Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200269.roa
File:                     AS200269.roa (raw, json)
Hash identifier:          fQ24oYw0NffpOzBg23dDkoy+/rahZdK8LT5v3Sj5Pdk=
Subject key identifier:   46:81:B7:0E:8B:DA:A5:05:A5:32:B5:EF:FC:90:73:9A:1F:4D:08:18
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       568BE25E42AD487DA8ADB9B8B5E740CFCACC3D88
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200269.roa
Signing time:             Fri 04 Jul 2025 06:53:12 +0000
ROA not before:           Fri 04 Jul 2025 06:48:12 +0000
ROA not after:            Fri 03 Jul 2026 06:53:12 +0000
asID:                     200269
IP address blocks:        2a0a:6040:2f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8b:e2:5e:42:ad:48:7d:a8:ad:b9:b8:b5:e7:40:cf:ca:cc:3d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:12 2025 GMT
            Not After : Jul  3 06:53:12 2026 GMT
        Subject: CN=4681B70E8BDAA505A532B5EFFC90739A1F4D0818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:89:43:d6:63:ab:32:50:3a:99:0d:55:d9:
                    ec:19:d0:a0:ab:b8:68:22:74:4a:ce:c7:6c:71:89:
                    4b:c5:c6:2c:91:e6:ad:6c:48:b6:66:6a:10:da:a6:
                    b7:69:70:9b:97:9f:7c:f5:5d:b5:00:22:99:60:a7:
                    07:75:ad:62:79:5f:ad:1d:ee:5e:78:73:4f:de:91:
                    83:40:2b:50:2e:cc:4b:fa:14:6f:5e:b9:0e:a5:fd:
                    7a:81:b9:64:f9:99:a7:8d:f3:1a:14:d5:aa:d0:49:
                    5b:fc:f3:4f:55:22:0d:77:cf:e8:f0:b4:83:9e:55:
                    2c:9a:f4:ec:a7:d1:8a:1b:f4:64:23:46:43:00:78:
                    a1:46:14:63:5d:36:82:f8:f2:c9:34:b8:4d:15:e3:
                    0a:ed:f5:2e:78:6f:9b:0e:54:5a:fb:e8:f3:c8:4b:
                    16:89:6e:94:4d:f0:20:72:f1:5b:59:7f:ef:3b:97:
                    8d:ef:e5:1f:b4:8d:c0:b5:9e:a5:a0:4b:a6:a7:35:
                    3f:05:52:53:fd:6b:e2:bc:34:87:32:25:d5:10:e1:
                    9d:6e:ba:35:7d:ad:19:79:7d:9c:24:43:f5:4f:4f:
                    19:bf:51:20:7a:c6:81:f6:1a:f1:b6:fd:c1:6d:e8:
                    8e:6b:b0:c7:c7:7b:f0:26:3e:23:40:90:01:78:ad:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:81:B7:0E:8B:DA:A5:05:A5:32:B5:EF:FC:90:73:9A:1F:4D:08:18
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200269.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:4c:c5:49:a9:9e:84:7c:3f:1b:8d:93:0d:a5:41:f4:ae:73:
         c7:82:29:5b:59:d9:30:96:fa:53:6c:4b:f0:8d:80:a2:ea:9b:
         34:70:38:cc:e0:34:10:db:a9:1b:0f:c4:f9:7b:12:0c:30:4d:
         cc:68:e8:de:e4:c3:b6:ab:32:66:57:a2:63:09:98:16:c8:2a:
         34:5c:b4:46:62:60:67:7a:9c:bb:08:b1:ee:3f:8f:16:28:9d:
         ba:e9:65:25:bd:d0:74:55:32:d3:67:c9:d0:ea:7f:3f:7b:ad:
         c6:67:74:7b:4d:4e:c6:2f:52:13:bd:68:46:61:48:ad:06:62:
         15:3d:c7:11:8b:28:80:81:a6:80:02:51:dc:20:56:e5:23:4a:
         66:5b:32:e6:c6:87:0e:e8:52:71:24:d2:51:a0:05:ce:a6:1b:
         3d:1f:0a:fc:c2:ad:38:52:3c:f0:5d:a3:29:a6:1b:bb:e8:cc:
         94:5f:a2:11:4c:6a:56:ec:4f:de:10:1f:8e:a4:07:3b:5b:32:
         22:03:f3:7f:ca:65:36:da:5a:a8:c7:ef:4c:b8:c3:1e:b4:35:
         b3:71:73:a5:1b:9c:c5:19:f3:5c:58:31:da:75:93:59:7c:08:
         01:e9:2e:bb:30:d3:db:02:73:0c:e7:20:ac:e2:38:48:03:00:
         c6:c5:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:02:19 2025 by rpki-client