Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57974.roa
File:                     AS57974.roa (raw, json)
Hash identifier:          8PtT/RE26P8yUpFXjWnNvvzI9n7IqLMz4EA+MwWEjzU=
Subject key identifier:   07:47:2F:86:79:CB:4B:D6:ED:F1:4F:58:CC:9E:8B:B9:7E:D6:61:65
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       308578E505C7D9B82C08139F771BB46395665342
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57974.roa
Signing time:             Fri 05 Jun 2026 07:12:15 +0000
ROA not before:           Fri 05 Jun 2026 07:07:15 +0000
ROA not after:            Fri 04 Jun 2027 07:12:15 +0000
asID:                     57974
IP address blocks:        2a0a:6040:6f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:85:78:e5:05:c7:d9:b8:2c:08:13:9f:77:1b:b4:63:95:66:53:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:15 2026 GMT
            Not After : Jun  4 07:12:15 2027 GMT
        Subject: CN=07472F8679CB4BD6EDF14F58CC9E8BB97ED66165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:88:10:c7:b1:fe:4d:2c:4b:85:c8:7c:9c:39:
                    2c:f3:ef:b1:9e:a3:0a:0c:1c:08:56:cf:5c:23:eb:
                    e4:bb:05:4b:83:f9:6b:c0:dd:7b:04:df:d5:3b:de:
                    ab:a4:be:1e:90:8e:60:3f:53:16:bc:f7:bb:31:b6:
                    d6:b7:df:13:1e:8d:b9:86:1d:91:d8:0d:b4:d0:06:
                    1a:05:6d:32:c0:65:04:51:28:3c:79:f5:a1:14:61:
                    cf:92:c8:09:66:5c:6e:1d:5d:a8:6c:28:67:77:0c:
                    32:bd:93:a6:b4:df:9f:5e:d9:e4:da:e1:52:1a:6b:
                    05:33:21:a5:79:7a:98:dd:32:c7:4f:3e:a9:6f:4f:
                    d3:18:90:8d:10:76:16:39:f0:a4:d6:4b:94:bf:97:
                    5c:6c:8d:8b:3f:61:6c:bf:c5:9c:63:46:31:26:bd:
                    16:4d:b4:47:d7:cb:53:fa:4f:5b:ae:12:92:f6:66:
                    21:17:29:ae:ec:e8:b6:4a:52:28:56:57:26:9c:90:
                    69:b1:1e:d3:86:a9:2d:2f:e6:8f:ea:6c:29:83:7b:
                    20:2e:84:0d:c9:2a:45:82:9e:2e:ba:66:1f:fb:b9:
                    f3:fa:f8:27:d4:ba:e0:5c:a9:3d:84:3e:5d:5c:c8:
                    5e:97:3c:7a:ca:8d:0b:eb:a6:4a:80:8d:13:e8:a7:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:47:2F:86:79:CB:4B:D6:ED:F1:4F:58:CC:9E:8B:B9:7E:D6:61:65
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:91:df:4f:35:67:29:c9:4b:94:38:ba:34:19:69:65:d9:b2:
         29:79:74:f9:97:de:e9:15:8d:4b:ba:e6:52:58:59:e7:5e:39:
         e1:c6:04:65:01:b8:04:6b:5f:6d:fe:fd:c3:7c:38:de:b1:48:
         60:59:5a:2e:95:6e:3d:e3:61:90:1c:8d:97:31:8f:31:0d:24:
         77:b0:fb:2f:5b:f5:3e:f8:b3:48:79:86:39:fa:47:87:86:e0:
         0f:0c:c7:10:5b:ad:73:91:f3:65:1f:2b:c6:3b:78:ee:f5:00:
         50:7e:e5:28:f2:9b:5b:9d:df:0d:2d:49:52:ed:53:8d:8f:05:
         09:08:e6:88:01:3f:53:73:d8:04:8f:46:4a:02:69:8c:09:8e:
         1c:cc:ce:49:02:bc:54:e0:cf:b1:10:66:07:21:cb:c3:62:9e:
         c9:b8:4b:b0:10:7a:77:f3:3e:b1:57:ab:a1:70:d8:3a:e1:e3:
         6d:5c:9c:5c:9b:a6:12:34:b2:3e:e7:fa:ae:0a:c4:51:0d:e9:
         22:88:62:b6:d4:72:db:97:84:26:35:52:e4:d5:ce:9a:60:dd:
         58:21:6c:d0:f6:52:3a:66:36:c1:60:c0:63:e9:a1:12:e0:69:
         7c:6a:51:b2:03:43:c7:a1:e2:7d:f3:0e:fd:15:90:f2:60:2a:
         77:b0:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:12 2026 by rpki-client