Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49105.roa
File:                     AS49105.roa (raw, json)
Hash identifier:          iydJhbGACCPluhjmoKIrNWw9EkSp65XSY2RtD+jFpT4=
Subject key identifier:   75:4B:27:5D:0E:9F:BF:59:C4:87:F5:EE:6F:D8:0D:9F:BC:AE:0F:C2
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       2BF4394E7CB8AF90E8AFA027266415EFEE7C394F
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49105.roa
Signing time:             Fri 05 Jun 2026 07:12:47 +0000
ROA not before:           Fri 05 Jun 2026 07:07:47 +0000
ROA not after:            Fri 04 Jun 2027 07:12:47 +0000
asID:                     49105
IP address blocks:        2a0a:6040:7900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f4:39:4e:7c:b8:af:90:e8:af:a0:27:26:64:15:ef:ee:7c:39:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:47 2026 GMT
            Not After : Jun  4 07:12:47 2027 GMT
        Subject: CN=754B275D0E9FBF59C487F5EE6FD80D9FBCAE0FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:29:21:9a:f7:44:19:96:2f:6c:b1:67:5e:47:
                    0b:c9:53:e7:f7:e1:e6:31:a5:c4:45:88:0b:0d:68:
                    90:23:1c:1e:8c:eb:5a:c5:6e:54:21:12:e2:9f:4b:
                    82:eb:31:c2:ae:e6:33:27:0a:66:b8:ba:de:fa:42:
                    ff:ff:ac:f7:43:58:f7:0d:bb:a1:ee:06:d2:82:4f:
                    e1:42:c4:f9:61:45:bf:64:08:a9:f9:52:b5:72:f6:
                    23:9a:33:d1:aa:40:8c:f0:28:86:c9:30:83:6e:60:
                    11:c5:3c:28:b8:2d:ff:6a:7f:28:31:f4:f7:24:c2:
                    f3:4b:5c:36:c2:05:99:71:91:6c:2c:15:83:4a:8c:
                    78:fc:8a:e0:36:a4:27:79:c2:95:83:74:33:a4:6f:
                    47:bb:09:91:10:07:e3:c4:cd:b5:46:b9:22:82:d6:
                    61:d0:5f:1b:07:09:e8:2d:7c:89:48:fe:a3:04:b5:
                    eb:a5:ce:2b:84:02:05:40:6c:a2:a9:e1:83:18:87:
                    df:c9:ad:8f:2b:84:54:5a:05:ea:96:12:c8:f7:10:
                    b0:c0:19:ef:7f:22:17:00:59:23:88:9d:43:69:bb:
                    44:eb:73:92:d8:53:1b:b7:29:b9:db:c1:56:59:0a:
                    a8:25:1d:c9:b0:4f:8f:33:c2:fc:46:d9:70:6e:c2:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4B:27:5D:0E:9F:BF:59:C4:87:F5:EE:6F:D8:0D:9F:BC:AE:0F:C2
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7900::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:85:2c:5a:20:7d:f8:e2:05:a4:06:28:3f:f5:8e:cf:78:4e:
         d8:93:2a:1a:95:7d:c9:0a:b1:9f:24:a8:a5:e3:92:b5:60:8d:
         e2:29:49:e6:a9:4d:4b:82:10:0a:65:a9:4a:20:fb:65:7e:56:
         9b:75:73:8f:50:70:7e:1a:2a:6f:e4:d1:ee:ae:af:b9:3d:be:
         ad:dd:ac:72:aa:38:5a:d0:71:8a:01:3e:e0:a3:3b:5b:a3:ce:
         30:cd:dc:cf:8b:7e:9c:4a:0f:dd:f1:3a:65:90:3c:99:a6:b0:
         33:87:b9:d9:66:4f:36:5c:c3:9f:bc:0e:4a:ff:7a:6f:38:96:
         40:62:f7:3f:4e:0b:fb:07:d4:75:31:9b:68:d3:b8:6c:23:13:
         65:77:7a:16:d1:bd:e0:a8:90:1d:69:d9:7e:52:eb:09:7a:f2:
         6e:1d:08:76:d1:40:8a:65:d5:ad:a5:6a:c3:a8:ba:26:7e:92:
         0c:4a:ff:95:f1:38:40:82:32:43:01:07:41:48:02:a7:9d:65:
         ba:3c:82:73:05:bc:49:91:60:c2:51:27:08:25:57:50:04:3c:
         a6:bb:01:51:76:ac:9c:42:56:24:86:be:a7:8f:b3:72:8c:36:
         32:7c:80:ba:bd:d9:9a:d2:01:ec:e5:08:de:d8:a0:e8:9a:09:
         dd:b4:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:12 2026 by rpki-client