Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49286.roa
File:                     AS49286.roa (raw, json)
Hash identifier:          gZp6XXXDgDYihdlMaSm+52R3fSkzcRd0/0VaALJdnBk=
Subject key identifier:   51:86:49:E9:40:E3:F9:8C:FA:A0:B5:92:12:48:B7:D7:B2:16:AB:6D
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       61028F99AB49E2F66863F0B40264FDAC306F07AC
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49286.roa
Signing time:             Fri 05 Jun 2026 07:12:35 +0000
ROA not before:           Fri 05 Jun 2026 07:07:35 +0000
ROA not after:            Fri 04 Jun 2027 07:12:35 +0000
asID:                     49286
IP address blocks:        2a0a:6040:6a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:02:8f:99:ab:49:e2:f6:68:63:f0:b4:02:64:fd:ac:30:6f:07:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:35 2026 GMT
            Not After : Jun  4 07:12:35 2027 GMT
        Subject: CN=518649E940E3F98CFAA0B5921248B7D7B216AB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:c2:3d:de:e9:b1:ac:3e:9c:61:59:26:df:
                    8a:bc:43:81:90:da:dd:cf:d6:fc:10:aa:59:a5:02:
                    ef:e0:67:89:10:45:17:2b:f9:fd:d9:89:19:bf:5e:
                    35:8e:d7:bd:ab:76:65:b8:db:a3:8a:2b:0c:c2:cc:
                    3c:2b:d3:c5:38:e2:cd:a2:56:71:db:25:97:2e:fe:
                    91:e1:ab:29:b2:89:9e:ed:72:74:40:bb:f6:a6:ac:
                    f4:bf:d5:00:8f:cd:1f:e3:ea:a0:8a:7c:f4:b7:90:
                    eb:15:ef:3e:9e:6f:b0:66:ae:1b:ef:b0:57:32:fa:
                    f9:17:61:3f:7c:92:e4:13:62:fa:79:4e:8a:f6:e7:
                    b5:18:0c:70:d1:66:76:d0:2d:73:14:44:85:40:59:
                    1c:6f:00:3c:f3:0d:3a:85:8e:ba:5a:2d:c0:bd:e9:
                    75:7c:53:78:49:60:d3:d8:26:56:f7:68:1a:c9:e3:
                    1b:81:9e:2a:90:84:a0:3f:14:a0:29:2a:d2:d3:9b:
                    33:34:49:0c:a1:51:90:a5:c4:ca:43:28:24:ba:c1:
                    1c:d0:30:bd:77:a9:ab:af:ab:07:d4:cc:be:e4:e9:
                    d0:3d:9f:c7:24:32:11:da:6c:d7:39:41:1a:e1:c7:
                    18:7a:1a:1e:6d:3f:93:34:51:2e:48:51:18:7f:47:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:86:49:E9:40:E3:F9:8C:FA:A0:B5:92:12:48:B7:D7:B2:16:AB:6D
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49286.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:13:da:71:4e:49:bd:61:18:42:a6:09:b3:1b:4c:79:df:e2:
         e4:83:c5:17:db:87:a6:67:ad:26:a6:f7:f1:85:e4:ca:69:f3:
         a6:6b:de:a4:f5:cb:49:45:80:a7:df:22:0d:db:3f:ec:7e:bd:
         d2:08:d7:d6:b4:1d:52:f1:b4:e7:b2:1a:a1:05:4f:4b:66:03:
         40:ba:47:04:dd:56:e8:d1:46:02:ae:ae:95:a8:fd:b2:36:04:
         72:8f:6b:fe:47:cc:e2:67:9f:13:fe:d0:a4:12:a0:c4:de:ff:
         e1:1c:b9:b2:65:22:e1:57:77:99:d6:9e:33:81:37:09:74:7c:
         5c:b6:15:f7:14:ed:91:da:07:b9:5f:31:54:22:98:7e:78:71:
         3a:77:9c:d1:57:71:e7:f2:a2:2b:d8:06:c4:16:d4:47:db:7e:
         14:ab:e9:b4:54:51:c4:90:42:9f:6c:b2:9d:2b:31:84:f4:11:
         ba:32:db:a6:50:54:c0:4c:24:f1:45:45:e5:49:ee:48:a0:c4:
         4c:0d:f3:60:01:88:89:01:37:25:ee:15:5a:bc:79:99:ad:1a:
         55:ff:67:20:86:83:7e:7b:50:27:01:fa:34:79:73:70:4c:09:
         7b:65:aa:92:fc:e6:1c:38:d0:5d:79:df:aa:ab:e6:95:bc:bc:
         ec:67:fc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:22:57 2026 by rpki-client