Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216266.roa
File:                     AS216266.roa (raw, json)
Hash identifier:          fRZex9KO60A4w4+xpUGbVa/bHzPBB/MnqJcP5ojm7N0=
Subject key identifier:   B9:44:CA:31:DA:49:A6:44:DB:53:1C:59:F5:2F:38:B5:97:61:06:E6
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       1B0BF191C9F80050F91E89507CFBE3F8F6C0BC3A
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216266.roa
Signing time:             Fri 05 Jun 2026 07:12:12 +0000
ROA not before:           Fri 05 Jun 2026 07:07:12 +0000
ROA not after:            Fri 04 Jun 2027 07:12:12 +0000
asID:                     216266
IP address blocks:        2a05:dfc1:b800::/40 maxlen: 48
                          2a05:dfc1:b900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0b:f1:91:c9:f8:00:50:f9:1e:89:50:7c:fb:e3:f8:f6:c0:bc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:12 2026 GMT
            Not After : Jun  4 07:12:12 2027 GMT
        Subject: CN=B944CA31DA49A644DB531C59F52F38B5976106E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:58:6d:91:9c:0c:f1:b1:23:77:15:f5:a2:
                    e4:31:a9:5e:49:23:27:83:70:93:0e:71:d7:fc:58:
                    26:4b:4b:93:43:03:89:f0:08:bf:91:ad:5b:5a:61:
                    24:94:f7:70:b9:c2:94:6f:c2:26:8b:09:04:f0:89:
                    12:3b:2d:94:5b:d8:8f:a2:32:8f:e3:80:52:e7:89:
                    3c:2a:27:5c:8c:fe:a6:b5:6c:fd:76:c9:0b:d1:c1:
                    9e:1b:ea:72:c6:de:fc:d6:63:d7:c8:56:43:8e:18:
                    60:59:9b:a3:1a:25:e9:d6:f7:c0:d7:e9:19:e5:28:
                    07:17:b4:a5:c8:63:f3:1e:08:56:6e:f3:01:c3:f7:
                    66:e4:82:53:01:0d:da:16:69:bc:c6:8f:b1:9e:af:
                    f1:0f:5e:87:7c:44:2c:e3:d3:98:7f:02:57:65:6a:
                    7b:34:a2:b6:73:27:80:be:c7:d9:b4:85:f8:d4:ab:
                    60:98:7e:c8:85:52:e3:0d:f9:e3:6d:ab:58:0e:8c:
                    3a:ab:cf:4e:57:ea:52:d4:3e:47:0b:52:66:b3:64:
                    27:ba:e9:d7:ce:e9:4b:2e:d3:c7:58:39:62:ad:4f:
                    52:73:d3:e5:12:25:85:42:98:09:50:3a:c7:a8:ba:
                    96:8e:21:5b:6d:03:4e:49:d5:dc:00:7e:0b:67:2f:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:44:CA:31:DA:49:A6:44:DB:53:1C:59:F5:2F:38:B5:97:61:06:E6
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:b800::/39

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:c4:39:dc:d2:e4:cb:59:b1:d4:70:e0:a8:c0:e0:9a:ce:
         35:5b:c4:6e:21:8b:f5:61:56:bf:8a:de:a2:04:09:e6:93:de:
         d2:14:8b:eb:9c:a3:4c:6c:6c:88:5b:9a:2d:6c:0c:b5:5f:82:
         e1:c5:c0:a7:3a:02:00:bf:0f:da:bc:60:8c:20:17:bd:07:4d:
         8c:62:53:6c:53:ae:6c:3c:b3:7c:04:70:2d:8c:ad:fa:73:e4:
         6d:af:ec:80:59:58:b7:6b:af:a5:11:84:52:3d:f1:94:f0:6f:
         cf:e2:34:e9:0a:cf:58:eb:b2:eb:49:0b:64:3b:ff:96:d2:43:
         1d:57:b1:ef:1f:98:3f:03:a0:0c:2d:f6:e3:1f:99:dd:37:de:
         0b:2c:5e:a1:26:2f:f6:e3:7a:68:fb:be:fb:d2:b4:b0:c8:30:
         b7:a1:2c:8c:4c:da:41:41:25:8f:34:00:94:33:5c:2d:f0:b4:
         1d:28:9b:e0:c9:41:36:49:da:ee:d7:ba:77:97:69:76:f6:54:
         54:1d:aa:13:d3:ee:42:a8:2e:25:f9:58:8c:51:e9:2a:36:88:
         c4:ec:a4:76:f7:47:5b:de:ca:d6:da:ad:98:45:08:26:79:85:
         0c:6c:50:07:70:0c:86:db:b0:4c:28:b8:b5:b6:60:ed:ab:b5:
         ab:aa:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:44 2026 by rpki-client