Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS36791.roa
File:                     AS36791.roa (raw, json)
Hash identifier:          OgYpKePI4JvDg0mzSeFXJrCRwEpgXSrUz8gnuvkg6Fk=
Subject key identifier:   3A:F5:04:83:BD:32:89:AE:23:05:F2:DF:74:85:F2:42:12:D2:06:7A
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       AB1DF074A13B7E32FBEFB4D9AFC2954B0C3DC3
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS36791.roa
Signing time:             Fri 05 Jun 2026 07:12:08 +0000
ROA not before:           Fri 05 Jun 2026 07:07:08 +0000
ROA not after:            Fri 04 Jun 2027 07:12:08 +0000
asID:                     36791
IP address blocks:        2a05:dfc1:1e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ab:1d:f0:74:a1:3b:7e:32:fb:ef:b4:d9:af:c2:95:4b:0c:3d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:08 2026 GMT
            Not After : Jun  4 07:12:08 2027 GMT
        Subject: CN=3AF50483BD3289AE2305F2DF7485F24212D2067A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:a0:69:a2:70:8f:9d:7f:87:f4:03:c5:3c:
                    65:19:88:ed:79:69:b4:65:62:5a:89:ae:4e:75:9e:
                    38:51:be:82:68:42:c9:28:9b:8d:8d:c2:93:15:64:
                    70:18:65:d4:ec:9e:24:db:ef:c1:e9:9b:a3:1d:83:
                    2f:4c:5f:a1:23:67:e9:48:97:3c:3c:ea:32:dc:ee:
                    09:24:9c:c5:35:1e:5f:8a:bc:51:3e:b7:4e:6f:7f:
                    d4:33:21:be:a2:db:bb:41:1d:ec:8b:60:b8:43:ad:
                    66:d4:e9:59:96:b4:a8:ef:de:69:47:95:ab:73:ff:
                    7e:5c:68:a2:2d:67:65:4e:4b:3b:03:7a:fb:95:27:
                    2b:c4:c5:d2:44:5a:ad:04:a3:f6:b3:f7:0c:06:99:
                    4e:b9:28:fd:43:cd:4e:eb:92:80:c6:a0:d7:43:9f:
                    49:61:0c:69:3e:53:e1:3e:34:81:16:88:26:22:34:
                    a1:b1:ee:a3:c7:b4:0a:be:86:ac:ab:a2:4f:eb:2c:
                    73:ab:bf:77:4e:82:a6:39:16:91:c0:06:24:43:aa:
                    b8:24:b1:29:e4:76:95:de:0d:6f:08:8e:83:a8:48:
                    e8:b7:e2:14:b7:8a:4e:17:fb:ac:9c:e1:f4:9a:e9:
                    d4:10:19:0b:94:01:f9:4a:12:b7:f7:3d:90:4e:e4:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F5:04:83:BD:32:89:AE:23:05:F2:DF:74:85:F2:42:12:D2:06:7A
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS36791.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:54:31:44:43:33:6e:8f:b7:68:cc:eb:2e:9c:4d:82:6b:c1:
         4b:28:b5:4a:79:c9:3b:b2:5f:90:95:3c:d1:5b:fd:cd:39:38:
         9c:54:d1:42:29:b4:e9:9e:d4:7b:e5:a9:3b:ee:54:dc:93:f7:
         24:d2:18:3b:ae:fe:60:42:cf:8d:2b:18:e2:82:70:1b:32:2a:
         96:a4:73:4e:61:34:cf:a6:46:29:e9:f0:dd:71:f6:cf:b2:38:
         69:5c:08:80:37:19:95:e8:54:f4:84:12:0b:ae:42:5a:2e:ed:
         3c:35:93:fc:56:e3:a1:9a:28:4d:7e:0b:3f:4f:4e:09:1c:38:
         a2:7d:4a:07:c8:26:b8:e5:c8:e1:8c:f4:b8:72:15:ee:12:bf:
         2e:ee:ec:d1:6d:af:f3:d6:3f:da:ab:e2:3c:25:74:74:a7:57:
         92:77:1a:90:c8:bd:a4:76:f4:74:b5:40:40:74:3e:11:e6:66:
         94:aa:58:09:4e:ca:ec:6f:da:f0:ee:dd:e6:17:7d:14:21:02:
         0a:e5:64:6c:26:8c:64:33:7b:54:62:13:43:e8:0a:02:3c:a5:
         77:d5:11:2a:1f:4d:8d:55:13:6b:91:1e:5c:76:9d:2e:26:f7:
         aa:55:88:f1:d2:67:fe:70:a9:04:c8:f4:1a:80:94:b2:ca:06:
         b5:b6:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:19 2026 by rpki-client