Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS62435.roa
File:                     AS62435.roa (raw, json)
Hash identifier:          9XklU9tzF/+ZG1D02vhyi3QywaRGAcRIQspRB9WT4XY=
Subject key identifier:   58:16:D4:B7:BA:02:FE:F2:0A:23:3A:8D:A9:35:67:3B:4C:97:D6:B8
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       65E75C186DEE5F93F11AAA7DF58BAB19FA78B27E
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS62435.roa
Signing time:             Fri 05 Jun 2026 07:12:45 +0000
ROA not before:           Fri 05 Jun 2026 07:07:45 +0000
ROA not after:            Fri 04 Jun 2027 07:12:45 +0000
asID:                     62435
IP address blocks:        2a05:dfc1:7c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e7:5c:18:6d:ee:5f:93:f1:1a:aa:7d:f5:8b:ab:19:fa:78:b2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:45 2026 GMT
            Not After : Jun  4 07:12:45 2027 GMT
        Subject: CN=5816D4B7BA02FEF20A233A8DA935673B4C97D6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:74:ed:8b:20:3a:79:f3:31:1f:92:7b:d4:
                    4e:40:7c:a1:e5:c3:14:27:1f:87:f3:c1:da:a0:e4:
                    da:2c:f2:e1:6d:c7:ef:8d:b0:67:91:33:af:8f:25:
                    37:18:44:58:3b:d3:0e:4e:32:51:3d:4f:b9:8c:e6:
                    95:08:ba:9c:b3:8e:28:51:de:87:e3:4c:15:4b:41:
                    14:dd:1c:02:5e:e4:df:cc:18:c0:9c:27:6c:05:21:
                    4a:d7:25:a7:3d:27:f0:fe:6d:36:63:60:47:d7:a4:
                    0d:fa:85:17:17:57:6a:af:c6:7e:e0:fa:8b:6c:ca:
                    26:35:29:06:e6:56:d9:47:86:72:92:4c:5d:4e:ce:
                    7f:62:51:55:24:75:a4:78:b5:05:8a:23:46:f9:01:
                    51:c7:7e:45:e8:c0:ef:ee:da:24:2e:31:5c:45:32:
                    21:20:43:74:52:22:42:e0:d0:f5:e8:33:f3:7f:58:
                    b0:e4:a3:23:87:4a:8f:02:85:c4:46:4f:d1:55:d0:
                    10:be:30:15:f3:2a:3d:cc:d8:08:18:38:4c:90:33:
                    a9:47:21:23:6e:d1:ff:ce:82:b5:0d:94:ab:f4:81:
                    93:74:83:15:37:6c:d9:ec:66:8e:12:0f:73:f1:c2:
                    61:a7:3f:e3:65:e0:fe:80:de:e3:a9:24:c2:85:0c:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:D4:B7:BA:02:FE:F2:0A:23:3A:8D:A9:35:67:3B:4C:97:D6:B8
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS62435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:7c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         d6:dc:85:f1:f5:5d:2e:9e:dd:55:0e:43:12:c1:ed:0b:3e:71:
         2c:63:4a:8d:f5:40:8a:a5:c3:1f:61:4b:6e:13:09:be:a9:34:
         1d:b2:6a:cd:2d:02:1b:53:6b:7c:6e:bf:aa:e3:be:0f:26:4b:
         1c:da:ab:ae:d2:00:9f:e4:4f:7d:56:85:17:2d:1b:f0:1a:1e:
         1e:5d:97:d6:f1:44:74:f2:20:08:d0:35:5a:db:64:fa:d0:2b:
         b8:80:98:00:65:c3:fa:5a:fe:4e:8d:50:6a:c4:32:cf:04:e7:
         9d:31:cd:b8:b0:db:b2:da:c4:0e:ce:37:c4:11:6a:b8:29:b4:
         c2:85:12:7f:da:7b:a6:c1:46:2b:cf:54:29:c4:96:e5:45:99:
         c2:c8:94:4a:6d:4f:74:a9:a8:c2:15:18:4a:17:ba:0b:24:bc:
         73:c3:e4:bd:78:3d:24:33:0d:e5:d1:a8:55:1f:2e:8d:27:1b:
         86:d3:56:b8:d1:c1:23:f3:ec:b8:14:33:1e:ac:40:8a:6e:f7:
         eb:80:b6:a2:6e:78:27:8d:8d:26:df:5d:38:86:63:10:02:13:
         90:c9:40:c6:cf:cc:5e:65:ad:ed:e6:f0:db:23:7c:b8:81:ad:
         31:f8:a7:c9:77:40:d3:3f:49:62:83:cb:c3:d1:09:f7:9b:3b:
         21:03:26:51
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUZedcGG3uX5PxGqp99YurGfp4sn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDVaFw0yNzA2MDQwNzEyNDVaMDMxMTAvBgNV
BAMTKDU4MTZENEI3QkEwMkZFRjIwQTIzM0E4REE5MzU2NzNCNEM5N0Q2QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8HTtiyA6efMxH5J71E5AfKHl
wxQnH4fzwdqg5Nos8uFtx++NsGeRM6+PJTcYRFg70w5OMlE9T7mM5pUIupyzjihR
3ofjTBVLQRTdHAJe5N/MGMCcJ2wFIUrXJac9J/D+bTZjYEfXpA36hRcXV2qvxn7g
+otsyiY1KQbmVtlHhnKSTF1Ozn9iUVUkdaR4tQWKI0b5AVHHfkXowO/u2iQuMVxF
MiEgQ3RSIkLg0PXoM/N/WLDkoyOHSo8ChcRGT9FV0BC+MBXzKj3M2AgYOEyQM6lH
ISNu0f/OgrUNlKv0gZN0gxU3bNnsZo4SD3PxwmGnP+Nl4P6A3uOpJMKFDCgRAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUWBbUt7oC/vIKIzqNqTVnO0yX1rgwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTNjI0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BfDANBgkqhkiG9w0BAQsFAAOCAQEA1tyF
8fVdLp7dVQ5DEsHtCz5xLGNKjfVAiqXDH2FLbhMJvqk0HbJqzS0CG1NrfG6/quO+
DyZLHNqrrtIAn+RPfVaFFy0b8BoeHl2X1vFEdPIgCNA1Wttk+tAruICYAGXD+lr+
To1QasQyzwTnnTHNuLDbstrEDs43xBFquCm0woUSf9p7psFGK89UKcSW5UWZwsiU
Sm1PdKmowhUYShe6CyS8c8PkvXg9JDMN5dGoVR8ujScbhtNWuNHBI/PsuBQzHqxA
im7364C2om54J42NJt9dOIZjEAITkMlAxs/MXmWt7ebw2yN8uIGtMfinyXdA0z9J
YoPLw9EJ95s7IQMmUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:09 2026 by rpki-client