Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200226.roa
File:                     AS200226.roa (raw, json)
Hash identifier:          Uqp/J5vRtG2tHq6PtH9BIzt4VjWkY3/iTvSgRvviLZ8=
Subject key identifier:   FC:70:CC:21:AF:E7:E5:6D:AF:F8:87:84:C1:A8:2D:7A:18:D1:C3:41
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       2B39B2C91090F503201BB5E1B3663BC9982EDC12
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200226.roa
Signing time:             Fri 04 Jul 2025 06:53:16 +0000
ROA not before:           Fri 04 Jul 2025 06:48:16 +0000
ROA not after:            Fri 03 Jul 2026 06:53:16 +0000
asID:                     200226
IP address blocks:        2a0a:6040:3a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:39:b2:c9:10:90:f5:03:20:1b:b5:e1:b3:66:3b:c9:98:2e:dc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:16 2025 GMT
            Not After : Jul  3 06:53:16 2026 GMT
        Subject: CN=FC70CC21AFE7E56DAFF88784C1A82D7A18D1C341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:ab:c4:c2:e7:e7:07:dd:21:14:40:40:ad:
                    a0:ae:59:f8:7e:00:85:11:34:74:b1:11:d1:0c:f8:
                    44:4c:65:3a:ca:1b:8d:ae:a9:3d:79:5e:a6:8a:b5:
                    65:67:1f:8a:f0:c1:ce:ba:41:70:b0:13:c6:a3:24:
                    37:a2:59:32:96:2f:ec:cf:35:bc:3d:a4:7d:82:06:
                    8e:d2:8e:09:f7:e6:9b:5b:a2:3a:f8:ed:fb:60:48:
                    0a:6e:f7:ba:82:fb:4f:f7:0a:ec:f5:ff:a1:94:4e:
                    40:f3:91:5a:f9:c1:94:12:fc:0f:35:2d:14:2b:0d:
                    11:ff:19:80:c0:05:4b:a7:13:55:70:00:55:fa:94:
                    95:4a:07:f8:89:cb:69:71:8a:2e:b4:54:7c:c5:de:
                    5d:48:59:31:89:8b:39:0a:25:38:63:22:4c:6f:fc:
                    14:1e:75:ce:e9:08:6a:96:e3:f3:ab:ac:0b:cb:69:
                    8c:00:0a:80:1a:1a:54:2e:84:3e:45:79:e5:2f:c6:
                    60:59:56:90:ca:51:6e:44:79:88:78:b8:41:ad:e0:
                    f7:41:55:8b:60:83:da:06:ad:18:da:9b:11:a3:18:
                    56:2b:18:5e:af:5e:dc:5b:3a:62:15:e3:88:a9:58:
                    cf:16:f6:2a:92:45:34:c2:9b:b6:af:7f:4c:dd:bc:
                    4b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:70:CC:21:AF:E7:E5:6D:AF:F8:87:84:C1:A8:2D:7A:18:D1:C3:41
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200226.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:e0:08:dc:a3:f2:2c:82:f0:9f:49:2b:7a:47:91:8e:67:7c:
         64:f6:7d:d7:48:5f:47:a5:18:29:da:45:ee:49:5e:61:58:47:
         87:fb:89:00:c1:5c:ff:60:70:9f:b4:8b:d4:f7:87:32:8f:72:
         0f:30:26:28:f7:8d:4d:02:ff:f3:7f:20:d1:3c:db:52:7f:b4:
         c6:65:5c:71:b7:7a:f9:d6:fb:89:72:31:8b:78:5f:f4:11:10:
         cf:72:49:58:29:83:ca:13:1d:64:c7:c5:44:0c:7c:21:f6:ef:
         a0:f8:27:67:0a:26:2f:1c:88:87:0a:5d:eb:69:aa:76:fa:88:
         8b:64:eb:ac:a0:b5:f6:aa:ef:d6:b6:ab:86:2c:ff:e9:6b:67:
         dd:7b:34:41:71:13:ef:30:c6:6e:a1:c8:88:2e:46:ec:41:18:
         a4:ea:d2:b4:5f:5f:6e:a0:66:2d:0e:f7:ae:a2:5e:a8:4a:94:
         08:c2:29:bb:ab:26:b3:6f:55:50:d3:dd:6d:b7:b3:6c:b6:1c:
         cb:9f:04:48:d4:9b:71:46:72:ce:4c:c0:f9:78:76:f7:59:ee:
         e5:55:3d:30:b0:f2:67:1b:f1:f3:89:c9:16:ca:ce:ca:49:23:
         2b:58:6b:40:7c:cf:2a:fe:45:0b:fe:47:2d:35:50:0d:b8:61:
         86:eb:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:54:51 2025 by rpki-client