Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48818.roa
File:                     AS48818.roa (raw, json)
Hash identifier:          GfrZCT4RbJsuZ9YJQeiDgmFUK1SvwBaH8xitxH86SyE=
Subject key identifier:   9F:E3:D2:B1:DC:DF:E9:F9:18:7D:BF:6B:25:A3:38:B0:DF:C8:9B:FF
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       56C398B402B102BE0F793F5F65711D66A13C716D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48818.roa
Signing time:             Fri 05 Jun 2026 07:12:36 +0000
ROA not before:           Fri 05 Jun 2026 07:07:36 +0000
ROA not after:            Fri 04 Jun 2027 07:12:36 +0000
asID:                     48818
IP address blocks:        2a0a:6040:7c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c3:98:b4:02:b1:02:be:0f:79:3f:5f:65:71:1d:66:a1:3c:71:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:36 2026 GMT
            Not After : Jun  4 07:12:36 2027 GMT
        Subject: CN=9FE3D2B1DCDFE9F9187DBF6B25A338B0DFC89BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e9:41:f8:30:b4:a4:4d:34:14:2c:6f:0c:f8:
                    8f:83:30:a1:98:e0:48:9f:75:7a:60:3a:d2:4d:da:
                    57:6d:4f:58:7d:4a:b7:f3:c3:ac:bb:b9:59:14:be:
                    92:f5:23:f2:5d:ea:3f:5b:43:68:8c:5e:e6:32:f4:
                    c8:f0:5f:c2:a3:51:29:80:0f:d5:cd:58:fd:a7:09:
                    3b:73:13:31:f5:ba:bd:bd:e2:7a:c4:2f:4d:58:c8:
                    94:e0:6a:3d:63:66:55:63:ee:e4:c7:97:62:b3:44:
                    76:0a:b6:0e:81:9c:4d:06:1a:c9:cf:e7:f8:2f:45:
                    6c:a3:ba:cb:76:2e:f7:f5:ee:a8:b7:68:48:f5:d4:
                    59:1d:b6:d3:ab:a2:1e:f0:08:e1:9c:e8:61:be:07:
                    dd:ea:a1:5f:e5:43:33:d8:34:92:a7:93:e5:fe:5d:
                    1a:78:7e:09:6a:5d:84:50:f9:97:4a:dd:ca:08:cb:
                    cd:da:13:46:db:5d:f4:73:49:44:f7:63:a1:f9:4f:
                    6e:f8:84:c0:01:93:aa:cd:38:23:42:93:c5:24:39:
                    06:fe:0d:12:dc:a5:d4:31:88:dc:62:6b:39:8f:83:
                    1c:0c:d8:e8:fe:04:10:2b:ee:bc:5e:1c:b1:65:08:
                    d6:e8:fe:e0:cb:f8:42:d5:47:f1:c0:31:b3:64:38:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E3:D2:B1:DC:DF:E9:F9:18:7D:BF:6B:25:A3:38:B0:DF:C8:9B:FF
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48818.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:2d:1a:e7:07:c9:38:5d:2f:11:bf:93:cd:d4:e1:ec:93:88:
         0f:dd:bc:f4:b3:8a:40:46:9e:4b:71:50:6f:c8:02:ac:f2:9a:
         7a:f9:74:42:87:bf:a4:bc:6a:86:ed:cd:09:ef:a1:82:a6:b5:
         4f:5d:0c:55:67:6b:f5:76:7e:31:68:92:7b:9b:eb:b2:fb:d2:
         f1:22:2f:e4:bd:09:61:96:54:52:c3:ec:0b:d6:c6:e1:6a:eb:
         33:37:24:8f:73:1b:55:34:f0:43:ff:a1:f6:f7:56:ea:df:ad:
         55:e6:9a:35:8e:9c:5e:61:f8:1d:2f:b7:3b:8b:79:0f:07:66:
         1a:b4:d6:0b:1d:25:c8:26:97:b6:d6:63:b8:0f:d6:89:9d:0a:
         36:77:54:53:22:88:70:23:68:f4:3f:4e:df:ef:3e:fa:67:f7:
         b8:17:c8:30:f2:a4:8c:f9:37:12:f6:9f:2d:a8:63:53:9f:12:
         bd:3c:1d:70:69:19:9a:96:4f:d2:53:ea:8a:75:60:6c:bd:97:
         b0:f9:0c:b1:4b:a2:8f:db:b8:13:16:f6:85:f3:90:99:38:de:
         0b:e9:d8:cd:cc:60:19:b2:14:25:00:14:25:9f:cc:31:a7:65:
         31:51:02:50:6d:d9:17:a9:a8:45:ef:2e:2c:6b:7e:60:cf:ba:
         d7:6d:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:15 2026 by rpki-client