Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199488.roa
File:                     AS199488.roa (raw, json)
Hash identifier:          f19T9FVjjtwjJnhVs9zEbCRBuGTj6JC0AB2Xo9rvF6o=
Subject key identifier:   83:1F:7E:D5:CB:3A:79:C0:EF:57:CC:E1:50:BB:BC:68:20:60:BE:B3
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       365FB78AC07E29A7484268BE5F0E4119EC62852A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199488.roa
Signing time:             Sun 06 Oct 2024 04:45:19 +0000
ROA not before:           Sun 06 Oct 2024 04:40:19 +0000
ROA not after:            Sun 05 Oct 2025 04:45:19 +0000
asID:                     199488
IP address blocks:        2a0a:6040:8500::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5f:b7:8a:c0:7e:29:a7:48:42:68:be:5f:0e:41:19:ec:62:85:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:19 2024 GMT
            Not After : Oct  5 04:45:19 2025 GMT
        Subject: CN=831F7ED5CB3A79C0EF57CCE150BBBC682060BEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:eb:f5:db:dc:8f:5a:f2:14:ee:f4:6a:9a:
                    5d:f1:72:05:8d:f0:4a:1a:e3:1f:80:e6:4e:2b:71:
                    ed:35:54:3f:01:2c:4c:d2:45:a6:53:7b:7a:47:16:
                    d4:b1:71:ed:21:88:15:32:9e:2f:89:f8:e1:da:98:
                    fc:56:fe:f0:64:57:1b:c8:0e:3b:98:61:cf:94:8e:
                    54:f7:21:47:bd:89:b4:f1:4a:15:fd:94:16:d4:09:
                    25:40:bb:10:83:6b:c8:25:22:86:c6:b1:f8:75:05:
                    21:9c:c0:bf:55:31:01:a7:e9:71:72:c0:69:b2:c3:
                    8a:c5:95:14:b9:7d:24:61:c6:99:64:63:9c:8c:65:
                    59:98:2b:15:81:6f:27:0a:68:ed:0c:81:da:ce:6e:
                    5d:ab:6b:36:7f:ae:9e:8a:c3:8b:0e:85:6b:81:84:
                    6e:02:41:d4:e5:7f:6b:ca:2e:00:e7:05:53:b7:e2:
                    22:0e:4d:b9:e1:71:1e:fd:b7:d5:91:8d:cb:0c:51:
                    ec:75:2f:67:a1:41:2d:88:de:d7:6e:87:3e:59:9e:
                    fc:32:6b:18:a0:2f:5c:01:64:42:0b:40:11:c0:c0:
                    1c:76:c1:5b:4e:15:a0:dd:b8:13:74:e1:e8:bd:11:
                    b2:92:00:49:c4:9d:80:58:1a:4a:f3:0a:f8:11:bb:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1F:7E:D5:CB:3A:79:C0:EF:57:CC:E1:50:BB:BC:68:20:60:BE:B3
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199488.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:a0:ec:f2:ac:66:99:54:1c:77:f5:57:34:99:70:57:da:84:
         02:a0:0b:9d:1f:9a:13:64:82:57:53:19:1d:24:90:ed:78:48:
         80:eb:64:6c:a5:aa:73:9f:52:e9:36:f8:91:d6:87:4b:83:c5:
         d6:27:18:66:50:b0:e0:28:ac:60:91:06:c4:68:70:0e:c0:76:
         74:21:94:af:9c:ee:68:79:b1:ec:61:15:a3:9c:86:c7:67:9b:
         ce:7e:94:40:50:6d:92:d0:5a:46:02:b2:34:f2:85:da:3e:35:
         01:77:0e:11:7b:4a:2a:36:35:f9:da:10:44:c0:ad:80:d2:8b:
         b5:a1:83:d0:fc:e1:c6:e8:63:b0:0a:47:6c:40:07:c1:1f:71:
         09:b1:fb:cd:ee:6e:93:88:21:92:8a:87:90:9a:ef:3b:c2:42:
         ea:93:e8:54:72:ad:1f:29:9c:8e:46:09:72:41:aa:ac:9e:5f:
         73:b6:40:7a:4e:d7:fd:3d:59:ab:32:54:17:d5:3c:26:69:a0:
         8e:61:15:4e:5f:59:a6:80:8b:b0:ca:a4:0e:18:de:da:23:97:
         bc:16:92:88:60:5b:b7:54:5a:91:e4:8a:da:aa:21:0b:98:3c:
         ec:d2:ae:a7:3d:70:c1:7a:f9:75:9b:f0:4e:5b:e3:5b:a8:fa:
         a2:03:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org