Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49548.roa
File:                     AS49548.roa (raw, json)
Hash identifier:          +oRgsh91bjfDTgSm0AvWkI2XrVkVKlkv+HrsWV4gP8w=
Subject key identifier:   DB:15:D2:E4:1A:F4:76:4B:CE:45:63:E1:E2:AB:75:29:97:AD:DD:8D
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       4B056F336892D9DC50F544FB946F037503A0D140
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49548.roa
Signing time:             Fri 05 Jun 2026 07:12:08 +0000
ROA not before:           Fri 05 Jun 2026 07:07:08 +0000
ROA not after:            Fri 04 Jun 2027 07:12:08 +0000
asID:                     49548
IP address blocks:        2a0a:6040:df00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:05:6f:33:68:92:d9:dc:50:f5:44:fb:94:6f:03:75:03:a0:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:08 2026 GMT
            Not After : Jun  4 07:12:08 2027 GMT
        Subject: CN=DB15D2E41AF4764BCE4563E1E2AB752997ADDD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:98:92:93:94:cf:15:07:27:fe:e2:92:29:
                    49:99:1c:ec:13:da:5b:88:13:82:f2:90:eb:48:2a:
                    3a:46:39:54:6e:1f:4d:9e:6c:31:99:02:74:cc:92:
                    3e:c0:dd:27:99:83:a6:25:43:1e:4c:8a:4b:05:36:
                    51:61:45:d2:53:44:28:67:95:97:d2:f2:24:2c:26:
                    b0:29:58:3c:14:8a:a3:22:c6:ce:0b:80:35:a8:54:
                    ba:aa:ba:4d:b8:e2:12:13:79:ea:a1:43:20:40:d0:
                    d6:30:b8:f8:8b:51:7e:16:7e:5f:6e:2e:92:1f:63:
                    82:c5:a6:e0:36:18:8f:3b:3d:61:f7:e0:2e:76:5d:
                    b9:e3:b3:ad:73:55:54:93:73:a4:6e:44:a4:5d:b0:
                    58:c6:23:91:ff:f1:02:00:d6:5f:a1:3c:38:f8:95:
                    b0:fe:af:81:ca:56:12:24:66:5d:a0:1e:bd:05:5c:
                    ec:e7:16:59:85:13:a9:ef:aa:76:8c:ea:28:d0:3b:
                    91:53:41:13:1c:75:a7:24:27:33:91:82:d0:61:50:
                    1a:d6:16:2c:e2:65:7d:95:23:95:b5:ef:a6:1c:57:
                    8f:fb:f4:9c:82:c4:89:c6:3f:c8:15:ad:fe:f1:b5:
                    b3:5d:aa:14:fd:56:58:6f:d2:36:b2:52:34:ee:d4:
                    08:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:D2:E4:1A:F4:76:4B:CE:45:63:E1:E2:AB:75:29:97:AD:DD:8D
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:df00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:05:32:f8:22:8d:4a:11:8e:24:ef:8d:ec:f3:b1:bf:2e:e0:
         77:90:17:64:5a:d7:bb:08:ab:15:47:60:eb:cd:c4:29:fe:45:
         ae:e7:35:be:be:bd:e8:7b:71:fe:51:00:2e:f1:31:0d:14:2e:
         94:7c:94:3d:3d:28:9f:9f:5b:9f:a9:35:22:70:3a:37:7c:b4:
         e9:39:8f:a8:c5:bb:02:1a:d9:00:34:7f:c7:19:f2:b0:24:7c:
         08:e8:aa:12:72:b0:bc:63:ff:66:ab:b6:c9:9d:66:24:2b:06:
         55:03:9f:c2:bf:0c:65:c4:0c:08:84:ee:ee:6b:b9:1f:cc:76:
         d3:44:76:0e:03:54:a4:26:56:44:65:1e:e0:3e:6b:93:79:bd:
         7b:cf:3a:23:57:2a:ca:34:c0:44:f5:4d:f6:21:4c:08:6b:85:
         ae:2c:eb:dd:f0:47:ec:0f:d1:98:30:a8:c1:3b:fe:1a:c5:1a:
         52:c7:02:7c:8a:d1:03:b6:df:9f:73:30:5d:5d:1b:28:0e:53:
         70:41:59:1f:a0:47:58:62:ce:a6:7e:ee:1b:3c:96:88:49:b6:
         5f:16:66:e1:b0:e7:4c:2e:1b:52:c6:12:36:70:30:0a:e9:2e:
         5c:08:22:01:1b:ce:04:09:aa:3c:15:22:f3:11:a0:7d:af:34:
         09:0b:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:24 2026 by rpki-client