Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58212.roa
File:                     AS58212.roa (raw, json)
Hash identifier:          ZFh7COgOgz1f2twmN9DZyVWUIKJ5KBnLBEqT6Fm83Uo=
Subject key identifier:   69:DA:5D:15:7C:50:1E:8B:E5:04:4A:EA:FA:B3:E0:CD:92:87:39:64
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       793E3E779B016CD8D0971E1BF1A001E0888E0DFB
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58212.roa
Signing time:             Fri 05 Jun 2026 07:12:39 +0000
ROA not before:           Fri 05 Jun 2026 07:07:39 +0000
ROA not after:            Fri 04 Jun 2027 07:12:39 +0000
asID:                     58212
IP address blocks:        2a05:dfc1:5800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3e:3e:77:9b:01:6c:d8:d0:97:1e:1b:f1:a0:01:e0:88:8e:0d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:39 2026 GMT
            Not After : Jun  4 07:12:39 2027 GMT
        Subject: CN=69DA5D157C501E8BE5044AEAFAB3E0CD92873964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:38:1b:3a:94:e7:98:62:b2:60:c3:ae:8f:
                    58:24:ab:d9:e2:a7:df:94:da:ce:e9:34:eb:74:f7:
                    1f:8b:db:21:b7:eb:d1:33:e5:27:f3:ac:3c:76:8d:
                    00:91:b1:ea:68:bd:42:44:64:35:de:8c:51:8d:e8:
                    eb:db:81:c2:45:3c:52:52:66:f4:a0:30:3d:4b:64:
                    84:3d:ab:f6:60:5d:48:66:e0:e6:0a:29:55:9a:cf:
                    9f:55:c6:99:91:5f:ee:08:3f:b1:20:9d:8e:7f:f2:
                    0a:7a:92:e8:f3:dd:b4:ae:9d:5f:49:ec:d3:f3:8b:
                    63:90:17:10:d0:39:21:1f:a6:3a:1f:a8:ab:91:c4:
                    ce:6a:4f:5e:43:22:1d:39:69:41:5a:af:6d:aa:0a:
                    fe:bc:0d:07:0b:62:ee:9b:66:f8:22:cb:a9:49:d4:
                    fd:80:9b:64:7a:3c:be:1f:5c:2c:f5:93:ac:fa:30:
                    e0:8d:5e:10:5e:72:4e:f8:b0:5f:87:59:00:c3:9e:
                    e2:75:b6:65:d6:a5:af:7e:7e:95:86:22:36:34:46:
                    41:9b:52:20:cd:0b:b7:fc:be:ce:68:e7:66:fd:5c:
                    11:f8:41:3f:6c:b7:c2:1e:a3:27:8d:65:ef:74:81:
                    f1:8d:ec:8a:71:2f:c2:e0:cc:6c:24:92:10:dd:11:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DA:5D:15:7C:50:1E:8B:E5:04:4A:EA:FA:B3:E0:CD:92:87:39:64
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58212.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5800::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:82:b5:3b:f7:60:b2:33:b1:76:27:27:6e:37:11:25:5e:9d:
         83:dd:5c:84:88:54:d6:8d:20:29:cf:a5:61:bf:1f:bf:77:01:
         a0:9e:b9:8c:16:1b:eb:a2:8d:85:de:6e:79:05:f6:79:4f:de:
         79:62:e1:1a:28:d8:37:cd:7c:c0:45:d6:18:9d:c5:01:04:12:
         25:b2:cc:fc:6e:2c:50:e8:af:83:1f:1d:df:43:84:5b:6b:ee:
         15:86:63:54:78:27:bb:d7:dd:44:3b:29:d0:d4:91:7f:ea:34:
         53:f2:01:51:61:81:42:19:be:1e:24:2d:ee:8f:8b:60:b4:f6:
         ad:c2:e1:b7:ef:6b:4f:2f:f5:88:17:cd:7e:ed:e5:8b:ab:1d:
         12:05:29:9d:72:b9:25:df:22:3b:58:b4:9c:97:a0:c2:86:54:
         1a:66:23:d3:46:31:ae:41:af:9d:f7:a1:3e:6b:17:83:b1:11:
         52:b5:0c:63:02:dc:0a:1b:91:94:34:f9:83:a6:ba:27:07:a2:
         9d:c4:f5:f6:33:a2:f4:da:4c:19:3b:d5:de:d3:55:59:7e:ba:
         08:97:29:a1:e7:f8:4e:66:15:85:70:d8:e0:0b:3c:ae:de:df:
         f5:e8:31:ad:b6:ca:79:eb:8d:7b:a3:a7:b8:a2:91:a3:a6:d5:
         3f:81:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:56 2026 by rpki-client