Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57308.roa
File:                     AS57308.roa (raw, json)
Hash identifier:          lS1yBk962LcmJiCMs3xU4co+4Fjfip8veYrLWr4i8uo=
Subject key identifier:   9E:C9:1E:87:0F:25:CC:8B:C0:D5:B1:E0:43:B1:D9:AD:70:0A:26:DE
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       3EC30ED7DD0E51CA4CA8EEC771F72945BE14D5EC
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57308.roa
Signing time:             Fri 05 Jun 2026 07:12:31 +0000
ROA not before:           Fri 05 Jun 2026 07:07:31 +0000
ROA not after:            Fri 04 Jun 2027 07:12:31 +0000
asID:                     57308
IP address blocks:        2a05:dfc1:4e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c3:0e:d7:dd:0e:51:ca:4c:a8:ee:c7:71:f7:29:45:be:14:d5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:31 2026 GMT
            Not After : Jun  4 07:12:31 2027 GMT
        Subject: CN=9EC91E870F25CC8BC0D5B1E043B1D9AD700A26DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:c6:e3:78:af:78:4b:a9:d5:45:04:95:3e:
                    cf:3d:ff:54:c9:08:ee:41:ce:55:56:40:ac:b3:2f:
                    0c:59:75:55:42:9f:79:63:12:0f:a5:ad:c4:68:83:
                    43:ca:5e:d7:d0:ec:a6:7d:14:37:5e:df:ab:d2:77:
                    78:2d:19:b4:31:38:ca:32:67:9d:d9:0d:e0:58:6f:
                    6b:c0:3f:e6:9e:a3:d2:d0:4b:a1:0d:8a:48:7f:26:
                    8c:cc:3f:54:a0:03:0c:71:99:11:96:0d:d4:9c:42:
                    4d:4b:73:43:4c:d9:fa:9e:40:74:53:25:fa:e4:d7:
                    82:2f:09:4d:11:8b:d2:8b:a7:68:bf:3d:97:0c:d5:
                    7f:90:a1:2b:95:a5:2e:cd:5f:c7:6d:7e:56:19:c8:
                    e2:3b:85:a0:d1:f6:2c:16:63:c1:d9:78:ee:5f:a0:
                    10:64:97:9b:d9:e5:32:05:af:0e:54:36:7b:f7:25:
                    00:05:73:6e:ac:bd:76:31:fd:11:3a:62:3a:05:5f:
                    2b:1d:23:24:1b:ae:6c:06:c6:a9:bd:2a:e1:9e:17:
                    7e:e2:b6:c7:34:91:a3:ac:2e:4d:6c:41:55:a4:99:
                    1e:f8:b9:ee:af:c2:34:6e:9a:0a:39:cf:1d:26:95:
                    dd:87:4f:c3:4b:81:36:14:f6:c2:97:74:d0:ce:85:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C9:1E:87:0F:25:CC:8B:C0:D5:B1:E0:43:B1:D9:AD:70:0A:26:DE
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57308.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:4e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:29:6d:1c:1e:89:f5:5b:87:58:93:8a:b8:86:ff:a2:10:6c:
         00:90:52:31:f9:b8:5a:87:bf:84:45:b0:a7:51:cc:e2:c5:a1:
         20:21:3a:dc:52:0d:9e:70:da:df:31:f6:b5:d9:b4:74:6a:2b:
         7d:4a:26:c8:60:5c:d4:a9:82:7e:27:ab:ae:a3:f7:bc:99:50:
         cc:d9:ba:05:de:88:18:2c:dc:1b:49:dc:7b:05:a7:57:ab:74:
         98:76:4b:b8:cb:12:ad:a7:ca:10:34:c1:ca:f6:71:60:16:04:
         14:1b:87:bf:9e:f9:6a:a6:42:3c:34:a0:30:d9:52:a9:98:83:
         06:08:f0:97:8d:b1:e9:5c:6f:50:4b:c9:76:92:7c:4e:25:ab:
         0d:89:5a:dc:92:10:af:b4:35:55:5b:a5:5c:96:0d:66:7d:c2:
         4b:62:5b:0f:29:a3:17:53:2e:ff:d6:d5:ca:c2:73:19:01:89:
         5c:34:26:dd:97:47:3f:c9:34:4a:d1:3c:90:01:e3:5d:ec:f4:
         f6:69:f6:ef:f8:e0:87:6e:a1:a8:ca:28:a6:6d:59:f0:2f:bc:
         4a:b1:f1:63:cf:9a:fe:cd:6f:b4:a0:81:fb:88:b8:a6:e8:1f:
         b1:9b:4c:53:e4:04:c6:0b:67:7c:b3:3b:d0:dd:51:66:94:cf:
         cb:fe:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:11 2026 by rpki-client