Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48231.roa
File:                     AS48231.roa (raw, json)
Hash identifier:          XTMEdWoE5KeLpHHz9wSjvIgnjGdWq0XLqL6nS5gJQVg=
Subject key identifier:   6F:81:1A:BC:7F:0E:6A:E1:E9:DB:6E:85:79:D4:50:BE:06:57:C5:3C
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       682FD6330B3A7EA38FB28A540F2363E4549F589A
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48231.roa
Signing time:             Fri 05 Jun 2026 07:12:27 +0000
ROA not before:           Fri 05 Jun 2026 07:07:27 +0000
ROA not after:            Fri 04 Jun 2027 07:12:27 +0000
asID:                     48231
IP address blocks:        2a05:dfc1:5e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2f:d6:33:0b:3a:7e:a3:8f:b2:8a:54:0f:23:63:e4:54:9f:58:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:27 2026 GMT
            Not After : Jun  4 07:12:27 2027 GMT
        Subject: CN=6F811ABC7F0E6AE1E9DB6E8579D450BE0657C53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:be:ac:8f:d9:82:fc:0a:88:91:39:27:da:
                    55:52:b3:cf:5e:d2:fc:d3:78:ae:78:aa:7a:e9:1e:
                    2c:77:e4:d1:c9:d3:25:da:8b:e3:c2:0b:68:62:ec:
                    1c:2c:07:26:2a:82:50:82:66:ad:e1:c3:a7:37:87:
                    e7:bc:6f:8d:9f:b6:58:3e:14:73:36:34:80:c9:58:
                    24:57:59:3c:fd:d8:46:cd:34:2f:02:cd:fd:e4:9c:
                    70:04:34:2e:0e:f8:ce:69:af:f1:35:18:bc:49:71:
                    bb:ad:ba:80:f3:5f:1f:89:00:87:7c:39:c7:df:88:
                    38:6a:07:9b:2a:79:7c:81:53:53:b6:d0:45:13:79:
                    16:4c:f3:f3:a0:cf:da:42:85:0c:34:93:c9:c3:20:
                    ea:73:fc:62:2f:4e:52:8a:e3:26:b2:19:50:41:63:
                    b0:ee:0f:40:7f:cb:45:62:04:d6:ba:4f:c9:49:8a:
                    f4:e5:97:12:e7:6d:21:38:90:cf:fc:63:de:5b:81:
                    62:a6:bb:1e:0e:15:f5:76:8b:e7:38:8b:bf:e2:95:
                    39:bf:f7:27:d6:4b:2c:a4:e7:99:ef:17:1d:a2:94:
                    d0:a4:c1:02:94:f1:8e:73:44:c4:80:a3:6f:ba:6f:
                    5c:cb:b0:cd:97:d2:4d:4b:80:25:c9:6a:e8:c6:49:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:81:1A:BC:7F:0E:6A:E1:E9:DB:6E:85:79:D4:50:BE:06:57:C5:3C
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:96:69:69:5e:e3:3f:4b:bd:dd:24:94:48:f7:6e:39:5b:ba:
         7d:63:c7:72:47:7c:46:d9:42:cb:37:f9:f2:f7:40:69:45:bf:
         c7:06:05:3d:eb:61:82:31:81:a4:c4:09:da:cc:84:44:db:37:
         45:da:e6:42:4e:51:ac:be:47:7f:b2:72:04:ae:0d:c1:4e:e0:
         6c:73:ce:5a:bd:da:96:11:46:4f:b8:c7:e2:b9:bc:75:10:c0:
         e3:57:1a:22:4f:fd:83:8d:c6:df:b6:ac:23:30:1d:39:ec:12:
         b1:76:1f:59:5f:15:7c:fd:f9:df:a7:c8:9a:d9:2a:3e:34:62:
         f7:56:46:19:4b:f5:d9:07:cb:cc:63:db:50:d9:7f:46:54:2b:
         53:9b:f9:bd:54:e0:7b:78:b6:71:35:80:79:b1:3c:0f:93:85:
         b7:a5:1a:47:1c:d8:3e:93:a3:b4:61:33:8f:70:d3:0e:5f:02:
         93:0d:e0:ee:af:a2:90:06:d0:be:4b:2c:44:28:9f:0a:c7:17:
         e4:19:0e:eb:d0:c8:99:60:b4:b8:63:7c:75:7b:39:a5:4b:a1:
         71:0f:f6:ac:89:29:ad:73:c5:a4:09:98:e4:c8:74:5b:cd:26:
         34:a2:04:cf:c1:f8:35:b5:74:66:b4:16:57:fb:14:45:85:be:
         93:65:4b:87
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUaC/WMws6fqOPsopUDyNj5FSfWJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjdaFw0yNzA2MDQwNzEyMjdaMDMxMTAvBgNV
BAMTKDZGODExQUJDN0YwRTZBRTFFOURCNkU4NTc5RDQ1MEJFMDY1N0M1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ab6sj9mC/AqIkTkn2lVSs89e
0vzTeK54qnrpHix35NHJ0yXai+PCC2hi7BwsByYqglCCZq3hw6c3h+e8b42ftlg+
FHM2NIDJWCRXWTz92EbNNC8Czf3knHAENC4O+M5pr/E1GLxJcbutuoDzXx+JAId8
OcffiDhqB5sqeXyBU1O20EUTeRZM8/Ogz9pChQw0k8nDIOpz/GIvTlKK4yayGVBB
Y7DuD0B/y0ViBNa6T8lJivTllxLnbSE4kM/8Y95bgWKmux4OFfV2i+c4i7/ilTm/
9yfWSyyk55nvFx2ilNCkwQKU8Y5zRMSAo2+6b1zLsM2X0k1LgCXJaujGSRd3AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUb4EavH8OauHp226FedRQvgZXxTwwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTNDgyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BXjANBgkqhkiG9w0BAQsFAAOCAQEAMJZp
aV7jP0u93SSUSPduOVu6fWPHckd8RtlCyzf58vdAaUW/xwYFPethgjGBpMQJ2syE
RNs3RdrmQk5RrL5Hf7JyBK4NwU7gbHPOWr3alhFGT7jH4rm8dRDA41caIk/9g43G
37asIzAdOewSsXYfWV8VfP3536fImtkqPjRi91ZGGUv12QfLzGPbUNl/RlQrU5v5
vVTge3i2cTWAebE8D5OFt6UaRxzYPpOjtGEzj3DTDl8Ckw3g7q+ikAbQvkssRCif
CscX5BkO69DImWC0uGN8dXs5pUuhcQ/2rIkprXPFpAmY5Mh0W80mNKIEz8H4NbV0
ZrQWV/sURYW+k2VLhw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:17 2026 by rpki-client