Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199613.roa
File:                     AS199613.roa (raw, json)
Hash identifier:          KyZigMNgdw/xWHHBN112LwLQdlN41zIG89wo5d++0W0=
Subject key identifier:   67:81:E7:DD:7D:1D:0A:DA:60:FA:7B:0F:DA:4C:9A:0A:3D:B5:1E:2B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5B9E1ADE7538B2176CF9F619F7E960DC7AAC20D2
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199613.roa
Signing time:             Sun 06 Oct 2024 04:45:06 +0000
ROA not before:           Sun 06 Oct 2024 04:40:06 +0000
ROA not after:            Sun 05 Oct 2025 04:45:06 +0000
asID:                     199613
IP address blocks:        2a0a:6040:7d00::/40 maxlen: 48
                          2a0a:6040:d800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9e:1a:de:75:38:b2:17:6c:f9:f6:19:f7:e9:60:dc:7a:ac:20:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:06 2024 GMT
            Not After : Oct  5 04:45:06 2025 GMT
        Subject: CN=6781E7DD7D1D0ADA60FA7B0FDA4C9A0A3DB51E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d1:d8:b9:d6:31:e2:62:f6:fe:31:53:ad:ab:
                    ca:0a:3e:3f:07:94:58:df:1e:81:a3:b9:29:b9:b8:
                    91:b9:3e:cf:11:39:27:9a:e3:65:ab:d0:68:65:69:
                    98:84:8a:ad:a7:fa:e4:05:6f:1e:98:9e:0f:33:39:
                    09:86:5d:e0:9d:e2:41:a9:5c:84:4a:d0:1b:58:aa:
                    36:84:4a:d7:40:da:49:8a:1a:cb:f3:6f:62:7c:f2:
                    69:d0:6e:b9:fb:1d:be:7c:e3:d2:8a:b4:39:1d:68:
                    18:b6:03:83:62:46:c7:87:83:68:45:6b:ef:31:6c:
                    6a:68:7d:d6:98:32:b7:aa:fd:70:14:e4:d0:e5:af:
                    e0:92:cd:53:41:2f:46:71:31:35:a4:31:51:0d:74:
                    75:3d:85:3b:2e:39:ad:4d:16:77:2c:27:f6:af:33:
                    07:ec:91:98:17:0e:2d:96:b1:f3:cb:2c:d6:89:27:
                    b1:62:a4:36:54:06:a2:2b:85:47:e7:d0:0b:88:83:
                    2d:ed:4f:db:98:c5:4f:c4:9d:e2:c4:11:2a:ef:7f:
                    63:9b:42:f7:4b:cb:5c:11:c2:b2:a8:1a:b3:2d:bd:
                    f3:6f:8c:b9:fb:4c:5d:8c:13:17:50:f3:68:30:21:
                    31:d2:f7:47:85:23:54:8d:4d:5d:75:b8:10:04:ca:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:81:E7:DD:7D:1D:0A:DA:60:FA:7B:0F:DA:4C:9A:0A:3D:B5:1E:2B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7d00::/40
                  2a0a:6040:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:09:82:2c:6e:02:e8:e8:3a:3e:a7:f3:2f:d7:92:79:16:4e:
         a7:2d:d4:6e:2d:c2:68:08:27:dc:cf:52:61:39:32:f2:76:71:
         5e:c1:da:b9:f9:04:ad:13:c3:2f:b4:92:04:62:02:2a:50:20:
         59:05:b1:94:e6:0b:b8:4c:c9:19:ef:d8:27:83:b8:d7:e9:97:
         8b:99:5d:b4:27:c3:94:39:55:02:23:65:a6:aa:b5:17:84:44:
         37:81:31:4e:c2:4c:55:60:3a:61:3a:25:e7:b8:17:43:8e:fa:
         24:bb:65:af:5e:8c:1c:4e:49:20:9f:10:83:bd:e9:09:ab:c3:
         23:83:a2:c1:02:51:f8:fb:58:79:3d:a3:20:d9:ea:e1:ad:63:
         db:a2:1b:f7:67:f7:9a:b2:22:1b:2e:6a:00:f4:54:01:8d:3c:
         3e:3c:13:95:bd:48:cb:03:04:1c:7d:5c:6d:49:6a:d7:59:d7:
         37:60:5f:a4:a5:fa:8c:4f:53:bc:8a:90:1b:96:d5:e2:2f:26:
         e2:4e:07:de:27:8c:c3:61:e3:5f:35:4a:29:4e:23:05:6a:1f:
         77:ad:b2:c2:7a:4a:c9:63:76:d7:2c:21:68:50:4c:af:15:c4:
         4d:61:9a:d3:3f:bb:3b:da:16:f7:7d:bc:2a:96:1b:f8:1d:7e:
         e9:46:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:13 2024 by rpki-client on console-ams.rpki-client.org