Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197723.roa
File:                     AS197723.roa (raw, json)
Hash identifier:          UCu6KeydCK9+4NLWOb2wWwGPTB8MCz8ucJXbRYe5HIE=
Subject key identifier:   5E:96:2B:D5:7F:D1:60:99:FA:E6:03:4F:29:01:A3:19:59:73:E6:7B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5588D4831B7A7B53EAF2E773F0BC57DD0CCA9D99
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197723.roa
Signing time:             Tue 18 Jul 2023 23:06:29 +0000
ROA not before:           Tue 18 Jul 2023 23:01:29 +0000
ROA not after:            Tue 16 Jul 2024 23:06:29 +0000
asID:                     197723
IP address blocks:        2a05:dfc1:6a00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:88:d4:83:1b:7a:7b:53:ea:f2:e7:73:f0:bc:57:dd:0c:ca:9d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jul 18 23:01:29 2023 GMT
            Not After : Jul 16 23:06:29 2024 GMT
        Subject: CN=5E962BD57FD16099FAE6034F2901A3195973E67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b7:eb:88:ca:5f:1f:57:a6:38:0a:b9:81:e6:
                    d7:4d:89:54:bb:f7:04:56:50:8f:49:0c:12:36:8f:
                    84:77:77:b9:29:c0:a1:ca:98:0f:1e:74:d1:aa:f4:
                    5f:48:19:19:a6:cc:3e:69:cc:fb:b3:cb:fa:e9:67:
                    31:57:4b:66:d0:01:18:21:68:9c:2b:b7:34:d8:0e:
                    8b:24:b7:b6:fa:29:14:3c:b4:74:12:67:25:f8:23:
                    b5:60:ab:74:dd:7b:df:b5:a8:33:da:43:b4:4e:72:
                    10:ac:fc:b7:bf:42:c8:e4:14:30:55:6a:ac:6b:0f:
                    c5:1e:b6:32:6c:e5:a3:39:0d:6d:01:d9:84:47:05:
                    a0:aa:2b:67:2d:a8:49:8c:7c:48:6d:20:1a:82:bd:
                    6a:0e:5c:8a:e8:3a:b1:17:20:f5:dd:47:02:0b:7a:
                    09:a7:ea:02:37:52:bc:15:37:82:f4:4e:50:7c:06:
                    84:43:fc:cc:84:46:b2:15:bd:d0:17:86:fb:50:1f:
                    75:96:b8:f7:15:5e:23:b6:85:07:d0:c2:4a:db:fe:
                    71:b8:f6:21:11:e9:23:96:42:e6:89:d3:cc:c6:67:
                    78:0f:57:e0:40:b5:47:c6:a9:24:42:88:53:64:6e:
                    c0:70:2e:f2:27:48:03:bb:27:0c:6b:ad:09:85:a5:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:96:2B:D5:7F:D1:60:99:FA:E6:03:4F:29:01:A3:19:59:73:E6:7B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197723.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:46:a3:90:2f:c6:73:52:b1:66:ee:b7:ee:12:a8:af:79:2c:
         f7:cc:bd:b0:25:4e:1a:cb:47:cf:98:42:bb:37:a2:ce:63:d7:
         e9:aa:2b:69:17:09:c2:13:5f:65:92:a7:aa:04:ba:ff:92:ab:
         40:4d:91:cc:8d:70:42:f3:09:e5:52:7e:7e:1d:e1:3a:e1:92:
         66:a2:99:27:63:8a:34:e0:fd:b8:ef:00:6c:06:4d:57:a2:39:
         37:fd:1c:a3:98:6a:db:fa:2b:d3:db:9d:dc:e2:cc:1e:6c:6a:
         f5:8a:99:99:c6:7d:82:1d:20:10:7b:72:ff:96:39:f1:2d:01:
         e7:e7:0d:3a:22:86:5f:74:1a:1c:ab:e6:5a:fd:b1:db:9f:fe:
         ba:1f:f2:c1:b6:0a:13:3f:5a:8e:a8:a5:1e:93:14:ba:7d:24:
         9e:a5:70:ca:81:d1:63:08:55:40:87:a0:a1:41:de:df:3d:a2:
         e1:66:6a:4b:1f:4d:9d:4c:8e:13:98:77:91:68:4c:88:2a:8e:
         34:3a:dd:ce:5a:de:89:de:10:a2:20:5b:db:7d:7b:ca:05:f2:
         79:e9:1d:35:df:d5:b6:7c:c9:21:97:97:dc:bf:25:1b:92:a8:
         1d:42:f3:c6:66:ac:7a:ba:94:d4:04:f7:ed:ac:dd:60:83:b9:
         7f:e8:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org