Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57110.roa
File:                     AS57110.roa (raw, json)
Hash identifier:          +vFSpyaqouxftAMLf/qchwGHMy66cieQUFXkapROfsQ=
Subject key identifier:   62:A1:7F:C1:9A:B9:02:A8:48:F6:18:9C:68:32:7A:68:9D:3D:44:51
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       5860A86FBE8E3ED3361887DE13939859AC4F31A1
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57110.roa
Signing time:             Fri 05 Jun 2026 07:12:16 +0000
ROA not before:           Fri 05 Jun 2026 07:07:16 +0000
ROA not after:            Fri 04 Jun 2027 07:12:16 +0000
asID:                     57110
IP address blocks:        2a06:9f81:1600::/40 maxlen: 48
                          2a06:9f81:1700::/40 maxlen: 48
                          2a06:9f81:1800::/40 maxlen: 48
                          2a06:9f81:1900::/40 maxlen: 48
                          2a06:9f81:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:60:a8:6f:be:8e:3e:d3:36:18:87:de:13:93:98:59:ac:4f:31:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:16 2026 GMT
            Not After : Jun  4 07:12:16 2027 GMT
        Subject: CN=62A17FC19AB902A848F6189C68327A689D3D4451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:bb:b8:72:ba:73:c6:50:61:52:41:ad:fd:
                    2b:65:8a:f8:14:23:ba:6e:ea:25:30:71:2c:04:c7:
                    26:eb:e0:94:b7:ff:52:19:b0:44:06:2d:4e:8e:41:
                    dc:07:54:72:0c:33:72:17:a6:7f:a0:dc:a0:b6:f6:
                    52:fd:44:f8:d2:59:3d:01:ca:1a:e9:3d:c1:75:7d:
                    78:42:8c:76:81:55:e2:a6:e3:8f:ce:1e:0e:a9:a8:
                    82:47:1f:f9:50:6c:ba:67:f8:87:e2:54:ca:26:df:
                    ee:8c:a6:1c:5b:d3:db:14:83:66:08:7a:d5:77:f7:
                    f4:cb:4e:d6:9a:96:c1:6d:d5:e1:6e:d9:0a:76:65:
                    24:8f:6a:58:88:33:dd:da:50:22:0c:68:3f:38:f4:
                    1c:89:81:b6:e6:d9:40:d8:5a:78:2c:6b:9b:f7:32:
                    9f:8c:4b:59:58:44:58:33:8b:12:3d:97:ff:16:3a:
                    59:ab:b9:fb:58:dc:b7:59:7f:86:cb:8f:8d:a0:ea:
                    57:45:20:5d:d6:e7:f7:9d:41:9e:0f:d0:3d:96:cc:
                    7f:9e:c4:9b:f3:b7:bb:65:2d:76:2e:04:f9:10:f8:
                    1d:d7:dc:b4:34:1f:8b:43:f4:7c:fe:cb:53:ae:c8:
                    00:9e:a9:c5:8b:02:4d:0b:34:22:bd:3b:28:ec:d6:
                    bf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A1:7F:C1:9A:B9:02:A8:48:F6:18:9C:68:32:7A:68:9D:3D:44:51
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:1600::-2a06:9f81:19ff:ffff:ffff:ffff:ffff:ffff
                  2a06:9f81:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:29:58:17:dc:c2:9d:07:c7:0b:83:d2:3c:b8:96:25:f9:
         04:3b:77:a4:95:ee:42:86:7c:b0:17:b4:a3:60:90:29:7a:6b:
         d9:f1:0e:2a:01:97:69:ff:90:cb:a1:24:8c:3f:88:f5:d0:b1:
         58:8e:df:17:ab:85:4f:dd:a9:2a:17:cc:2a:08:84:c1:3f:01:
         76:35:1f:7d:8b:be:0f:23:4a:81:bd:b4:c3:7c:7d:3f:c1:ca:
         bc:d3:06:28:d5:d7:be:73:78:c4:0d:c5:0b:df:b9:48:21:ca:
         29:ae:bb:4c:e4:98:97:1b:e7:c4:59:04:ed:35:eb:43:dc:8a:
         ad:e0:8e:95:f6:65:13:27:5c:77:24:15:78:7a:d6:db:ea:fc:
         a6:7a:44:5a:6d:89:77:c9:a0:93:87:69:f3:c1:8e:39:a3:71:
         4b:80:85:24:a6:64:5c:1b:b8:17:f4:74:09:ea:34:50:bc:0a:
         55:88:3b:30:b4:0e:d3:51:67:38:e9:fe:3f:0a:4a:52:6e:ba:
         2d:80:76:21:0d:3f:16:dd:f5:c8:b8:03:42:ef:43:08:cb:24:
         46:78:10:5b:5b:82:08:dc:8d:a4:03:01:0a:17:19:86:aa:00:
         8a:a8:b3:90:32:b9:e3:eb:76:a6:e4:44:41:a7:80:ea:cc:7c:
         8e:21:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:20 2026 by rpki-client