Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216429.roa
File:                     AS216429.roa (raw, json)
Hash identifier:          3b8zOUtpphyTQ/c9Yd/p/EnYWSmEy4+VpskO4CFlSF8=
Subject key identifier:   EA:73:9E:50:66:58:E2:08:01:C9:B6:99:FD:1F:2C:EC:34:A2:A3:9A
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       214742414AF1D14EAEF5AE718103471220860450
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216429.roa
Signing time:             Fri 05 Jun 2026 07:12:36 +0000
ROA not before:           Fri 05 Jun 2026 07:07:36 +0000
ROA not after:            Fri 04 Jun 2027 07:12:36 +0000
asID:                     216429
IP address blocks:        2a05:dfc1:8700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:47:42:41:4a:f1:d1:4e:ae:f5:ae:71:81:03:47:12:20:86:04:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:36 2026 GMT
            Not After : Jun  4 07:12:36 2027 GMT
        Subject: CN=EA739E506658E20801C9B699FD1F2CEC34A2A39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:90:f7:0c:29:d3:cd:49:a3:16:af:b5:c0:
                    70:b8:c0:a9:e6:53:01:31:c9:ce:2e:22:51:ec:76:
                    96:58:ca:1c:2f:6c:f5:3b:ae:46:d7:0f:30:22:ed:
                    3e:de:88:03:ee:e0:a8:6e:c0:21:bc:4e:3a:77:99:
                    2e:aa:32:4b:e7:04:c1:a9:d1:97:e5:3e:70:38:19:
                    e2:a2:b4:40:12:e8:26:27:9c:c2:80:84:db:90:cf:
                    57:a4:49:cd:ca:5b:b0:73:d7:d6:a4:c6:aa:f6:0e:
                    24:74:56:c9:7e:76:b9:d2:c3:64:1f:4f:c4:d8:05:
                    3e:87:3f:f8:a4:4b:59:60:9d:8c:d6:32:2f:40:ce:
                    34:b6:4b:e1:d6:0e:27:77:e7:dc:06:dd:23:41:38:
                    ae:f6:59:3c:dc:19:dd:c9:df:0f:71:d8:33:2e:5f:
                    67:a3:8b:06:4e:61:60:55:e8:aa:e2:dc:94:b9:90:
                    b8:ba:db:51:d9:89:f2:27:af:b8:59:a4:87:9a:0a:
                    f1:03:10:34:41:d8:8b:a6:38:dd:0a:86:99:a3:94:
                    ba:e8:94:c2:59:ec:8b:bd:74:e5:88:bc:72:9d:fe:
                    83:3e:50:59:bc:29:53:1c:03:ec:61:69:b2:70:40:
                    df:bd:60:1f:18:f2:61:f0:75:9c:8b:0f:da:f4:48:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:73:9E:50:66:58:E2:08:01:C9:B6:99:FD:1F:2C:EC:34:A2:A3:9A
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216429.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:37:1b:3f:15:c8:a6:7b:9f:5e:92:1e:e6:28:35:d7:de:bf:
         75:a2:0c:cb:e9:ff:c2:de:39:ea:c7:24:49:ef:45:6b:45:68:
         a3:f7:bb:62:e1:8f:f7:d3:80:54:92:65:aa:24:73:7e:a6:14:
         d6:c3:4b:93:bc:72:9e:6b:ca:f1:58:42:b5:de:7d:05:39:80:
         03:eb:62:d5:86:0f:6e:8a:4e:15:24:58:59:f5:8b:e0:36:8a:
         c5:1d:a4:9f:5a:f5:05:c7:bf:15:a4:13:a1:45:1c:75:b5:28:
         aa:75:15:33:45:44:ff:0a:3a:cc:0d:80:85:91:61:6d:ed:23:
         fc:69:64:89:1a:d2:c8:ca:e8:97:16:d0:c4:43:cd:6d:0e:5f:
         1c:42:fa:3a:d9:dd:a0:bd:38:62:42:1a:64:83:28:89:7c:fa:
         d6:5c:85:7a:8e:bc:12:97:59:15:6e:78:36:18:e6:5a:c1:9b:
         d2:7f:26:19:f1:8e:a9:3a:d1:01:91:5a:d9:bf:8d:c4:91:c0:
         6a:47:2d:0d:81:4a:7d:2b:52:c6:54:34:69:d5:c4:8f:2b:6e:
         91:42:4b:8f:3a:6f:17:d9:62:3b:97:85:be:53:db:16:62:8a:
         2c:83:d9:51:b9:55:3b:7c:c3:56:0b:f1:68:78:89:ea:bc:a7:
         29:3e:40:1c
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUIUdCQUrx0U6u9a5xgQNHEiCGBFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzZaFw0yNzA2MDQwNzEyMzZaMDMxMTAvBgNV
BAMTKEVBNzM5RTUwNjY1OEUyMDgwMUM5QjY5OUZEMUYyQ0VDMzRBMkEzOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrJD3DCnTzUmjFq+1wHC4wKnm
UwExyc4uIlHsdpZYyhwvbPU7rkbXDzAi7T7eiAPu4KhuwCG8Tjp3mS6qMkvnBMGp
0ZflPnA4GeKitEAS6CYnnMKAhNuQz1ekSc3KW7Bz19akxqr2DiR0Vsl+drnSw2Qf
T8TYBT6HP/ikS1lgnYzWMi9AzjS2S+HWDid359wG3SNBOK72WTzcGd3J3w9x2DMu
X2ejiwZOYWBV6Kri3JS5kLi621HZifInr7hZpIeaCvEDEDRB2IumON0KhpmjlLro
lMJZ7Iu9dOWIvHKd/oM+UFm8KVMcA+xhabJwQN+9YB8Y8mHwdZyLD9r0SLSRAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU6nOeUGZY4ggBybaZ/R8s7DSio5owHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjE2NDI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwYcwDQYJKoZIhvcNAQELBQADggEBAFU3
Gz8VyKZ7n16SHuYoNdfev3WiDMvp/8LeOerHJEnvRWtFaKP3u2Lhj/fTgFSSZaok
c36mFNbDS5O8cp5ryvFYQrXefQU5gAPrYtWGD26KThUkWFn1i+A2isUdpJ9a9QXH
vxWkE6FFHHW1KKp1FTNFRP8KOswNgIWRYW3tI/xpZIka0sjK6JcW0MRDzW0OXxxC
+jrZ3aC9OGJCGmSDKIl8+tZchXqOvBKXWRVueDYY5lrBm9J/Jhnxjqk60QGRWtm/
jcSRwGpHLQ2BSn0rUsZUNGnVxI8rbpFCS486bxfZYjuXhb5T2xZiiiyD2VG5VTt8
w1YL8Wh4ieq8pyk+QBw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:47 2026 by rpki-client