Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198075.roa
File:                     AS198075.roa (raw, json)
Hash identifier:          zcHigMl1YNIMwn7c5LSo8Op9jN6hVe3gOMJBSjbF2xU=
Subject key identifier:   39:A5:FA:09:08:59:BC:8B:D1:BD:26:26:93:15:AD:A1:45:39:B5:FF
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       60E6C0E1695BE66205C1923BBB4598033C18802E
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198075.roa
Signing time:             Mon 16 Oct 2023 21:36:25 +0000
ROA not before:           Mon 16 Oct 2023 21:31:25 +0000
ROA not after:            Mon 14 Oct 2024 21:36:25 +0000
asID:                     198075
IP address blocks:        2a05:dfc1:ab00::/40 maxlen: 48
                          2a05:dfc1:ac00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e6:c0:e1:69:5b:e6:62:05:c1:92:3b:bb:45:98:03:3c:18:80:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct 16 21:31:25 2023 GMT
            Not After : Oct 14 21:36:25 2024 GMT
        Subject: CN=39A5FA090859BC8BD1BD26269315ADA14539B5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:63:c2:0c:c3:7b:fe:09:73:3f:f8:1c:00:
                    81:0c:94:6e:54:19:a8:94:95:bd:c3:1f:7c:45:c8:
                    ea:25:6c:61:e2:f0:07:ab:d3:00:28:9c:0c:aa:d0:
                    f2:e7:a1:8c:9b:b0:b0:e6:65:ee:84:54:cd:a3:5a:
                    b5:a1:0a:a6:cd:da:9d:a0:8e:46:03:02:e0:16:f9:
                    50:16:22:79:86:dd:37:ad:9c:6f:2f:c8:47:5e:dd:
                    34:ad:3b:ac:e0:15:8d:f9:e9:e3:7f:bb:25:73:9d:
                    45:a0:71:d8:0b:6b:3c:79:49:7a:4f:4f:97:80:1b:
                    50:c9:26:69:44:45:cc:e4:82:d7:fa:ed:e5:7b:e5:
                    b3:ef:05:07:1a:a1:68:97:80:2d:e8:62:73:05:c5:
                    b0:4d:9c:4b:c8:88:e4:d1:52:5e:61:30:05:f1:96:
                    11:15:bb:a5:2d:11:b1:7c:7a:b4:06:95:1f:da:b9:
                    cf:99:7b:66:fe:86:98:00:24:0c:7b:ce:cb:be:8a:
                    41:d7:da:14:32:77:5e:f8:6a:ba:45:be:bd:65:70:
                    3d:f7:33:9e:43:af:b5:4b:65:08:84:3f:59:10:e9:
                    17:fd:20:85:d4:03:43:43:7f:b8:d5:43:df:d1:92:
                    b2:f9:a4:57:95:6d:66:70:01:41:9e:75:48:78:74:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A5:FA:09:08:59:BC:8B:D1:BD:26:26:93:15:AD:A1:45:39:B5:FF
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:ab00::-2a05:dfc1:acff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         92:2d:64:a7:57:e4:7e:07:6d:c0:35:6d:67:77:46:79:13:09:
         f0:9f:e0:6b:ef:e3:8a:40:29:b3:40:51:4e:9d:06:b8:fc:39:
         e9:49:5d:0f:f7:8b:2b:2f:8f:21:15:b7:f1:1a:6e:9f:bd:64:
         91:84:fd:09:1f:7d:6a:3d:44:e2:ef:17:9a:c8:67:64:72:87:
         6f:e0:82:d5:f0:c2:44:3f:58:f7:b1:5a:2a:89:40:81:76:46:
         5f:a6:35:de:56:a2:34:21:a6:cf:9d:21:85:9b:3c:58:64:32:
         fd:25:45:40:27:a3:af:8c:4d:7f:82:8d:58:34:fa:10:c8:71:
         2d:28:5d:1d:b0:2d:86:5f:c4:01:ba:76:03:c7:9b:3e:ce:f3:
         c3:65:40:70:2e:4a:aa:e3:3b:73:62:7b:c3:7b:e1:8c:66:29:
         d3:41:b0:41:2d:e8:af:89:56:3d:fc:b2:7c:37:aa:a6:35:d3:
         12:ee:d0:9b:e2:81:32:b0:7b:71:a3:9f:7d:09:02:3d:ad:57:
         12:31:30:d2:31:28:e4:96:23:12:6b:d4:5e:42:58:a4:24:d1:
         75:da:02:6a:75:68:ca:01:a5:3e:bc:8a:8f:f9:f1:11:07:e7:
         43:e2:86:c2:0f:07:8d:f8:24:c0:cf:11:b6:13:ee:1e:65:26:
         75:8b:b1:bb
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUYObA4Wlb5mIFwZI7u0WYAzwYgC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzEwMTYyMTMxMjVaFw0yNDEwMTQyMTM2MjVaMDMxMTAvBgNV
BAMTKDM5QTVGQTA5MDg1OUJDOEJEMUJEMjYyNjkzMTVBREExNDUzOUI1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUmPCDMN7/glzP/gcAIEMlG5U
GaiUlb3DH3xFyOolbGHi8Aer0wAonAyq0PLnoYybsLDmZe6EVM2jWrWhCqbN2p2g
jkYDAuAW+VAWInmG3TetnG8vyEde3TStO6zgFY356eN/uyVznUWgcdgLazx5SXpP
T5eAG1DJJmlERczkgtf67eV75bPvBQcaoWiXgC3oYnMFxbBNnEvIiOTRUl5hMAXx
lhEVu6UtEbF8erQGlR/auc+Ze2b+hpgAJAx7zsu+ikHX2hQyd174arpFvr1lcD33
M55Dr7VLZQiEP1kQ6Rf9IIXUA0NDf7jVQ9/RkrL5pFeVbWZwAUGedUh4dLQPAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQUOaX6CQhZvIvRvSYmkxWtoUU5tf8wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTk4MDc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBd/BqwMGACoF38GsMA0GCSqGSIb3DQEB
CwUAA4IBAQCSLWSnV+R+B23ANW1nd0Z5Ewnwn+Br7+OKQCmzQFFOnQa4/DnpSV0P
94srL48hFbfxGm6fvWSRhP0JH31qPUTi7xeayGdkcodv4ILV8MJEP1j3sVoqiUCB
dkZfpjXeVqI0IabPnSGFmzxYZDL9JUVAJ6OvjE1/go1YNPoQyHEtKF0dsC2GX8QB
unYDx5s+zvPDZUBwLkqq4ztzYnvDe+GMZinTQbBBLeiviVY9/LJ8N6qmNdMS7tCb
4oEysHtxo599CQI9rVcSMTDSMSjkliMSa9ReQlikJNF12gJqdWjKAaU+vIqP+fER
B+dD4obCDweN+CTAzxG2E+4eZSZ1i7G7
-----END CERTIFICATE-----
Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org