Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200261.roa
File:                     AS200261.roa (raw, json)
Hash identifier:          rt9TDPy91KXCBztu9mqd2k6noTmmKc+g5SrpgHOPWls=
Subject key identifier:   15:DE:AB:10:C8:79:8D:E5:91:EB:63:77:F2:F5:99:9A:29:9A:02:02
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       518A9BCA5329518B35FF51618AD925042948C4AE
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200261.roa
Signing time:             Fri 04 Jul 2025 06:52:54 +0000
ROA not before:           Fri 04 Jul 2025 06:47:54 +0000
ROA not after:            Fri 03 Jul 2026 06:52:54 +0000
asID:                     200261
IP address blocks:        2a0a:6040:1f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8a:9b:ca:53:29:51:8b:35:ff:51:61:8a:d9:25:04:29:48:c4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:47:54 2025 GMT
            Not After : Jul  3 06:52:54 2026 GMT
        Subject: CN=15DEAB10C8798DE591EB6377F2F5999A299A0202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:ae:de:b6:52:ac:5d:1f:fc:11:3f:1c:53:
                    b0:01:dd:86:b2:be:45:5a:65:6a:68:48:35:32:e6:
                    17:d1:c7:c7:0e:c2:26:ad:5d:a7:da:44:4c:00:84:
                    13:b6:ae:9b:a2:5d:2d:63:f2:c0:bc:7a:91:5a:fc:
                    85:51:c2:66:d7:a3:39:95:fe:f4:eb:39:ac:1b:53:
                    ca:55:74:46:60:29:eb:4c:e7:41:b6:eb:de:35:06:
                    43:6e:fd:04:1e:58:b1:bc:0e:7d:bf:aa:7f:01:f7:
                    11:3c:00:29:54:30:6c:62:9f:88:7a:31:02:da:6d:
                    04:b8:e0:a6:0d:ff:26:15:a1:4b:47:1d:c2:d4:80:
                    ca:96:01:15:f1:c4:f2:4a:43:61:be:3c:32:06:a6:
                    9c:4b:70:3e:26:62:9d:8e:76:a1:a2:1e:3f:04:cf:
                    0e:bc:94:68:5c:c4:13:51:42:03:58:0c:0b:3c:6e:
                    10:7e:7c:32:5c:e3:dc:d7:bf:00:34:d2:68:ec:da:
                    f7:75:ef:0e:e7:c5:4f:44:02:c6:9f:89:92:53:bf:
                    50:5d:b8:99:a2:a8:a1:9c:08:c0:04:70:3e:eb:0a:
                    e4:26:92:03:5a:55:bd:d1:3a:af:a2:49:eb:86:ff:
                    ba:2a:15:0c:7d:2f:54:8a:0d:ed:98:c4:00:c4:72:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:AB:10:C8:79:8D:E5:91:EB:63:77:F2:F5:99:9A:29:9A:02:02
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200261.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:e9:93:b4:36:4c:fc:59:10:67:f0:79:2a:6a:8c:04:42:a8:
         91:76:5f:a5:cf:83:b6:99:7c:5f:3e:94:09:57:3c:ca:33:c7:
         75:5e:8b:f7:01:02:5f:fd:83:c6:bd:9b:a6:41:00:3d:f2:e1:
         ca:25:6c:aa:2b:fe:a3:0f:98:a3:d3:3f:c3:27:92:b9:c8:d9:
         33:d8:50:0c:4d:c4:12:b5:58:9a:b4:71:4a:c0:a9:d4:42:9e:
         73:51:cb:c1:93:e8:c7:d1:ae:d2:9f:12:44:db:a3:e4:1e:37:
         c9:0a:1c:97:e5:d8:2e:c3:f1:64:81:9c:3e:4a:8e:ca:ba:81:
         24:db:4d:dc:0f:59:34:0d:b5:80:20:15:cc:c8:72:3f:ee:de:
         22:03:ec:e3:1d:83:21:f9:6a:0f:7d:58:86:f4:5d:25:19:2f:
         b9:65:77:1d:eb:ae:77:4d:a8:9f:07:30:07:71:2d:6d:b3:1d:
         81:25:66:99:54:c5:4d:d1:50:fc:5e:46:0a:1c:8a:15:cc:28:
         43:c5:f6:d3:f7:49:0d:0a:0e:1e:ab:da:d1:8b:13:71:51:a3:
         1a:a6:fc:7b:57:e4:c5:b6:73:71:a2:c2:50:07:f0:c5:2d:10:
         34:9e:c7:f5:5e:03:2d:20:dd:22:1e:bf:6d:90:c2:de:81:31:
         06:ec:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:04:25 2025 by rpki-client