Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200262.roa
File:                     AS200262.roa (raw, json)
Hash identifier:          2DBB3CHkmYvkIrPmT07U8Etv1FOJWMcSxVXwr8mBdFY=
Subject key identifier:   16:C1:95:03:6F:DB:77:8E:AE:D1:6F:C5:2A:73:EA:81:45:2C:12:38
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       4361652327A6211B8EBF4D6B93E713184ECAF66F
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200262.roa
Signing time:             Fri 04 Jul 2025 06:53:23 +0000
ROA not before:           Fri 04 Jul 2025 06:48:23 +0000
ROA not after:            Fri 03 Jul 2026 06:53:23 +0000
asID:                     200262
IP address blocks:        2a0a:6040:ae00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:61:65:23:27:a6:21:1b:8e:bf:4d:6b:93:e7:13:18:4e:ca:f6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:23 2025 GMT
            Not After : Jul  3 06:53:23 2026 GMT
        Subject: CN=16C195036FDB778EAED16FC52A73EA81452C1238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:e0:66:0c:75:3e:41:71:d9:87:ce:0f:cb:
                    c1:53:f5:f7:44:d4:83:f0:f1:0b:79:8e:0a:84:47:
                    b4:1c:01:39:81:c7:ff:eb:e7:de:0d:7b:81:37:f9:
                    57:d8:f2:01:16:33:8a:25:d1:79:b0:a0:d2:f4:2d:
                    26:d1:83:d4:ef:b5:11:11:f9:94:d6:c3:9a:1c:03:
                    9a:bb:50:26:77:6c:0c:23:3e:da:cc:2d:ea:62:d9:
                    dc:85:29:59:da:16:70:7c:1b:e1:96:0d:f5:4b:42:
                    be:51:fc:3a:cf:d7:e4:8d:f0:90:0f:51:41:c8:08:
                    ce:8f:50:52:13:19:de:35:9e:1f:4e:84:ab:fa:45:
                    77:1d:27:b0:a4:ae:f1:da:dc:7f:f8:01:60:ed:cb:
                    aa:04:ab:d1:b6:68:98:da:28:db:4a:fa:d6:e4:c4:
                    e0:82:10:6b:11:df:1a:5c:78:9b:8c:fe:64:01:76:
                    80:69:81:b1:40:c1:1c:94:bd:7d:0d:1e:80:4d:20:
                    f6:e5:fb:70:a8:9e:c0:ca:db:0b:8c:f4:d1:13:39:
                    12:4e:3d:2c:91:02:ca:3e:89:e6:cc:96:f0:20:cd:
                    97:8b:ff:29:26:41:17:5d:82:60:d2:12:98:ba:9a:
                    df:63:69:c9:9b:19:94:bc:cb:0f:00:5c:a4:9e:2b:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:95:03:6F:DB:77:8E:AE:D1:6F:C5:2A:73:EA:81:45:2C:12:38
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         e5:c5:27:51:78:a1:1f:6e:83:44:d3:4b:4f:2c:0a:8a:50:82:
         e2:36:19:77:e6:fa:2c:78:c9:15:99:0e:c5:2d:28:bc:b9:75:
         58:7a:fa:7b:56:03:58:ff:39:85:30:df:ed:e4:3e:dd:60:68:
         71:85:ba:e4:4c:c0:39:14:86:d1:f5:f6:96:31:2e:29:c5:0b:
         b5:a3:ba:99:3a:7c:9f:66:a7:77:f2:8b:7b:99:64:f2:36:66:
         f8:66:69:94:a6:0c:31:c1:27:5e:73:d3:2d:c7:77:71:0e:7b:
         7a:c7:9f:4a:cb:20:ae:5f:3e:bc:5d:1f:37:49:9f:be:1a:52:
         12:f1:c8:4c:f1:00:a6:2a:fb:df:ed:e8:df:9b:59:7b:e0:e8:
         32:4b:ed:68:dd:e0:08:8c:3e:b9:37:bd:ed:17:c1:49:0d:65:
         30:07:99:52:eb:ed:8f:f3:11:b0:1b:1c:69:c6:4d:02:2e:76:
         d3:1f:91:1a:32:97:94:44:9e:8e:fd:5e:fb:92:9a:10:0f:ae:
         7f:ad:9a:6b:88:65:2c:1f:8b:80:76:a0:6a:49:a3:fd:90:b1:
         12:45:7b:15:b6:c7:96:08:fd:d5:0c:57:8a:9d:e1:ae:5e:cf:
         0a:4c:f0:cc:d5:05:1b:90:6c:0b:15:8d:1e:c7:ff:59:48:c3:
         26:5f:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:15:54 2025 by rpki-client