Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS60301.roa
File:                     AS60301.roa (raw, json)
Hash identifier:          9cF4ZFvayOBNpLu6eqD2igmiDUb7iY5rXCvdcP1eRAY=
Subject key identifier:   3C:05:23:18:DA:6B:86:86:E2:1F:AB:01:85:E8:8D:7F:A9:50:82:30
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       0BC4FB0F69E35F5C6FF2994E153B3FA2174874EE
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS60301.roa
Signing time:             Fri 05 Jun 2026 07:12:42 +0000
ROA not before:           Fri 05 Jun 2026 07:07:42 +0000
ROA not after:            Fri 04 Jun 2027 07:12:42 +0000
asID:                     60301
IP address blocks:        2a05:dfc1:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c4:fb:0f:69:e3:5f:5c:6f:f2:99:4e:15:3b:3f:a2:17:48:74:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:42 2026 GMT
            Not After : Jun  4 07:12:42 2027 GMT
        Subject: CN=3C052318DA6B8686E21FAB0185E88D7FA9508230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:df:cc:c0:8a:e7:65:19:9d:bf:f8:ea:fc:
                    a7:7b:8b:3d:24:31:ab:42:c3:64:ae:5a:12:31:b4:
                    54:12:5b:7c:1e:f6:13:c3:c1:3f:3d:a2:d8:a1:0d:
                    7f:b7:f7:cc:dc:29:11:3e:e3:8d:d2:12:c1:de:f3:
                    68:92:d7:4d:65:8b:ae:04:cc:80:68:3f:54:d8:46:
                    3a:77:88:5c:2b:42:f8:60:0f:fa:5d:c4:e7:66:81:
                    48:eb:9c:49:86:0e:6e:d6:21:e6:7d:d2:ea:cd:96:
                    a7:f1:e0:0a:1c:fe:98:2d:6e:2d:ca:d3:f9:29:4a:
                    2b:43:ed:ed:41:0a:95:69:cc:d1:6e:af:0e:87:11:
                    ef:77:d0:50:0c:2d:a4:01:52:ca:db:a8:f5:31:8c:
                    7d:67:13:9c:55:1f:f9:a4:6c:3e:9e:8e:7b:17:5d:
                    b3:8f:71:db:81:09:09:ed:9e:bd:5d:93:f6:ed:b6:
                    e7:36:1d:07:ad:94:68:28:e5:b4:5f:06:80:c1:20:
                    ff:fb:da:86:46:2f:0d:50:d5:ae:b2:98:9a:c4:51:
                    92:ea:e4:2d:8c:14:c1:2e:dd:50:61:42:8d:39:5d:
                    d0:28:87:4a:4e:c9:d1:c1:b1:a0:cc:67:e6:c8:46:
                    b9:a2:55:a8:f5:d6:e7:a7:d8:a1:5d:04:ad:b6:50:
                    67:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:05:23:18:DA:6B:86:86:E2:1F:AB:01:85:E8:8D:7F:A9:50:82:30
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS60301.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:4d:e8:0b:4b:db:d9:f6:02:34:04:53:36:f1:80:77:27:56:
         0e:d9:c1:32:54:8a:25:da:a5:77:51:62:b9:cc:70:b4:5a:d3:
         e9:4f:23:28:d8:d7:57:3d:6a:2f:65:a1:51:aa:48:b8:99:48:
         1b:b4:4a:85:00:6c:27:5b:37:9b:0f:98:70:79:06:87:e7:a8:
         d2:63:4d:07:c7:64:b3:89:2e:13:a4:dd:7f:36:c0:95:1e:5c:
         3a:a6:85:fe:56:6e:e8:5a:e3:c9:a2:b4:77:37:6d:95:00:18:
         96:ee:f7:85:41:1a:55:65:6a:cf:b6:c2:ba:37:5c:99:ff:12:
         39:90:94:c9:27:db:d5:83:1d:54:06:28:62:87:07:de:86:5f:
         4d:4f:e1:47:99:5f:7a:2e:ad:77:b5:e9:2e:d8:1b:d8:38:43:
         05:7f:7b:27:9c:d9:eb:d9:32:94:c8:b1:3e:ad:18:a4:83:d2:
         f7:0b:77:87:8e:6f:12:dd:09:28:f2:17:04:4a:4c:c8:84:c5:
         8f:95:2f:43:06:3d:7a:cc:48:1b:96:d6:8b:ac:7b:05:22:09:
         7e:94:4a:3a:7b:4c:f8:e5:97:22:85:f1:95:30:24:4c:fb:3b:
         d5:86:0e:87:d8:09:44:40:cd:40:97:1f:fb:7c:91:fd:b9:ea:
         c1:b9:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:15 2026 by rpki-client