Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200866.roa
File:                     AS200866.roa (raw, json)
Hash identifier:          k+zU4dn+ZqjjWWkRe6OyHwfsrcngzej4n64ne14fJTo=
Subject key identifier:   6A:9C:D2:BF:FD:46:11:5E:06:9A:53:49:F5:44:2D:C6:68:CE:00:DC
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       5C9B2C3FD00C3AE98007E535BC11DCE6C85809CF
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200866.roa
Signing time:             Fri 04 Jul 2025 06:53:15 +0000
ROA not before:           Fri 04 Jul 2025 06:48:15 +0000
ROA not after:            Fri 03 Jul 2026 06:53:15 +0000
asID:                     200866
IP address blocks:        2a0a:6040:d200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9b:2c:3f:d0:0c:3a:e9:80:07:e5:35:bc:11:dc:e6:c8:58:09:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:15 2025 GMT
            Not After : Jul  3 06:53:15 2026 GMT
        Subject: CN=6A9CD2BFFD46115E069A5349F5442DC668CE00DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:5f:f9:d3:07:c3:e0:17:0e:97:65:b1:31:
                    1c:77:81:c1:76:36:94:71:7d:6b:3c:f4:de:80:b2:
                    a7:54:17:1a:0c:27:a8:39:f3:b3:82:7f:e4:97:b7:
                    13:c6:b5:b3:d6:fe:65:b3:47:07:3c:81:fb:c2:b6:
                    7b:c6:ee:11:cc:9e:c8:56:6c:44:15:68:00:cf:7a:
                    4e:3e:25:9c:e3:fd:f3:06:f8:b0:98:57:03:aa:e6:
                    2a:84:83:08:11:e3:be:65:93:29:10:63:b2:e0:c1:
                    d3:1c:08:16:15:c1:83:d2:24:60:59:c3:62:e6:5c:
                    01:2f:c3:78:1c:72:eb:79:69:2f:6f:16:5a:f9:52:
                    d2:36:55:d4:89:2c:4e:0e:d5:a4:4d:ff:06:20:f9:
                    32:b7:37:bc:73:4a:3c:48:a5:c2:88:85:ca:db:19:
                    df:36:88:d8:3f:8c:00:8c:3d:8a:2f:14:ba:7c:52:
                    c5:cd:81:1b:79:ea:b2:75:aa:98:69:86:e6:7f:85:
                    d5:97:15:a0:3f:63:68:6d:9c:61:db:fc:c4:b6:8b:
                    a2:3d:95:3d:29:53:d5:80:ff:6b:27:52:15:cf:68:
                    49:a1:92:1e:34:72:53:5f:e7:f0:76:b5:9a:9b:00:
                    63:f1:30:c7:e7:6e:4a:b4:7c:13:4f:1b:f0:55:d8:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:D2:BF:FD:46:11:5E:06:9A:53:49:F5:44:2D:C6:68:CE:00:DC
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:91:ad:2b:44:83:69:05:fd:1f:06:13:45:3e:6c:71:3d:fb:
         80:ca:3f:a7:10:b0:44:7a:d8:d4:f3:0e:86:53:bf:ac:ea:ab:
         f8:c7:66:6d:65:e8:bd:04:8e:ad:d5:bc:12:7a:e2:85:35:95:
         20:84:54:e6:84:e3:78:e6:37:ee:f9:45:d6:bf:78:a2:a0:1f:
         c2:c9:4d:90:68:93:f9:c8:14:9c:b1:6f:df:2a:c8:04:24:aa:
         7d:f8:9e:82:0f:8a:82:1f:15:10:b8:59:9e:ef:c8:1c:30:f6:
         98:a5:72:7c:32:d0:0b:f5:48:03:99:b4:4d:ac:fd:74:fa:12:
         43:ec:ea:e1:18:ec:ef:03:0c:0c:1b:d3:a7:6b:09:38:12:6f:
         a8:3c:49:1a:58:ac:33:b6:8f:17:00:cb:f2:67:37:bd:15:73:
         65:6f:95:64:c1:6c:63:36:ad:d3:f3:81:21:8c:83:b8:9f:ab:
         fd:13:bd:ff:8b:35:f6:ae:89:0b:1a:97:d8:71:2c:2b:14:34:
         c3:2d:1b:5c:01:cb:6b:c2:74:bf:7b:e8:73:82:48:8b:49:59:
         57:42:5e:5d:7b:85:e8:3a:18:ce:aa:3f:2b:06:cf:d2:06:a0:
         46:5f:fe:5d:7a:74:25:98:34:80:2b:f2:df:ba:f3:ce:35:dd:
         87:fc:25:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:54:29 2025 by rpki-client