Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS26006.roa
File:                     AS26006.roa (raw, json)
Hash identifier:          59Wcd/z2uom9xGOslcxgKl0LkDJtTrNqFqoCb/n9Wpc=
Subject key identifier:   55:3B:D6:08:7A:CF:AC:4A:69:DF:54:04:B6:1C:C7:68:EC:91:0C:95
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       0D0740EDFFC08B13DC8F826CF4CBBF4237B86A60
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS26006.roa
Signing time:             Fri 04 Jul 2025 06:53:27 +0000
ROA not before:           Fri 04 Jul 2025 06:48:27 +0000
ROA not after:            Fri 03 Jul 2026 06:53:27 +0000
asID:                     26006
IP address blocks:        2a05:dfc1:a00::/40 maxlen: 48
                          2a05:dfc1:6b00::/40 maxlen: 48
                          2a05:dfc1:9700::/40 maxlen: 48
                          2a06:9f81:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:07:40:ed:ff:c0:8b:13:dc:8f:82:6c:f4:cb:bf:42:37:b8:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 06:48:27 2025 GMT
            Not After : Jul  3 06:53:27 2026 GMT
        Subject: CN=553BD6087ACFAC4A69DF5404B61CC768EC910C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:b7:e5:1e:42:19:d4:1f:eb:c9:69:b6:03:
                    a9:5d:e3:ea:43:38:b5:ab:31:eb:08:9e:40:06:7e:
                    63:ed:d7:9d:05:18:4d:ed:3f:01:44:5a:8c:d3:5b:
                    93:78:3a:57:0c:4a:e9:9c:b2:55:f7:87:bf:a8:0b:
                    e9:cf:1e:dc:c5:0e:cf:47:c3:c3:8e:ea:40:bb:fd:
                    43:e6:df:92:3c:c7:b5:ef:5a:9b:0e:27:58:4f:e4:
                    50:8a:21:49:5b:e4:36:d5:96:50:5b:a4:0b:f9:4d:
                    36:59:04:e9:0e:41:50:68:dd:1b:d2:a4:04:52:e3:
                    03:9f:33:a4:c9:b4:19:3a:d2:1e:f4:df:a2:3e:45:
                    55:a9:61:ae:f6:de:ea:be:df:11:7d:d3:c6:5a:95:
                    4c:02:1b:49:81:71:ae:69:88:0b:ff:70:58:58:d8:
                    b3:c6:4a:6e:a9:76:38:72:fe:e2:ed:ce:16:96:99:
                    93:02:f8:dc:08:a1:20:89:2a:cc:ad:bd:4c:90:e2:
                    fd:b3:cf:05:7d:d7:62:1d:49:16:87:3a:af:f1:53:
                    5a:64:6a:ec:46:89:07:c7:45:6a:20:51:5d:41:6a:
                    34:2a:00:7d:1a:70:64:54:02:ca:63:82:79:96:b2:
                    7f:48:d7:fa:ee:a2:89:2c:7a:d7:eb:70:ec:92:42:
                    d2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3B:D6:08:7A:CF:AC:4A:69:DF:54:04:B6:1C:C7:68:EC:91:0C:95
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS26006.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:a00::/40
                  2a05:dfc1:6b00::/40
                  2a05:dfc1:9700::/40
                  2a06:9f81:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:a7:d7:d7:4f:19:8e:37:a1:b7:79:c1:34:8e:ee:f4:d6:
         92:f6:fc:f2:39:33:27:06:ad:5c:86:8b:ed:ea:e3:00:73:37:
         b1:15:0e:d9:c4:81:cb:1b:4a:78:1f:aa:48:92:16:a8:e3:ab:
         2f:df:9b:91:0b:59:fc:d7:cb:59:4e:e3:01:3d:29:3e:7c:95:
         5e:29:1f:cc:13:82:e9:fa:d7:80:95:f9:74:e3:dc:dc:0b:cb:
         1c:3f:cc:13:da:0d:71:c0:0a:c7:b3:f9:a3:7a:da:a8:74:9e:
         f8:2b:f5:63:8b:c2:bc:a8:da:5c:8e:b2:4d:f6:63:74:92:92:
         7d:65:23:22:2d:ce:b9:7c:c0:c1:54:9f:ad:db:9e:21:0e:fa:
         02:bd:be:b8:69:c9:98:1d:d3:e5:4f:c5:3f:a5:a6:df:02:7f:
         d1:2e:7d:a8:d7:3d:81:51:b7:59:44:f4:44:35:2c:c7:61:e0:
         28:73:8f:85:8b:b5:31:a9:37:3a:dc:a6:16:d5:9e:80:be:d0:
         3b:f7:6d:96:e0:55:35:a0:32:53:b5:e1:2a:ea:04:78:9b:61:
         b4:4f:ef:4e:cd:a9:5b:3f:3a:72:9f:52:0c:51:69:28:45:ba:
         39:45:94:26:7e:28:2f:e5:0f:5c:3e:f9:72:51:5c:25:c4:4b:
         55:e0:a2:23
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUDQdA7f/AixPcj4Js9Mu/Qje4amAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjdaFw0yNjA3MDMwNjUzMjdaMDMxMTAvBgNV
BAMTKDU1M0JENjA4N0FDRkFDNEE2OURGNTQwNEI2MUNDNzY4RUM5MTBDOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzG7flHkIZ1B/ryWm2A6ld4+pD
OLWrMesInkAGfmPt150FGE3tPwFEWozTW5N4OlcMSumcslX3h7+oC+nPHtzFDs9H
w8OO6kC7/UPm35I8x7XvWpsOJ1hP5FCKIUlb5DbVllBbpAv5TTZZBOkOQVBo3RvS
pARS4wOfM6TJtBk60h7036I+RVWpYa723uq+3xF908ZalUwCG0mBca5piAv/cFhY
2LPGSm6pdjhy/uLtzhaWmZMC+NwIoSCJKsytvUyQ4v2zzwV912IdSRaHOq/xU1pk
auxGiQfHRWogUV1BajQqAH0acGRUAspjgnmWsn9I1/ruooksetfrcOySQtI7AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUVTvWCHrPrEpp31QEthzHaOyRDJUwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjYwMDYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUH
AQcBAf8EKjAoMCYEAgACMCADBgAqBd/BCgMGACoF38FrAwYAKgXfwZcDBgAqBp+B
YDANBgkqhkiG9w0BAQsFAAOCAQEALRKn19dPGY43obd5wTSO7vTWkvb88jkzJwat
XIaL7erjAHM3sRUO2cSByxtKeB+qSJIWqOOrL9+bkQtZ/NfLWU7jAT0pPnyVXikf
zBOC6frXgJX5dOPc3AvLHD/ME9oNccAKx7P5o3raqHSe+Cv1Y4vCvKjaXI6yTfZj
dJKSfWUjIi3OuXzAwVSfrdueIQ76Ar2+uGnJmB3T5U/FP6Wm3wJ/0S59qNc9gVG3
WUT0RDUsx2HgKHOPhYu1Mak3OtymFtWegL7QO/dtluBVNaAyU7XhKuoEeJthtE/v
Ts2pWz86cp9SDFFpKEW6OUWUJn4oL+UPXD75clFcJcRLVeCiIw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 03:49:40 2025 by rpki-client