Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199925.roa
File:                     AS199925.roa (raw, json)
Hash identifier:          j7Jtc+Gl4irWYrxeDlDwczE33DftlFQuodbY75SufFk=
Subject key identifier:   F3:54:86:A3:13:BF:6B:AA:BE:D8:61:D4:CC:B8:F8:D2:30:91:60:A5
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       3D31DD0CFA4577B0B25FB13C7F77452C7D24E96E
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199925.roa
Signing time:             Fri 05 Jun 2026 07:12:21 +0000
ROA not before:           Fri 05 Jun 2026 07:07:21 +0000
ROA not after:            Fri 04 Jun 2027 07:12:21 +0000
asID:                     199925
IP address blocks:        2a05:dfc1:100::/40 maxlen: 48
                          2a05:dfc1:3700::/40 maxlen: 48
                          2a05:dfc1:3d00::/40 maxlen: 48
                          2a05:dfc1:5100::/40 maxlen: 48
                          2a05:dfc1:5200::/40 maxlen: 48
                          2a05:dfc1:5c00::/40 maxlen: 48
                          2a05:dfc1:9900::/40 maxlen: 48
                          2a0a:6040:8f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:31:dd:0c:fa:45:77:b0:b2:5f:b1:3c:7f:77:45:2c:7d:24:e9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:21 2026 GMT
            Not After : Jun  4 07:12:21 2027 GMT
        Subject: CN=F35486A313BF6BAABED861D4CCB8F8D2309160A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:5b:6f:0c:df:72:55:f9:ac:03:30:06:2d:
                    c0:ed:95:db:c4:36:95:30:80:f9:21:f9:eb:aa:ba:
                    ba:da:9f:29:72:9f:9f:77:3e:58:b9:25:45:fa:3a:
                    26:ce:9c:b1:96:cf:e9:57:fb:36:d5:87:fd:20:9a:
                    a9:26:71:15:62:b8:85:48:7a:a3:44:70:7a:d8:20:
                    02:45:cf:9d:f4:7d:5a:65:dd:ba:5f:2e:37:59:ef:
                    e0:f6:2b:bc:00:39:e0:6d:31:5d:ea:2f:de:71:67:
                    38:5a:3f:9e:a8:19:2e:83:9c:f2:be:ee:c4:b7:bd:
                    43:08:f0:ed:e4:7d:a5:54:63:d3:b8:c6:63:04:c2:
                    78:d3:14:d5:05:d4:c7:fb:99:a1:b6:91:ea:8c:0e:
                    aa:b9:5b:73:07:85:5b:8d:e9:29:63:93:e6:7d:60:
                    95:3b:23:2a:f7:b9:ed:c9:13:df:ec:82:32:de:11:
                    24:43:4e:6b:ff:81:4c:8c:7e:f9:4a:8f:f9:5e:f8:
                    a6:88:03:15:85:bf:22:75:72:d8:2c:06:7c:96:2c:
                    dd:40:8a:2e:de:6b:30:3d:76:83:ca:6a:f4:d6:c4:
                    4f:8b:6d:92:87:da:a9:d4:78:e9:a0:30:48:9e:e0:
                    58:8a:65:fe:4e:49:32:3c:dc:44:13:08:71:cb:84:
                    16:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:54:86:A3:13:BF:6B:AA:BE:D8:61:D4:CC:B8:F8:D2:30:91:60:A5
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199925.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:100::/40
                  2a05:dfc1:3700::/40
                  2a05:dfc1:3d00::/40
                  2a05:dfc1:5100::-2a05:dfc1:52ff:ffff:ffff:ffff:ffff:ffff
                  2a05:dfc1:5c00::/40
                  2a05:dfc1:9900::/40
                  2a0a:6040:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:00:d3:8e:d4:38:d2:39:0c:d5:68:48:46:f1:10:90:c0:81:
         32:58:9a:aa:35:6a:d4:95:cd:12:43:b0:97:e4:66:53:3a:b9:
         b1:27:8a:9b:2e:c4:a8:5b:a8:f9:cb:d9:c9:7e:24:b7:85:a6:
         c6:7c:a6:05:57:cf:d2:f3:49:48:64:f8:e6:2d:88:b2:f0:61:
         05:94:a3:61:45:68:36:a0:47:55:00:27:f7:55:6f:42:3d:1e:
         87:0d:16:65:6d:c0:36:20:1b:96:2d:c0:bc:c7:88:e5:7c:45:
         76:2c:b8:48:c9:69:f6:b1:35:1f:e3:b7:88:6f:a5:3f:ca:c9:
         42:b1:ac:ad:00:12:7d:8c:19:5a:aa:8b:e5:81:93:cb:0f:f9:
         49:89:9f:4e:29:00:12:84:c4:7e:47:d3:31:0a:c5:07:46:b4:
         b1:f7:ee:a4:45:57:8e:5a:a6:de:a2:ed:12:7b:35:15:28:ae:
         39:d1:14:1d:ea:b1:fb:ce:50:77:b4:ac:75:77:73:2e:db:65:
         6b:b5:34:25:10:3f:16:05:da:30:53:e3:be:af:6c:82:68:85:
         3f:7d:1d:75:14:ff:19:78:ff:29:a2:86:e2:c3:47:8d:b8:bf:
         66:87:ae:a0:59:be:b7:4b:d8:56:dd:92:fb:50:94:39:5e:db:
         4e:f5:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:34:01 2026 by rpki-client