Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215598.roa
File:                     AS215598.roa (raw, json)
Hash identifier:          gbOzaemc1lz52Q3+E72hqfNjkNsaWhyoa19bQWMQFZI=
Subject key identifier:   72:22:D7:CB:F9:7B:8E:00:75:F9:26:48:91:BE:CA:64:80:E0:6E:72
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       57CFDB52E48E8DA1F914DC0D80A15DB583EB9594
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215598.roa
Signing time:             Fri 05 Jun 2026 07:12:11 +0000
ROA not before:           Fri 05 Jun 2026 07:07:11 +0000
ROA not after:            Fri 04 Jun 2027 07:12:11 +0000
asID:                     215598
IP address blocks:        2a06:9f81:4100::/40 maxlen: 48
                          2a06:9f81:4200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cf:db:52:e4:8e:8d:a1:f9:14:dc:0d:80:a1:5d:b5:83:eb:95:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:11 2026 GMT
            Not After : Jun  4 07:12:11 2027 GMT
        Subject: CN=7222D7CBF97B8E0075F9264891BECA6480E06E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:6e:f3:3c:e0:1b:0f:37:dc:ff:bb:02:78:
                    a3:d3:c8:69:4a:74:8c:f2:5e:2f:9e:a3:1a:8a:2b:
                    c3:6f:d1:fc:3d:cf:ee:21:be:d4:38:89:8b:f9:ab:
                    7b:6f:0c:b7:cb:12:39:15:82:7e:92:c5:a5:de:21:
                    d4:18:59:c9:87:71:00:fd:b8:01:79:cd:88:b0:41:
                    69:8c:9e:31:7e:4b:b5:17:ea:69:09:0c:fa:bb:45:
                    bb:93:68:a8:75:16:71:9e:6f:81:03:b6:ab:00:1f:
                    62:41:f8:0b:5d:1e:c1:a5:11:91:91:2f:a3:be:4e:
                    1a:08:fd:69:d0:1c:35:2b:d9:39:8b:47:fb:b5:1b:
                    29:c0:26:48:53:40:07:0b:1d:ba:3f:8d:29:dc:05:
                    c5:0b:60:33:fe:44:58:9f:a8:ee:8c:c4:af:32:6f:
                    ab:da:25:f7:b6:79:f0:25:8a:b4:72:1e:7e:c1:a3:
                    68:4c:9e:2b:e4:3d:b0:e7:d7:40:2c:76:c2:52:0b:
                    16:6a:b4:75:c3:19:9b:31:bf:e6:9a:c4:73:37:05:
                    a0:be:0d:97:ed:45:b8:a4:eb:0a:68:e4:96:83:02:
                    1c:ce:fd:6c:d2:e2:63:a5:e5:67:14:7d:77:35:b6:
                    61:bb:84:01:7c:f5:66:94:6a:7c:ee:54:25:6a:60:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:22:D7:CB:F9:7B:8E:00:75:F9:26:48:91:BE:CA:64:80:E0:6E:72
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215598.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:4100::-2a06:9f81:42ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         07:a2:04:ba:ec:35:da:91:1f:41:5b:9a:37:d2:f7:2d:28:aa:
         18:88:c7:87:12:bc:a8:20:00:c4:87:82:f5:a2:a7:2f:2e:ca:
         68:7d:cf:63:ea:75:8e:17:94:e0:1b:3a:89:c2:9a:26:4d:93:
         8d:e6:43:49:e1:53:c2:c9:72:5e:54:db:a1:6f:30:7a:48:0e:
         a4:42:06:b9:e7:ee:97:38:11:13:a4:75:77:6f:08:8d:91:62:
         96:f5:16:bc:6d:a1:a6:69:32:06:8c:6b:7a:e8:7c:d7:8f:da:
         b3:ab:b1:a7:f8:eb:98:f1:8e:ff:2b:cd:30:47:0a:6e:37:33:
         ce:ae:19:21:d9:dd:28:2a:f0:2d:92:d2:19:52:ab:3a:14:f3:
         9c:c5:6c:84:07:25:0e:75:34:5c:26:da:e5:03:39:91:76:5a:
         73:fa:20:0d:0e:72:2f:19:c9:b4:63:cb:12:a6:15:6e:51:6b:
         f2:d0:64:e1:ef:ec:b1:4b:99:d0:a4:a7:10:19:9d:08:f1:27:
         9f:d7:94:92:f8:1b:d9:40:ab:3a:e7:b1:00:f1:19:fb:99:34:
         6f:a6:73:c0:c4:f9:16:93:0e:18:38:3b:69:77:c9:b7:67:d1:
         b2:3b:ab:1f:f2:e0:68:8c:e0:cd:7c:90:c8:55:7f:16:77:b7:
         7a:23:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:09 2026 by rpki-client