Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS13781.roa
File:                     AS13781.roa (raw, json)
Hash identifier:          cUkEuIUQF09XcR2l1PEjDW4hRHtsZoKqXk8KxcQX5xo=
Subject key identifier:   23:F4:C1:F9:11:F3:0E:1D:5C:43:48:9F:E3:B3:8B:0A:51:F5:0F:78
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       482E53A6FD974679706B7A2FDFF9AEACB02E9143
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS13781.roa
Signing time:             Thu 08 Feb 2024 08:03:10 +0000
ROA not before:           Thu 08 Feb 2024 07:58:10 +0000
ROA not after:            Thu 06 Feb 2025 08:03:10 +0000
asID:                     13781
IP address blocks:        2a05:dfc1:8600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2e:53:a6:fd:97:46:79:70:6b:7a:2f:df:f9:ae:ac:b0:2e:91:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Feb  8 07:58:10 2024 GMT
            Not After : Feb  6 08:03:10 2025 GMT
        Subject: CN=23F4C1F911F30E1D5C43489FE3B38B0A51F50F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:ba:31:91:d3:f5:1b:1a:e7:af:69:ac:91:
                    ef:82:ee:8a:ed:7c:7c:50:25:24:32:d3:69:3c:58:
                    90:f7:d1:43:84:75:18:e2:90:2e:54:c3:36:86:ca:
                    c2:5e:80:de:f8:94:a7:73:b1:28:24:ab:16:ab:db:
                    f3:34:25:ea:21:ae:fe:7d:59:6d:61:67:ab:9a:53:
                    a3:64:c1:a9:8e:fd:65:15:4c:5c:76:0f:78:5f:dd:
                    a4:00:1d:0b:b0:36:dc:03:22:a2:07:9f:7e:60:ed:
                    39:64:53:be:b8:9b:6f:a9:b1:c7:dd:38:7e:89:e3:
                    5b:75:42:27:5e:2c:74:08:f9:8a:77:ec:fc:bc:3b:
                    79:fc:d5:62:01:0b:52:21:14:8f:1b:cb:e2:d8:d4:
                    44:0b:13:14:14:a2:f4:6d:8d:a4:31:63:97:a5:35:
                    ab:a8:e7:a2:db:08:f9:f0:0a:7f:b7:af:0b:88:f5:
                    63:3f:bb:f5:99:4f:33:5e:08:43:f7:fe:44:66:8c:
                    ab:ec:29:17:cc:e3:b2:0c:55:18:35:23:bc:f4:ca:
                    29:61:51:ef:60:2e:2c:e6:06:52:2e:e4:33:a6:d4:
                    62:a1:4f:2e:b7:75:50:8b:ba:40:cc:47:08:d8:6c:
                    f8:c4:16:55:3a:8f:92:6a:3a:91:db:a1:35:34:d0:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F4:C1:F9:11:F3:0E:1D:5C:43:48:9F:E3:B3:8B:0A:51:F5:0F:78
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS13781.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:f6:80:19:6c:d1:37:48:e2:31:c8:f5:1f:34:18:0a:73:92:
         4b:fe:f0:7e:ef:1c:ff:e0:e0:38:0a:e6:02:78:cf:d2:74:76:
         e0:cd:00:3d:d3:13:c8:98:37:7e:dd:39:4b:af:be:c0:fe:97:
         6f:4a:33:33:b1:f6:3d:c1:84:3f:3e:1d:ae:38:09:a3:de:75:
         86:7e:1e:cb:e2:3e:f4:b5:e0:f7:55:96:31:5e:37:e2:2c:8a:
         15:e7:d7:fe:56:49:b1:40:4f:40:f8:fe:c3:5a:25:33:32:3c:
         06:de:7c:4a:81:d7:5f:20:59:e8:c3:06:fa:06:5b:63:6c:21:
         8c:38:cd:21:d7:a8:ac:8d:da:e8:f3:a9:fc:d4:8a:bc:24:9b:
         60:9a:36:10:a2:8f:09:10:a3:78:3c:0f:04:fe:e0:8a:0c:23:
         29:e6:cf:68:00:bf:76:32:32:d4:9c:40:08:ac:44:c6:b3:b2:
         e0:b5:ad:fd:37:cd:cb:43:53:89:7f:48:50:80:bb:99:dd:cc:
         b5:1f:98:b9:af:9c:23:d0:f2:35:f6:ab:e1:49:0d:ad:71:78:
         54:32:69:98:cb:bd:1e:46:19:11:4f:4e:a9:11:63:dd:b0:df:
         31:81:3c:d2:f0:64:b5:af:28:a4:0f:1e:0d:aa:df:2f:5a:c8:
         cc:76:1c:3e
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUSC5Tpv2XRnlwa3ov3/murLAukUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDAyMDgwNzU4MTBaFw0yNTAyMDYwODAzMTBaMDMxMTAvBgNV
BAMTKDIzRjRDMUY5MTFGMzBFMUQ1QzQzNDg5RkUzQjM4QjBBNTFGNTBGNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDemroxkdP1Gxrnr2mske+C7ort
fHxQJSQy02k8WJD30UOEdRjikC5UwzaGysJegN74lKdzsSgkqxar2/M0Jeohrv59
WW1hZ6uaU6NkwamO/WUVTFx2D3hf3aQAHQuwNtwDIqIHn35g7TlkU764m2+pscfd
OH6J41t1QideLHQI+Yp37Py8O3n81WIBC1IhFI8by+LY1EQLExQUovRtjaQxY5el
Nauo56LbCPnwCn+3rwuI9WM/u/WZTzNeCEP3/kRmjKvsKRfM47IMVRg1I7z0yilh
Ue9gLizmBlIu5DOm1GKhTy63dVCLukDMRwjYbPjEFlU6j5JqOpHboTU00AgLAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUI/TB+RHzDh1cQ0if47OLClH1D3gwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTM3ODEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BhjANBgkqhkiG9w0BAQsFAAOCAQEARPaA
GWzRN0jiMcj1HzQYCnOSS/7wfu8c/+DgOArmAnjP0nR24M0APdMTyJg3ft05S6++
wP6Xb0ozM7H2PcGEPz4drjgJo951hn4ey+I+9LXg91WWMV434iyKFefX/lZJsUBP
QPj+w1olMzI8Bt58SoHXXyBZ6MMG+gZbY2whjDjNIdeorI3a6POp/NSKvCSbYJo2
EKKPCRCjeDwPBP7gigwjKebPaAC/djIy1JxACKxExrOy4LWt/TfNy0NTiX9IUIC7
md3MtR+Yua+cI9DyNfar4UkNrXF4VDJpmMu9HkYZEU9OqRFj3bDfMYE80vBkta8o
pA8eDarfL1rIzHYcPg==
-----END CERTIFICATE-----
Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org