Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58270.roa
File:                     AS58270.roa (raw, json)
Hash identifier:          TfWfY9Ti7zxaqkPr9lIT/whbQG9B5v2Tdlmp/PwoZwM=
Subject key identifier:   75:F9:EE:4A:12:55:37:23:C4:5C:8E:4A:3A:9F:F5:FB:A6:46:54:35
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       41854520366ED2C6B5736BBE2E91DA4D7E9D3A38
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58270.roa
Signing time:             Fri 05 Jun 2026 07:12:25 +0000
ROA not before:           Fri 05 Jun 2026 07:07:25 +0000
ROA not after:            Fri 04 Jun 2027 07:12:25 +0000
asID:                     58270
IP address blocks:        2a0a:6040:5200::/40 maxlen: 48
                          2a0a:6040:6200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:85:45:20:36:6e:d2:c6:b5:73:6b:be:2e:91:da:4d:7e:9d:3a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:25 2026 GMT
            Not After : Jun  4 07:12:25 2027 GMT
        Subject: CN=75F9EE4A12553723C45C8E4A3A9FF5FBA6465435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:ac:57:65:75:4a:72:c7:33:c8:62:43:72:
                    58:24:f7:56:81:ba:54:37:8d:bf:dc:0e:24:56:bb:
                    15:08:bc:4f:24:79:3f:a0:a7:93:83:76:62:63:99:
                    06:fe:d2:c8:de:52:f8:57:60:f1:89:e5:ec:77:44:
                    4c:bd:dd:21:71:71:bb:a5:48:89:e2:de:0a:ec:14:
                    af:75:c7:4e:1b:f5:3d:40:59:fa:51:b5:c7:b6:1c:
                    8f:40:d4:20:c7:ac:8b:27:4f:04:71:2d:c5:31:69:
                    aa:c1:d5:91:18:ea:db:b3:71:bb:9d:06:92:a8:ab:
                    c6:bb:a5:8c:80:27:16:85:47:23:47:5b:3a:23:59:
                    70:32:c5:0b:40:ff:cc:45:de:22:b9:a5:43:41:75:
                    c3:2a:ca:c2:7e:59:aa:c5:ff:e2:e8:36:8e:e3:f8:
                    af:37:5d:ec:de:b5:b1:0e:1f:e8:98:08:e8:88:de:
                    a6:2b:fc:16:a1:39:3e:f1:36:03:87:ca:05:fa:c0:
                    33:ea:57:f0:7f:52:bf:c0:17:2a:92:ca:94:90:ae:
                    6f:c9:98:2e:61:9b:89:7f:38:e0:cd:2e:9c:8f:3e:
                    fd:08:db:fa:87:ce:d7:51:94:73:46:a8:54:03:33:
                    01:98:33:63:f1:7a:14:30:b8:f7:b0:5b:dd:e2:8e:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F9:EE:4A:12:55:37:23:C4:5C:8E:4A:3A:9F:F5:FB:A6:46:54:35
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58270.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5200::/40
                  2a0a:6040:6200::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:80:55:ce:5b:e8:24:b4:c7:84:64:4c:fe:82:30:03:58:
         c1:0b:ce:b8:3f:03:ca:56:f6:21:6f:7b:1d:88:ad:7d:04:60:
         3e:92:d7:0c:e6:ce:46:97:d7:72:b7:ac:f0:8a:c5:e5:9a:33:
         d4:a7:df:e2:58:ef:dd:79:08:cf:c3:fb:a2:7f:c0:41:3c:7d:
         88:ae:2c:31:f3:da:66:fc:73:12:3f:75:5f:dc:17:90:fb:bc:
         27:76:1c:e0:f2:93:ab:3e:05:5e:be:a9:f3:01:11:2c:0f:87:
         24:ba:12:2d:d4:e6:f0:fa:6a:74:5a:d5:80:d3:a6:41:39:eb:
         20:b6:d7:fe:84:5e:4a:55:23:fa:59:8b:8e:b6:49:bd:a7:52:
         89:59:da:27:df:18:a8:bb:db:9b:f9:d1:89:58:ed:16:83:76:
         3d:57:7b:42:06:e0:3f:da:fe:78:3d:0a:ad:7e:68:31:15:ec:
         f0:52:f8:69:d6:6c:65:99:8e:12:81:e2:d7:3c:e1:5e:9e:64:
         9f:db:26:bc:eb:42:2b:5a:3f:7f:0b:ee:d4:03:ac:01:b0:17:
         f6:13:e6:7e:ca:d3:4c:a9:3b:c5:5b:c5:ee:b5:47:5f:83:3c:
         8d:da:74:d2:61:c6:60:24:bd:c4:de:07:e2:22:7a:00:74:cc:
         bd:a2:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:02 2026 by rpki-client