Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS26006.roa
File:                     AS26006.roa (raw, json)
Hash identifier:          B+1ZVC60HOX/MeU9IIMpXnvPppEvgp3k+5FV36b5ebg=
Subject key identifier:   71:CB:1F:39:23:DB:44:9F:00:02:0D:72:3D:55:9D:7B:7A:A7:89:60
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       729769005CACF67084BC0C8EACA4C2F45C851765
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS26006.roa
Signing time:             Fri 27 Jun 2025 00:46:41 +0000
ROA not before:           Fri 27 Jun 2025 00:41:41 +0000
ROA not after:            Fri 26 Jun 2026 00:46:41 +0000
asID:                     26006
IP address blocks:        2a05:dfc1:a00::/40 maxlen: 48
                          2a05:dfc1:6b00::/40 maxlen: 48
                          2a05:dfc1:9700::/40 maxlen: 48
                          2a06:9f81:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:97:69:00:5c:ac:f6:70:84:bc:0c:8e:ac:a4:c2:f4:5c:85:17:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jun 27 00:41:41 2025 GMT
            Not After : Jun 26 00:46:41 2026 GMT
        Subject: CN=71CB1F3923DB449F00020D723D559D7B7AA78960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:53:bb:6a:a1:f6:15:fe:3a:61:72:7b:cd:
                    26:72:fa:a1:c8:49:6f:27:51:52:f5:ee:d0:85:01:
                    c8:d4:1e:37:3e:dd:6a:17:43:6e:8c:59:6b:49:be:
                    2b:92:0b:d8:36:00:69:0f:55:38:ae:fd:61:e9:fd:
                    f2:ff:a8:e8:99:9f:8f:fc:7f:e7:3c:21:8f:92:07:
                    32:a1:1a:87:7c:3d:48:c1:ff:c2:51:92:16:7f:73:
                    ff:d8:52:1e:60:3e:45:21:6f:a3:bf:49:94:fc:e4:
                    b4:be:c3:2b:78:23:57:b8:be:07:f1:9d:d7:56:8b:
                    c4:48:e7:ed:9e:a8:38:38:83:7f:7d:32:8c:ef:d7:
                    56:7d:a8:44:91:86:b9:e5:4e:60:c9:60:46:aa:8a:
                    b6:cb:b3:dd:71:bc:9e:69:08:f6:c2:03:d1:30:a1:
                    8c:48:a7:e8:5d:9c:4f:98:63:35:19:ff:2f:ab:22:
                    2c:43:05:bc:c6:6f:bd:9b:99:d4:c1:bb:f9:e0:43:
                    85:ce:bf:f2:77:d4:91:dc:7c:58:ef:2d:b6:a0:43:
                    d2:a6:5a:b8:05:4f:df:b5:76:33:25:62:ae:05:ee:
                    a1:85:6c:e3:c2:19:9f:61:e5:25:1d:4e:e5:da:0c:
                    15:0b:93:6e:ce:2a:50:58:63:a8:ef:c8:84:c1:a9:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CB:1F:39:23:DB:44:9F:00:02:0D:72:3D:55:9D:7B:7A:A7:89:60
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS26006.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:a00::/40
                  2a05:dfc1:6b00::/40
                  2a05:dfc1:9700::/40
                  2a06:9f81:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:4c:6d:03:42:a6:5f:05:76:84:c2:7f:4d:63:e8:df:19:e1:
         a0:fc:09:46:60:4b:b1:6c:77:19:c7:cd:de:21:af:b5:0d:74:
         be:53:41:ee:61:69:a5:8e:96:8b:3c:c4:41:d5:9f:fe:9c:27:
         59:4c:76:30:45:b7:dd:b7:de:0b:05:ea:e7:9a:a7:27:ff:8f:
         ce:a3:bf:0f:b5:03:e2:7a:be:66:42:95:5b:91:46:c2:05:4d:
         a0:c8:6f:98:89:da:d3:56:67:e2:15:51:8c:f1:2d:60:92:98:
         11:63:ab:82:6a:f9:c6:fb:85:d3:1c:10:d3:bd:b7:8c:68:0a:
         ed:f3:ef:ee:ee:11:c7:fd:bd:36:f6:74:3f:04:cc:95:12:b8:
         5d:34:8c:eb:23:79:d4:91:93:87:0f:d4:64:c4:ea:ce:2e:d8:
         70:e0:a5:9a:ce:a1:18:72:c0:39:3f:b4:d1:a7:3f:3f:0c:53:
         ef:65:28:24:0c:d0:da:14:b6:75:9a:ad:89:ed:df:b1:aa:aa:
         2a:b3:02:33:37:35:e7:cf:43:8f:be:1d:4b:20:1b:1c:3e:06:
         3d:12:1a:fa:c7:5a:28:65:bc:b9:da:7e:ba:a6:22:06:1c:81:
         d2:c4:d3:ed:23:42:ea:16:12:65:2a:45:25:b9:83:72:6d:04:
         6f:50:ca:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:38:11 2025 by rpki-client