKDNFQjY5MTU1NThFMjhCRjIwMDVCNDgyODE4MEVBNjg0RkU5RjJFNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8A/1uk7PwSmx40b+VISSTEHE
D85pPinEcu1nQAGjIBhxOBJI1oRol2bfilG5pgTSrfaQE8Gr5nXZQ3CGSpIAf1Sm
BNIMvwGZ2/IFJqP7sZqfVpyB4PaYDswXZaRyNmaoMQL6td4tpcdXK5wjL46LqOrE
xiJXwZIu6RjSQA0STnBTmrTcTGauUIa69XZglREHnSfylGphHiSxLBmiW97hCeGm
8MXvN1kuM6OYn1R2BaMcGR/parRoO7B2FBsw9oYzTjAxph1Foy2iV77J11aXwQBF
fp51aOwoswq5is/0NYk+nmKsT7/SuzOxqQceIY+iSxq98+y9oUj6YZ6xTmTDAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUPraRVVjii/IAW0goGA6mhP6fLnEwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjE0Njc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF
BwEHAQH/BCowKDAmBAIAAjAgAwYAKgafgVEDBgAqBp+BVAMGACoGn4FhAwYAKgaf
gWQwDQYJKoZIhvcNAQELBQADggEBAKjLOBtcoBH7NnlZmQfv8536uvhxl7v48jfp
A9hf59GhAXB7nwFPz49M5lQc/u+Z/7GxK8GNZEKrlQkfNazcfUDx/oJE4IbUXvCh
rrYJl1SaFT8oLMFJ6tGkjCFWK3cQ6G2ckZTe7ID5aMbYCM5gyuDvSBzWtcIE/fX/
LWmFdLp5FZaFRgQ+liOjma28OiW1K94dKRKQ653jhE2AvMVmVXvcsbvtgew4gBdS
OeAUxE6sEqD2Qt4Zd3r2expqj8T3qIbhZbPSwS+Ae3nGOq3AgtuVlgiyQIqj0Tyu
VUce0Qa3+RmxlRyZWZW9TidQvamLoUtvHX9u5Xga0BkSGdK5qCw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:58 2026 by rpki-client