Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57934.roa
File:                     AS57934.roa (raw, json)
Hash identifier:          6PQZz2zse/z2Jv3I67VdTGPbIToTjwA68Qniz+06U/w=
Subject key identifier:   F4:2C:A3:E2:C6:19:59:F1:E7:3B:28:32:28:75:EF:A7:43:B1:F4:4A
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       4CF9247619569FC55BFF583A77E0D067294BB9B0
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57934.roa
Signing time:             Fri 05 Jun 2026 07:12:18 +0000
ROA not before:           Fri 05 Jun 2026 07:07:18 +0000
ROA not after:            Fri 04 Jun 2027 07:12:18 +0000
asID:                     57934
IP address blocks:        2a0a:6040:5800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f9:24:76:19:56:9f:c5:5b:ff:58:3a:77:e0:d0:67:29:4b:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  5 07:07:18 2026 GMT
            Not After : Jun  4 07:12:18 2027 GMT
        Subject: CN=F42CA3E2C61959F1E73B28322875EFA743B1F44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:09:6b:3a:18:52:4b:3d:0b:23:2f:42:93:
                    1e:e3:50:27:23:2e:37:04:9b:a9:4b:42:53:64:3e:
                    2b:f2:ed:47:c3:61:81:4b:57:5c:40:4d:7e:c0:af:
                    ed:90:23:96:41:d0:63:c3:de:da:e8:0e:33:2f:4a:
                    83:d4:48:5f:ce:8e:ab:76:66:e7:34:b0:67:24:2b:
                    86:0a:f5:a7:d2:91:2d:f5:17:33:83:c8:78:12:e9:
                    de:c0:f3:03:42:54:45:85:88:dc:9e:7a:e9:b6:da:
                    41:b3:23:0c:f3:cc:60:87:2c:46:07:61:11:84:84:
                    09:6a:4d:c6:98:9f:57:f9:2f:99:19:44:dc:ce:77:
                    5b:f4:3f:03:78:ba:95:18:e0:85:87:10:2a:69:92:
                    0b:51:19:c5:b4:8a:df:63:b3:2e:90:5c:b1:0e:89:
                    53:e4:20:c3:fc:1b:ce:60:31:01:11:bf:8b:d9:7b:
                    9f:b0:f1:53:91:27:22:64:65:9a:cd:80:bf:77:88:
                    cd:c8:e8:bf:53:70:fb:b2:8e:f6:f5:44:7a:c2:a6:
                    cf:83:45:c8:47:a7:eb:15:eb:76:41:4b:1e:b4:9b:
                    5b:87:56:60:a0:a5:9c:e3:40:e3:e6:8e:dd:4b:96:
                    85:9a:d1:cd:dc:04:a4:31:26:9e:6f:6d:c5:32:23:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2C:A3:E2:C6:19:59:F1:E7:3B:28:32:28:75:EF:A7:43:B1:F4:4A
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:0a:0e:d9:3d:dc:df:9f:b0:40:66:db:f0:17:3a:6e:42:60:
         4f:e8:7a:54:58:ad:63:02:a1:37:05:9f:52:63:c9:93:25:d8:
         ff:7e:b0:0a:8f:cd:22:71:69:de:30:3b:3c:58:dc:d8:f4:eb:
         76:f2:fb:1c:87:aa:9b:85:e9:12:1f:c4:44:d1:17:5c:90:ba:
         f5:64:22:e7:f1:92:c8:62:56:74:3c:02:23:05:35:9c:2d:25:
         3a:93:99:fa:2f:d2:b2:a5:ad:51:6e:98:1f:85:90:e3:d7:55:
         6e:d0:35:87:5d:ac:e8:3a:cd:8b:2b:13:99:b6:95:85:0e:30:
         8e:a0:2e:df:73:ed:e6:e7:42:dd:25:61:87:91:c1:ae:a4:95:
         3e:7c:f6:e6:a1:7f:a7:3f:7e:a8:19:73:33:17:10:15:12:99:
         3f:8c:0d:70:0c:18:f0:d6:df:1d:6e:26:6c:21:46:ba:5a:e6:
         c3:6c:95:39:79:52:d2:5b:5f:28:76:9a:48:10:6c:2b:01:cc:
         03:53:fb:3c:8f:0c:b6:db:2e:a5:be:78:c8:be:5d:61:30:1c:
         5e:74:ca:3d:73:ef:a8:2c:3e:ea:0b:c2:7a:48:b8:e0:f4:1a:
         85:5c:e5:01:16:74:d9:88:cf:7e:04:1e:60:74:a9:e2:f9:30:
         ae:70:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 07:06:08 2026 by rpki-client