Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197532.roa
File:                     AS197532.roa (raw, json)
Hash identifier:          pyJQhSjEEycItI0i2wU/5fxE1MpEOy3FdnBvnR2CR2s=
Subject key identifier:   8E:A0:A4:E5:95:DF:69:30:13:58:12:58:39:30:3D:DE:84:E1:0F:CF
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       349E4FB574249640481170342E2F6C670050BBDF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197532.roa
Signing time:             Sat 16 Sep 2023 13:08:59 +0000
ROA not before:           Sat 16 Sep 2023 13:03:59 +0000
ROA not after:            Sat 14 Sep 2024 13:08:59 +0000
asID:                     197532
IP address blocks:        2a05:dfc1:7200::/40 maxlen: 48
                          2a05:dfc1:9400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9e:4f:b5:74:24:96:40:48:11:70:34:2e:2f:6c:67:00:50:bb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 16 13:03:59 2023 GMT
            Not After : Sep 14 13:08:59 2024 GMT
        Subject: CN=8EA0A4E595DF69301358125839303DDE84E10FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:f4:bb:63:50:7f:93:45:4e:6d:3e:50:27:
                    20:30:cc:d4:c3:62:80:ad:bb:7a:22:43:81:19:4a:
                    af:b2:9f:7e:2c:6a:a8:0c:65:ad:72:ce:62:f1:c4:
                    6d:3e:4d:f2:94:d5:33:59:9a:f5:f4:8d:3d:18:d7:
                    78:82:38:5c:d1:01:36:f7:3a:ef:c3:bf:2a:fa:6f:
                    ab:b4:71:15:67:8b:ce:58:aa:8b:85:42:f0:4b:41:
                    3d:3b:96:ff:e2:73:d0:99:e8:77:78:50:46:73:2e:
                    68:9c:0d:3b:f3:5f:c2:d0:f5:59:ef:91:5a:f1:2e:
                    43:c1:ad:f9:c1:8b:47:d4:dc:de:e9:26:44:ef:a5:
                    34:77:49:42:40:7b:dc:d1:7e:0d:e3:61:23:1e:74:
                    36:d9:08:63:2d:91:38:14:bc:b0:28:42:1d:cc:20:
                    10:57:52:6a:f3:20:9e:e2:5c:bb:53:b0:a5:75:f8:
                    e5:2d:f4:e6:c0:ef:b1:8d:2c:f1:f5:4f:98:e4:30:
                    35:27:35:a4:0a:3b:e3:19:06:2a:55:dd:ae:fc:6b:
                    c5:79:10:db:4d:d0:63:1d:20:1a:c8:3e:d1:97:ef:
                    0e:5e:a1:2b:5b:d2:1d:78:85:5c:bc:45:20:73:fe:
                    7c:e5:e2:03:07:fb:60:ff:79:cb:ef:e0:70:3d:1b:
                    2e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A0:A4:E5:95:DF:69:30:13:58:12:58:39:30:3D:DE:84:E1:0F:CF
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:7200::/40
                  2a05:dfc1:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:c0:07:d5:78:37:93:cf:1d:ee:76:0d:a0:f9:ed:3f:10:e0:
         77:b9:77:28:e2:11:1e:be:73:f8:b2:3f:74:4c:4b:a7:51:32:
         d2:99:a2:0d:f6:2c:af:35:a5:f0:ba:04:94:44:00:56:b4:56:
         9b:f2:6d:c6:b7:d3:d8:78:1c:1f:e9:68:54:11:5a:97:92:d4:
         86:3c:75:91:97:e8:16:04:93:2a:75:4e:d6:7d:ae:ec:eb:24:
         8f:10:0e:f1:be:4d:9a:b1:51:95:6e:6d:79:84:fb:76:89:1f:
         72:c9:ec:37:ff:70:ac:2a:c2:1b:09:e8:f4:01:c5:68:01:05:
         43:5c:1c:04:74:5b:07:99:61:ed:c1:49:fe:61:47:60:78:9a:
         56:fd:97:88:53:77:e1:03:69:2c:f9:45:4b:b3:c3:87:62:a0:
         0f:68:21:48:04:b3:c8:bb:0c:7a:c7:6b:53:02:82:01:27:59:
         1f:1a:b4:87:2b:3a:bc:a9:4e:55:60:56:c4:b4:a5:26:db:b1:
         01:a4:fd:6a:53:cc:05:b7:54:88:f1:8e:3d:d7:50:24:fe:d0:
         b2:e3:93:e1:b0:ef:26:c9:92:60:91:62:32:a9:16:19:8b:46:
         ad:14:51:a0:d7:84:65:39:94:14:ca:88:8d:4a:2b:a7:e8:ad:
         ec:57:c5:25
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUNJ5PtXQklkBIEXA0Li9sZwBQu98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzA5MTYxMzAzNTlaFw0yNDA5MTQxMzA4NTlaMDMxMTAvBgNV
BAMTKDhFQTBBNEU1OTVERjY5MzAxMzU4MTI1ODM5MzAzRERFODRFMTBGQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMfS7Y1B/k0VObT5QJyAwzNTD
YoCtu3oiQ4EZSq+yn34saqgMZa1yzmLxxG0+TfKU1TNZmvX0jT0Y13iCOFzRATb3
Ou/Dvyr6b6u0cRVni85YqouFQvBLQT07lv/ic9CZ6Hd4UEZzLmicDTvzX8LQ9Vnv
kVrxLkPBrfnBi0fU3N7pJkTvpTR3SUJAe9zRfg3jYSMedDbZCGMtkTgUvLAoQh3M
IBBXUmrzIJ7iXLtTsKV1+OUt9ObA77GNLPH1T5jkMDUnNaQKO+MZBipV3a78a8V5
ENtN0GMdIBrIPtGX7w5eoStb0h14hVy8RSBz/nzl4gMH+2D/ecvv4HA9Gy7NAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUjqCk5ZXfaTATWBJYOTA93oThD88wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTk3NTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF
BwEHAQH/BBowGDAWBAIAAjAQAwYAKgXfwXIDBgAqBd/BlDANBgkqhkiG9w0BAQsF
AAOCAQEAwMAH1Xg3k88d7nYNoPntPxDgd7l3KOIRHr5z+LI/dExLp1Ey0pmiDfYs
rzWl8LoElEQAVrRWm/JtxrfT2HgcH+loVBFal5LUhjx1kZfoFgSTKnVO1n2u7Osk
jxAO8b5NmrFRlW5teYT7dokfcsnsN/9wrCrCGwno9AHFaAEFQ1wcBHRbB5lh7cFJ
/mFHYHiaVv2XiFN34QNpLPlFS7PDh2KgD2ghSASzyLsMesdrUwKCASdZHxq0hys6
vKlOVWBWxLSlJtuxAaT9alPMBbdUiPGOPddQJP7QsuOT4bDvJsmSYJFiMqkWGYtG
rRRRoNeEZTmUFMqIjUorp+it7FfFJQ==
-----END CERTIFICATE-----
Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org