Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216079.roa
File:                     AS216079.roa (raw, json)
Hash identifier:          edTSKjh6c91UrqtQxuu/VVTy+xIiCsbyPtPZa1UYo7w=
Subject key identifier:   FE:F8:BE:9C:0D:CC:6E:33:B1:2D:10:B8:19:3B:AA:D8:FB:12:A7:3D
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       11052A9E291724C1D935716EE64044A447B2FB70
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216079.roa
Signing time:             Fri 05 Jun 2026 07:12:34 +0000
ROA not before:           Fri 05 Jun 2026 07:07:34 +0000
ROA not after:            Fri 04 Jun 2027 07:12:34 +0000
asID:                     216079
IP address blocks:        2a05:dfc1:c300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:05:2a:9e:29:17:24:c1:d9:35:71:6e:e6:40:44:a4:47:b2:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:34 2026 GMT
            Not After : Jun  4 07:12:34 2027 GMT
        Subject: CN=FEF8BE9C0DCC6E33B12D10B8193BAAD8FB12A73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:5f:e0:ee:56:d1:01:f0:06:dc:35:00:6b:
                    1f:f7:83:7e:7f:94:1d:f6:16:37:8d:b0:b1:03:06:
                    4d:89:a9:90:e2:16:88:98:b7:53:d9:37:c6:2f:e1:
                    77:89:51:be:35:f4:10:dd:79:50:65:5e:ae:19:30:
                    66:bf:9c:e8:ea:42:56:a3:c7:c7:e1:d6:fc:ad:52:
                    96:b5:2f:ce:3c:57:62:39:73:c2:78:3d:15:27:08:
                    a3:c0:36:10:1f:0e:f7:92:0e:2a:c1:e8:76:b6:cb:
                    2e:55:8e:64:33:89:78:da:66:ac:08:88:a3:a0:d6:
                    a9:3c:c0:b9:5d:03:31:f7:79:4f:ce:ed:f6:a2:1f:
                    ee:fa:00:e0:26:15:2b:50:04:16:9a:1c:3f:e4:b9:
                    bd:f3:c5:63:ab:26:94:e5:79:42:22:92:87:8c:98:
                    7c:72:50:7e:d4:97:8d:05:e6:e6:b3:cf:82:0c:ad:
                    9a:7a:8a:46:f1:bb:23:e3:a3:f0:0e:e3:35:27:5c:
                    d0:0a:d4:47:fb:db:d0:e4:d1:4b:00:25:db:7b:f4:
                    6b:c0:0a:d6:6a:d0:54:3e:10:b8:e4:f8:1d:b0:f0:
                    9c:60:7b:6e:ed:30:c7:8e:50:f0:ef:22:d8:06:ae:
                    8b:24:d4:89:e9:ab:06:3e:3e:4b:30:63:79:b0:53:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F8:BE:9C:0D:CC:6E:33:B1:2D:10:B8:19:3B:AA:D8:FB:12:A7:3D
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c300::/40

    Signature Algorithm: sha256WithRSAEncryption
         da:5a:a2:92:af:1c:c1:18:18:77:a3:e0:64:92:6f:da:c8:fc:
         f2:87:69:a4:15:ee:13:f6:70:26:81:b5:7f:24:5a:10:94:f5:
         02:87:59:16:64:ce:ab:72:f0:42:79:72:bc:8e:53:80:30:93:
         aa:c6:2a:33:4a:ac:bd:c3:7f:8e:7e:9d:66:39:b3:6c:3b:5a:
         d4:8f:2a:fd:a6:c0:0a:74:2e:46:e2:27:ac:bb:49:a1:1c:a2:
         af:a6:c1:c3:77:e0:2e:fb:52:20:2f:1c:19:fc:67:df:63:a3:
         bb:49:23:97:ab:66:0b:a1:8e:73:00:07:c8:d9:0e:f3:3d:de:
         6e:cd:e4:ff:ae:57:60:5f:b8:7a:fe:bf:aa:1f:81:d5:6a:a1:
         db:b7:8f:18:6a:b4:c9:e3:56:20:f7:ce:47:4a:36:71:65:8b:
         87:9d:33:cb:6b:d1:3b:95:4a:9e:cd:86:f6:bc:b3:95:9b:f3:
         c6:09:1b:81:05:21:5c:9b:5a:df:4e:66:4f:83:35:6e:ea:19:
         50:ad:6c:36:2f:dd:dc:6b:b1:1c:a6:25:ae:63:f0:d1:aa:0c:
         7a:51:2d:51:83:87:cc:5c:80:c3:42:d2:85:9c:58:f5:6c:48:
         38:f7:67:7a:4d:0b:70:2a:00:c3:27:37:86:2e:ea:33:b7:a3:
         81:9b:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:09 2026 by rpki-client