Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200267.roa
File:                     AS200267.roa (raw, json)
Hash identifier:          xjPWlyO+uKX7x63pje7ED0Z9AgkWMMsFfFdzJV2vsPM=
Subject key identifier:   FE:10:B0:A7:FA:66:16:9F:0E:DD:15:75:7A:C9:77:64:FF:B9:27:86
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       238403D1340B250349C99A5BD3B8809FC98695AC
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200267.roa
Signing time:             Fri 04 Jul 2025 06:53:21 +0000
ROA not before:           Fri 04 Jul 2025 06:48:21 +0000
ROA not after:            Fri 03 Jul 2026 06:53:21 +0000
asID:                     200267
IP address blocks:        2a0a:6040:c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:84:03:d1:34:0b:25:03:49:c9:9a:5b:d3:b8:80:9f:c9:86:95:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:21 2025 GMT
            Not After : Jul  3 06:53:21 2026 GMT
        Subject: CN=FE10B0A7FA66169F0EDD15757AC97764FFB92786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:37:dc:06:de:69:1c:23:34:b9:f2:cf:c8:
                    d3:ae:60:e5:ba:d2:b7:16:15:80:9f:aa:c9:94:f0:
                    1f:1f:b8:62:b7:cf:ae:9b:67:6e:06:5f:b1:8a:d9:
                    63:01:b9:7c:bd:64:9c:47:91:3b:51:fe:7c:cd:9e:
                    26:c6:d2:c8:89:02:7a:6b:86:1b:ef:b8:ac:8f:c3:
                    af:c0:79:56:7e:9e:7d:a3:a2:6f:6a:fc:76:7d:d4:
                    23:f4:89:84:39:2c:15:6f:0a:8b:d0:2f:24:35:14:
                    d9:a7:bd:b0:55:7f:be:c3:39:6c:8b:cf:3b:a9:96:
                    4d:41:16:e7:16:90:56:db:c5:44:34:86:78:43:99:
                    bc:0e:f7:53:bd:27:cf:42:c1:63:28:e2:fd:51:88:
                    15:1e:61:8d:cf:03:71:6f:78:5a:ce:99:89:58:05:
                    70:42:74:71:79:79:96:40:43:01:42:76:f4:b1:51:
                    bd:c7:e5:3f:f6:28:60:d8:9f:84:34:9c:fa:ff:6a:
                    67:ab:91:0d:14:4f:2d:66:c5:c5:d2:e3:23:74:0d:
                    18:e4:5a:fc:a8:0d:50:5c:09:85:83:7c:93:fe:c9:
                    e3:ed:6f:32:cf:e3:71:3f:93:72:3f:08:e5:51:2c:
                    26:1c:63:c5:74:5e:22:82:39:64:ba:f4:00:ff:79:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:10:B0:A7:FA:66:16:9F:0E:DD:15:75:7A:C9:77:64:FF:B9:27:86
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:3d:13:55:47:52:30:c6:f7:88:43:1e:04:42:59:ae:af:87:
         91:6d:ce:42:ec:a5:c5:f8:80:36:3a:aa:d8:50:46:52:74:9d:
         0d:9c:0f:42:a9:44:de:0f:82:4e:ea:fa:f0:a0:37:ce:0d:07:
         4d:31:73:b2:cf:43:f9:dc:8d:35:9d:18:b7:2b:78:2a:17:3e:
         c4:de:f6:75:8d:05:74:f6:40:fe:0f:6c:36:80:0d:67:f7:2e:
         7d:41:3d:42:d8:58:0c:3b:be:38:a1:f0:22:38:84:bd:37:f7:
         a9:ea:0d:d8:57:ee:e5:0f:e8:84:bb:e6:56:c3:ac:fe:30:a4:
         6d:98:80:29:ec:e3:0d:d3:2f:cc:85:7f:31:0c:38:8a:8f:97:
         fa:56:db:f7:a0:57:d7:a8:4f:75:dc:06:bd:30:bd:8b:5a:5b:
         26:6e:97:92:7b:3a:f1:08:5a:9e:74:5b:9d:a1:75:ed:da:e8:
         9b:dd:4b:91:ba:b4:05:d1:72:47:77:f8:2b:e4:9f:68:36:48:
         9d:50:54:cd:8a:d6:da:d0:52:59:13:f3:76:e0:e6:b6:72:b5:
         ad:0b:8a:e8:f8:33:e9:66:1f:2f:13:66:41:71:09:44:ea:25:
         c7:bb:5d:df:34:d1:db:46:69:23:3b:a3:ef:65:7b:87:e4:b8:
         33:d9:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:11:08 2025 by rpki-client