Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51019.roa
File:                     AS51019.roa (raw, json)
Hash identifier:          Wem0nhsVulyFpNqozqCMuhVjXU6OJ8XRxdWi79b9tks=
Subject key identifier:   D7:A4:FD:9B:2D:5D:90:0E:C9:24:35:95:A7:D5:59:C4:BD:13:16:F6
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       DD092FBE4168BDEC92D3F5D50523A9FF1B650E
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51019.roa
Signing time:             Fri 05 Jun 2026 07:12:46 +0000
ROA not before:           Fri 05 Jun 2026 07:07:46 +0000
ROA not after:            Fri 04 Jun 2027 07:12:46 +0000
asID:                     51019
IP address blocks:        2a05:dfc1:b00f::/48 maxlen: 48
                          2a05:dfc1:ff00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            dd:09:2f:be:41:68:bd:ec:92:d3:f5:d5:05:23:a9:ff:1b:65:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:46 2026 GMT
            Not After : Jun  4 07:12:46 2027 GMT
        Subject: CN=D7A4FD9B2D5D900EC9243595A7D559C4BD1316F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d4:8b:c8:c6:a2:e2:5e:3f:d7:ff:ba:78:a2:
                    3f:87:bf:23:75:c6:b0:d2:52:e5:4e:e4:9f:f4:dc:
                    d4:1a:99:73:5a:e6:cc:71:cf:74:60:24:bd:ca:d7:
                    1b:40:2a:0a:a6:c7:37:c7:96:5f:9d:aa:d6:b1:f1:
                    b6:13:89:23:ef:48:c8:b3:ab:1f:9c:3a:57:51:20:
                    ff:d9:51:f6:62:50:db:0e:16:44:e3:95:4f:fb:6a:
                    fb:2c:e2:a4:d3:f1:da:29:36:4a:32:d0:1a:b2:af:
                    01:4a:46:85:84:8b:9f:98:72:98:0a:59:24:ca:6e:
                    9a:9d:a8:c8:12:05:70:de:26:ca:b4:82:f2:1b:23:
                    ab:66:c9:c9:db:43:86:9e:52:c5:bb:a3:51:70:71:
                    2d:27:21:fd:49:f1:cb:c4:9c:f3:3f:44:87:9a:1f:
                    6a:98:a8:53:39:f0:11:47:c4:5e:a0:af:ac:38:4a:
                    0e:f4:a0:18:b9:81:f2:db:a4:b8:1e:6e:da:6c:07:
                    40:29:a6:2f:f1:57:d7:be:44:b1:69:cc:86:23:29:
                    a7:c1:cc:bc:4c:00:dc:73:74:2b:8a:f9:31:9a:e1:
                    f0:a6:be:a5:c8:79:0a:1e:61:7d:3c:5c:fb:bf:31:
                    6e:8c:14:e2:fe:bf:e7:8e:5e:42:de:9c:f9:04:74:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:FD:9B:2D:5D:90:0E:C9:24:35:95:A7:D5:59:C4:BD:13:16:F6
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:b00f::/48
                  2a05:dfc1:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:b0:be:17:2c:cb:7a:37:6f:c3:30:82:ae:dd:2e:ee:70:
         69:b0:ed:cb:e8:3e:28:9f:b0:71:1c:3a:0e:7c:06:8e:48:cd:
         5f:28:ad:3a:a3:2d:e8:76:f3:78:a2:24:19:e0:2b:25:42:ec:
         52:97:f1:6c:ca:1d:6a:d4:66:20:58:d3:c2:e6:de:f9:ab:c5:
         b2:4d:f7:9f:74:2c:17:33:62:a3:f6:1f:37:0a:de:c0:01:2d:
         0a:43:6f:44:54:58:d9:8e:ac:b7:ce:13:78:5e:9e:07:a8:43:
         fe:7c:8b:16:b4:85:fe:a0:f7:d7:92:c5:57:8e:ec:18:d3:da:
         9d:bb:5b:c2:a5:af:9a:f2:c8:3b:22:c9:73:44:a6:d0:bf:04:
         87:f4:d0:99:04:aa:93:73:12:b4:c2:cc:29:9d:de:c5:a5:7f:
         59:20:7f:89:ea:84:6b:8e:41:19:3e:b5:e6:be:b6:3a:37:43:
         45:45:38:4b:ab:30:ed:a5:30:a8:dd:8b:99:ec:d8:4c:db:31:
         11:26:38:16:1d:ba:c6:f7:6e:4f:f1:d5:a0:f6:ba:c6:8b:7a:
         69:af:b0:e9:14:b7:7c:be:93:b9:00:9d:28:03:90:9e:b3:f9:
         88:75:f0:69:2e:8b:f2:28:48:74:f4:5c:38:e8:2d:60:be:b4:
         04:97:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:11 2026 by rpki-client