Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS54681.roa
File:                     AS54681.roa (raw, json)
Hash identifier:          VvC2K3sNsZBJv7yrPlf6T5DfCiCK8JEjDrod2USj584=
Subject key identifier:   4F:8C:84:80:EC:47:E9:64:C4:16:AE:43:8B:D2:A4:DF:73:8C:71:42
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       6614BB2CA419BB3A6A9B72C2D764F27511A1437E
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS54681.roa
Signing time:             Fri 05 Jun 2026 07:12:20 +0000
ROA not before:           Fri 05 Jun 2026 07:07:20 +0000
ROA not after:            Fri 04 Jun 2027 07:12:20 +0000
asID:                     54681
IP address blocks:        2a05:dfc1:200::/40 maxlen: 48
                          2a05:dfc1:2000::/40 maxlen: 48
                          2a05:dfc1:2100::/40 maxlen: 48
                          2a05:dfc1:2200::/40 maxlen: 48
                          2a05:dfc1:2300::/40 maxlen: 40
                          2a05:dfc1:2400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:14:bb:2c:a4:19:bb:3a:6a:9b:72:c2:d7:64:f2:75:11:a1:43:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:20 2026 GMT
            Not After : Jun  4 07:12:20 2027 GMT
        Subject: CN=4F8C8480EC47E964C416AE438BD2A4DF738C7142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:be:fe:03:40:20:b1:2d:dd:62:e4:60:93:
                    65:91:c9:f5:3e:c6:e2:ed:60:b6:59:8b:c3:55:28:
                    40:6d:3a:1f:df:50:1f:d0:20:18:9e:e5:41:8c:73:
                    b0:87:29:11:73:6c:b9:5a:f4:b9:13:ac:76:70:b9:
                    2d:49:f0:a2:51:63:ce:37:f3:4e:b2:49:74:e0:ce:
                    5e:34:62:5a:de:22:01:36:8a:82:06:c4:8b:c8:f0:
                    dd:5e:ad:53:b5:fd:3b:d0:65:bf:6f:60:7b:90:21:
                    41:5e:86:33:38:4a:3f:b9:84:73:25:bf:8e:cc:3c:
                    f5:01:80:b5:28:9d:15:ef:bf:aa:be:25:7a:cb:54:
                    2c:8b:90:8c:34:4c:7c:29:21:dd:4d:62:95:d1:ff:
                    83:f2:25:bd:ec:b4:1d:4b:de:89:9b:c0:6d:eb:5d:
                    f4:7a:4d:95:8e:19:6e:df:e7:f5:42:e8:fe:15:9b:
                    df:cb:99:6b:32:ab:f1:b2:3e:9d:76:a0:f1:a3:e2:
                    5f:10:bd:6b:bb:e5:e5:67:fb:14:49:fa:61:ac:41:
                    c1:14:e2:d1:7f:3b:2e:60:bb:2d:f1:10:ab:f8:a8:
                    38:fb:ff:38:f1:8c:14:7f:09:81:04:43:b9:31:b2:
                    31:32:2d:3c:0d:98:fa:62:65:3c:43:97:e6:ac:b2:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8C:84:80:EC:47:E9:64:C4:16:AE:43:8B:D2:A4:DF:73:8C:71:42
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS54681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:200::/40
                  2a05:dfc1:2000::-2a05:dfc1:24ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         06:cb:c3:4d:94:13:09:cf:e2:14:23:10:23:fe:bd:8e:3c:ea:
         7e:63:e5:f6:c5:f9:2f:47:8d:9b:8f:19:3f:1c:16:55:fe:45:
         4f:a3:c2:8e:55:7b:fc:bb:26:d6:b9:e3:d1:06:4f:03:54:d2:
         16:2d:cd:b9:39:72:a0:32:53:b1:02:2f:08:bb:70:ee:e7:80:
         08:c2:63:fe:bb:9d:93:ab:8a:c5:a3:31:ed:78:e2:f8:fc:ab:
         32:bd:61:5e:fd:94:0c:98:4d:73:bd:d9:94:43:f8:7a:2e:1c:
         bb:f4:55:9d:b3:ac:5e:82:63:b1:f5:73:a1:d1:29:ea:26:18:
         43:14:f8:65:22:ee:4c:a7:7c:83:6c:1c:f9:6b:dc:78:cf:bc:
         56:fb:d5:bd:22:57:ca:bb:fd:b6:aa:b1:82:57:d0:08:e7:fa:
         bf:ee:bc:9c:13:a5:ba:87:ea:b4:e9:77:f9:cb:e7:bd:5f:49:
         bc:16:87:68:3d:70:3f:f7:60:0f:4d:93:46:e1:50:b3:ea:1d:
         4d:aa:5f:5a:00:59:30:ce:a3:74:10:bf:3b:51:77:0e:de:e0:
         70:6f:f3:95:ca:51:9b:ba:23:23:69:ec:1b:f2:8b:78:27:21:
         20:37:a4:37:1c:de:8a:48:32:ed:9f:ee:b3:d5:62:c2:69:19:
         9c:c0:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:45 2026 by rpki-client