Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215541.roa
File:                     AS215541.roa (raw, json)
Hash identifier:          5CZ/bA3oZHkgv1+cMbSTBM4TN4RSXzPVaxaosorV0UI=
Subject key identifier:   4B:15:4D:FD:2F:82:AE:33:44:E7:22:DB:A7:B7:F9:1D:96:DF:AC:86
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       05062CDF3CF4A76EA4269BD2741EDC3CBB4ABC9B
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215541.roa
Signing time:             Fri 05 Jun 2026 07:12:42 +0000
ROA not before:           Fri 05 Jun 2026 07:07:42 +0000
ROA not after:            Fri 04 Jun 2027 07:12:42 +0000
asID:                     215541
IP address blocks:        2a06:9f81:4700::/40 maxlen: 48
                          2a06:9f81:4800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:06:2c:df:3c:f4:a7:6e:a4:26:9b:d2:74:1e:dc:3c:bb:4a:bc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:42 2026 GMT
            Not After : Jun  4 07:12:42 2027 GMT
        Subject: CN=4B154DFD2F82AE3344E722DBA7B7F91D96DFAC86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7f:ba:7a:a6:5a:5b:d7:8d:38:a9:25:a6:82:
                    22:50:c1:8e:c0:89:f9:11:8f:d1:48:d0:53:21:77:
                    96:3f:fa:d1:a2:c1:65:d8:d6:42:20:cc:02:58:a1:
                    d0:fe:9e:4b:9e:02:e7:e2:0a:89:30:1d:5b:50:7f:
                    f7:70:f2:61:6e:8a:d9:42:c7:13:b4:81:c9:c4:cb:
                    a8:3f:8e:7b:63:f4:a3:2d:f5:30:39:10:26:92:28:
                    b0:8d:72:51:dc:cf:b5:68:0d:f2:2c:49:32:68:0e:
                    c6:46:58:64:14:a9:7d:67:35:27:a0:17:cd:bd:b6:
                    85:98:f3:21:29:28:7e:3b:0e:d5:0c:b2:50:e1:e1:
                    67:88:b8:ac:99:23:0b:b7:c4:c0:53:e8:ad:8f:d3:
                    70:7c:e8:6d:c9:76:84:b5:f1:0c:4e:8d:7e:88:c7:
                    8c:7b:30:d5:df:51:b2:5d:3a:9a:86:30:1e:ec:ed:
                    6d:52:f5:53:48:0c:92:d5:31:17:89:db:71:74:f2:
                    e3:ee:ae:ac:dd:85:33:29:e3:39:07:f3:0d:8a:0d:
                    7c:91:fe:aa:e0:93:b5:d5:54:24:a4:0b:b1:6a:77:
                    90:dc:69:42:53:34:2c:c9:5a:6b:d3:65:d5:d0:7b:
                    61:cf:49:1c:f1:cf:e3:73:7c:58:73:60:61:3d:3f:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:15:4D:FD:2F:82:AE:33:44:E7:22:DB:A7:B7:F9:1D:96:DF:AC:86
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215541.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:4700::-2a06:9f81:48ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         e9:0c:6e:81:8b:de:2b:fa:ad:a0:f2:70:4b:ce:ad:bc:40:0d:
         2d:fb:dd:53:04:18:b1:66:fe:b8:3b:53:61:f2:4e:ba:0a:51:
         01:87:cb:78:d5:6d:77:05:da:35:24:8d:a0:3b:f1:c5:37:c3:
         30:11:44:4d:de:14:18:e6:5a:fb:b0:69:45:fb:84:a7:ef:b0:
         9f:51:5d:91:85:f5:f3:b5:78:62:05:d2:01:38:3a:5d:aa:56:
         f4:41:ca:31:77:41:0a:4d:9e:df:11:7d:5c:f7:dc:cc:eb:90:
         de:bd:ad:c2:11:f5:6e:b5:50:09:aa:81:a1:c0:e8:75:b2:09:
         12:5a:58:8e:ab:09:33:48:b3:1b:7e:22:87:ca:15:80:65:52:
         09:89:dc:ae:b5:5a:0d:fb:51:cd:2e:2d:69:37:89:e7:50:29:
         c3:93:d6:ba:23:bf:0f:39:ff:87:db:01:8b:20:1d:fa:ac:d5:
         ee:89:a6:8f:1b:1f:6b:de:4c:15:d2:f7:8d:77:b5:6c:4a:73:
         1a:2f:c8:99:3d:4d:21:fe:da:03:11:15:b1:c0:2c:0b:59:7d:
         8e:99:fe:54:fd:e8:91:36:5f:05:d6:e6:81:3f:ea:c6:9b:71:
         d2:5d:98:e9:a5:cb:e7:10:2c:d8:5a:37:1b:7e:21:52:d0:0a:
         5a:2f:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:29 2026 by rpki-client