Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS208548.roa
File:                     AS208548.roa (raw, json)
Hash identifier:          CXlKrm9LO5Z1ueZ7Ie7efGLTzxQnKcDQLfnGYpgfkGA=
Subject key identifier:   50:58:DA:C8:44:57:FC:2D:C6:72:72:43:86:9A:15:F7:DD:E4:8F:F6
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       31A2326459FCC5F705C961B458949CC4453BCCB0
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS208548.roa
Signing time:             Fri 05 Jun 2026 07:12:27 +0000
ROA not before:           Fri 05 Jun 2026 07:07:27 +0000
ROA not after:            Fri 04 Jun 2027 07:12:27 +0000
asID:                     208548
IP address blocks:        2a05:dfc1:ff00::/40 maxlen: 48
                          2a05:dfc1:ff08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a2:32:64:59:fc:c5:f7:05:c9:61:b4:58:94:9c:c4:45:3b:cc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:27 2026 GMT
            Not After : Jun  4 07:12:27 2027 GMT
        Subject: CN=5058DAC84457FC2DC6727243869A15F7DDE48FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:6a:f6:ac:20:11:51:da:8f:74:2f:73:b8:
                    6e:31:17:0b:94:03:07:2b:a8:ee:c7:a2:c1:23:63:
                    d9:eb:c8:d7:41:ca:30:d6:b3:c8:3f:79:c1:99:61:
                    e5:55:76:f8:27:07:84:7a:14:73:31:0d:8d:f3:55:
                    4f:66:a6:8d:d3:92:5a:56:10:69:da:32:ef:aa:98:
                    bb:02:d7:76:64:da:a1:0f:99:3f:b2:6c:bf:49:a9:
                    73:8b:0c:ad:6d:a7:c1:fa:f0:40:d6:86:62:c8:1d:
                    d2:bb:4f:74:67:7d:5a:4f:f3:4b:9a:c7:cf:f4:d9:
                    9d:36:62:e2:00:cb:ca:d8:9d:5d:86:51:78:f5:4f:
                    9f:5f:be:65:7d:35:0c:b9:6b:35:07:24:80:b6:9a:
                    62:79:59:99:42:75:16:fc:ad:8e:59:6d:ea:7c:c6:
                    39:34:79:06:54:46:91:b3:05:87:f4:b7:db:b2:22:
                    fd:3a:ee:30:2c:29:26:32:94:93:da:63:8f:6b:98:
                    89:e7:bb:93:8b:b8:62:2d:b7:d2:6b:ea:1a:c6:12:
                    19:2e:30:4c:b0:05:46:8b:29:cf:2b:8d:e8:b9:45:
                    7f:bd:7d:64:80:e0:6e:dd:c5:e5:3e:a7:3a:4a:cc:
                    9f:0c:41:b3:85:47:df:a8:e1:44:7a:a1:bd:81:6e:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:58:DA:C8:44:57:FC:2D:C6:72:72:43:86:9A:15:F7:DD:E4:8F:F6
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS208548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:14:76:01:97:37:ce:5b:c7:d6:a9:d0:1d:ef:1b:4a:c2:9e:
         4f:3f:5e:5d:60:0a:02:0e:6d:95:d4:bf:8b:60:a2:30:ee:f1:
         e3:af:00:6e:3b:95:a9:55:28:23:03:ca:cb:fb:1a:5e:d1:f4:
         ab:e5:cc:57:f3:b1:7f:ae:51:e4:69:bb:c9:a0:3a:73:99:d4:
         6d:e8:e9:fc:17:1f:3a:e7:57:fc:7d:82:de:05:de:ac:9a:db:
         10:bb:26:3a:ed:d7:bc:57:0e:5d:65:ee:4d:f3:2a:de:59:ec:
         c7:dc:5b:b1:8f:62:12:05:92:fc:ca:dd:03:80:1f:c2:71:9c:
         b7:b4:c7:9e:b6:c6:50:48:39:af:11:0f:93:f4:19:67:1f:19:
         dc:fb:6e:fb:25:ba:d5:ba:e5:50:33:7e:cf:ce:d9:5b:6d:18:
         0f:34:9f:66:c2:e2:0b:82:1c:25:57:d3:13:a8:e7:b7:62:c7:
         dd:b3:40:cc:17:17:c1:e0:da:80:eb:39:0d:1b:d1:cc:b0:1c:
         5a:1f:71:62:73:a4:a7:0e:c6:16:0d:58:60:a9:fa:07:85:28:
         71:92:35:f0:a7:64:2c:8c:49:1f:41:b4:f6:34:5e:c8:aa:02:
         88:72:c6:66:06:02:f7:1f:6f:11:7b:7a:05:e1:6f:c9:d9:25:
         24:fd:11:b2
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUMaIyZFn8xfcFyWG0WJScxEU7zLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjdaFw0yNzA2MDQwNzEyMjdaMDMxMTAvBgNV
BAMTKDUwNThEQUM4NDQ1N0ZDMkRDNjcyNzI0Mzg2OUExNUY3RERFNDhGRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWf2r2rCARUdqPdC9zuG4xFwuU
AwcrqO7HosEjY9nryNdByjDWs8g/ecGZYeVVdvgnB4R6FHMxDY3zVU9mpo3TklpW
EGnaMu+qmLsC13Zk2qEPmT+ybL9JqXOLDK1tp8H68EDWhmLIHdK7T3RnfVpP80ua
x8/02Z02YuIAy8rYnV2GUXj1T59fvmV9NQy5azUHJIC2mmJ5WZlCdRb8rY5Zbep8
xjk0eQZURpGzBYf0t9uyIv067jAsKSYylJPaY49rmInnu5OLuGItt9Jr6hrGEhku
MEywBUaLKc8rjei5RX+9fWSA4G7dxeU+pzpKzJ8MQbOFR9+o4UR6ob2BbhaJAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUUFjayERX/C3GcnJDhpoV993kj/YwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjA4NTQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwf8wDQYJKoZIhvcNAQELBQADggEBAHYU
dgGXN85bx9ap0B3vG0rCnk8/Xl1gCgIObZXUv4tgojDu8eOvAG47lalVKCMDysv7
Gl7R9KvlzFfzsX+uUeRpu8mgOnOZ1G3o6fwXHzrnV/x9gt4F3qya2xC7Jjrt17xX
Dl1l7k3zKt5Z7MfcW7GPYhIFkvzK3QOAH8JxnLe0x562xlBIOa8RD5P0GWcfGdz7
bvslutW65VAzfs/O2VttGA80n2bC4guCHCVX0xOo57dix92zQMwXF8Hg2oDrOQ0b
0cywHFofcWJzpKcOxhYNWGCp+geFKHGSNfCnZCyMSR9BtPY0XsiqAohyxmYGAvcf
bxF7egXhb8nZJST9EbI=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:50:04 2026 by rpki-client