Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199266.roa
File:                     AS199266.roa (raw, json)
Hash identifier:          l/QujS1pgEzd6he4rZZhgTu7UqqxYyMlL/WZBiTf4FE=
Subject key identifier:   2F:C4:BA:8A:3D:DA:A8:98:BA:AB:E5:63:FD:91:1D:6D:78:DD:30:4B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       147DFC07D355EC5C531CD4A34E2C28F252C81115
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199266.roa
Signing time:             Sun 06 Oct 2024 04:44:59 +0000
ROA not before:           Sun 06 Oct 2024 04:39:59 +0000
ROA not after:            Sun 05 Oct 2025 04:44:59 +0000
asID:                     199266
IP address blocks:        2a0a:6040:8900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7d:fc:07:d3:55:ec:5c:53:1c:d4:a3:4e:2c:28:f2:52:c8:11:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:39:59 2024 GMT
            Not After : Oct  5 04:44:59 2025 GMT
        Subject: CN=2FC4BA8A3DDAA898BAABE563FD911D6D78DD304B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:b4:47:01:d2:3f:c4:e5:5d:a2:2f:4e:eb:
                    9a:35:e0:86:09:45:40:e0:72:e0:0d:ba:52:bf:f7:
                    c0:88:06:8c:32:45:7f:e3:9b:c8:42:19:32:b3:ac:
                    73:b3:93:04:bd:f2:62:6a:07:d2:79:87:8f:c3:03:
                    7a:63:90:74:ae:c2:df:bd:e6:37:e1:95:77:f2:91:
                    b4:3d:47:86:ea:37:08:c2:c6:71:9c:ae:d0:e5:c9:
                    bc:e2:f2:f4:94:3d:23:9a:46:d8:53:5b:59:d5:d0:
                    9e:32:17:b2:cc:97:85:b4:ed:45:b4:da:a7:af:4a:
                    46:1a:c6:62:1e:31:63:38:d5:76:01:0c:61:48:ed:
                    82:16:0d:20:ff:57:a8:60:a6:2b:45:de:b3:b5:98:
                    c1:40:3a:e6:5b:cb:be:b2:08:83:af:46:0b:1d:c1:
                    6d:d4:20:f0:d0:f8:9f:62:43:81:8d:5b:d6:4f:08:
                    eb:25:b3:29:d6:6a:56:fd:5c:55:f8:3e:20:b6:b3:
                    01:4e:26:86:2c:f3:01:a4:b2:3c:46:66:10:56:73:
                    13:69:17:ee:c3:63:63:43:1d:58:d5:4d:26:db:2a:
                    95:50:2e:f6:56:0d:36:03:64:76:1f:e5:d8:85:ed:
                    f9:32:36:c0:26:a0:11:be:88:55:11:f9:d9:71:af:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:BA:8A:3D:DA:A8:98:BA:AB:E5:63:FD:91:1D:6D:78:DD:30:4B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:56:4b:ff:17:29:dc:a0:38:9c:62:41:52:86:3d:a3:be:fa:
         b2:84:92:9b:88:f6:ff:32:2e:2b:3b:ea:5b:26:8a:4c:4a:ff:
         8c:81:46:df:a4:f1:21:0e:c4:fe:d9:b5:63:4c:2e:4e:63:24:
         2d:4d:9f:7f:d0:3f:1e:f1:ce:4d:4e:8c:48:cb:df:80:f5:e5:
         39:26:49:b3:81:7b:40:ca:a6:ce:2a:f7:33:6c:c3:6f:77:7a:
         4b:5b:f6:38:ab:a6:a0:9e:b1:5b:09:48:9c:f1:90:2d:56:9e:
         7d:ab:92:c5:10:30:46:d9:90:d0:51:60:0c:41:e7:d2:66:c8:
         26:79:b9:f5:a4:f9:e7:21:cf:23:46:66:1e:02:1a:1c:33:20:
         3c:02:48:33:59:d2:a4:ad:98:2a:f7:45:7e:47:5a:ab:91:ac:
         7a:8b:cd:4b:5f:c6:9a:37:23:f2:c2:b4:0b:00:85:b2:ab:cb:
         2e:3a:ce:7d:d9:42:8d:ca:91:34:40:a0:41:55:fd:09:0d:8e:
         a8:03:08:6b:41:c9:52:cd:c0:86:19:7f:5e:3f:8f:25:6c:2d:
         c8:2c:3f:56:12:08:68:44:b6:ae:64:99:bf:3b:03:a9:7e:29:
         49:30:62:c4:97:10:07:83:51:3b:88:fa:5d:50:d4:cc:8b:c4:
         d1:e5:db:bd
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUFH38B9NV7FxTHNSjTiwo8lLIERUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDEwMDYwNDM5NTlaFw0yNTEwMDUwNDQ0NTlaMDMxMTAvBgNV
BAMTKDJGQzRCQThBM0REQUE4OThCQUFCRTU2M0ZEOTExRDZENzhERDMwNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuY7RHAdI/xOVdoi9O65o14IYJ
RUDgcuANulK/98CIBowyRX/jm8hCGTKzrHOzkwS98mJqB9J5h4/DA3pjkHSuwt+9
5jfhlXfykbQ9R4bqNwjCxnGcrtDlybzi8vSUPSOaRthTW1nV0J4yF7LMl4W07UW0
2qevSkYaxmIeMWM41XYBDGFI7YIWDSD/V6hgpitF3rO1mMFAOuZby76yCIOvRgsd
wW3UIPDQ+J9iQ4GNW9ZPCOslsynWalb9XFX4PiC2swFOJoYs8wGksjxGZhBWcxNp
F+7DY2NDHVjVTSbbKpVQLvZWDTYDZHYf5diF7fkyNsAmoBG+iFUR+dlxr2MBAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUL8S6ij3aqJi6q+Vj/ZEdbXjdMEswHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTk5MjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQIkwDQYJKoZIhvcNAQELBQADggEBABhW
S/8XKdygOJxiQVKGPaO++rKEkpuI9v8yLis76lsmikxK/4yBRt+k8SEOxP7ZtWNM
Lk5jJC1Nn3/QPx7xzk1OjEjL34D15TkmSbOBe0DKps4q9zNsw293ektb9jirpqCe
sVsJSJzxkC1Wnn2rksUQMEbZkNBRYAxB59JmyCZ5ufWk+echzyNGZh4CGhwzIDwC
SDNZ0qStmCr3RX5HWquRrHqLzUtfxpo3I/LCtAsAhbKryy46zn3ZQo3KkTRAoEFV
/QkNjqgDCGtByVLNwIYZf14/jyVsLcgsP1YSCGhEtq5kmb87A6l+KUkwYsSXEAeD
UTuI+l1Q1MyLxNHl270=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org