Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200105.roa
File:                     AS200105.roa (raw, json)
Hash identifier:          YbQvz1FpF32ebAzsabKSNmIl+lggflyAjo0Xbbr+MWc=
Subject key identifier:   BD:A4:19:13:DA:92:5E:D8:4E:6E:55:B6:B9:05:65:B0:18:EF:B9:AA
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7B05DD4F0A5D9BC14BF7276BD0F2E3EF02BEAF6F
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200105.roa
Signing time:             Sun 05 Nov 2023 04:07:13 +0000
ROA not before:           Sun 05 Nov 2023 04:02:13 +0000
ROA not after:            Sun 03 Nov 2024 04:07:13 +0000
asID:                     200105
IP address blocks:        2a0a:6040:5300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:05:dd:4f:0a:5d:9b:c1:4b:f7:27:6b:d0:f2:e3:ef:02:be:af:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:13 2023 GMT
            Not After : Nov  3 04:07:13 2024 GMT
        Subject: CN=BDA41913DA925ED84E6E55B6B90565B018EFB9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:90:33:83:8c:64:b9:60:2b:65:79:cc:fb:
                    12:3f:d3:16:cf:fd:51:6a:31:e7:9e:cc:0e:e6:c0:
                    aa:ed:01:c7:c8:2f:6f:2e:11:4c:2d:0f:08:41:ea:
                    2c:4a:92:a9:a7:36:fe:1e:bf:49:95:9e:b1:f9:d1:
                    62:a7:01:83:fb:07:a3:63:a9:f8:6c:9d:0c:5e:44:
                    84:b8:80:2e:ad:b6:e8:c5:2a:de:cd:6a:81:a1:c9:
                    29:e0:30:85:29:18:b9:1a:f6:53:b7:2b:38:54:99:
                    b6:a7:22:56:97:24:14:ff:36:c7:66:07:34:20:39:
                    5c:8d:de:72:53:04:f9:73:08:a6:68:da:c9:b0:78:
                    9c:63:3c:fd:0b:80:d8:56:a2:cc:53:1e:0c:56:df:
                    95:30:61:e2:f1:ce:8a:e0:17:d6:5f:62:32:9c:44:
                    36:f5:ac:37:d4:bd:d1:a9:ce:ea:ce:d0:a7:57:5f:
                    45:58:5e:f8:5d:1d:19:00:da:b4:4f:16:dc:59:7c:
                    5c:2c:20:c2:e6:a6:46:6d:45:d8:06:24:26:e7:f9:
                    82:21:97:c0:cb:85:ab:f5:2d:f4:f0:54:0b:ec:06:
                    e3:58:15:c0:a2:91:fc:b6:e1:fd:33:31:97:ad:53:
                    36:f5:b5:5b:a5:e1:94:9e:a7:ac:d8:0b:0e:22:a8:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A4:19:13:DA:92:5E:D8:4E:6E:55:B6:B9:05:65:B0:18:EF:B9:AA
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:56:63:2e:2a:c9:2a:c7:a8:c9:90:20:8a:be:3b:c1:3b:40:
         3d:03:38:17:f7:48:7a:ce:a7:09:f3:b7:99:0f:11:4e:cb:66:
         1a:f4:91:01:56:d2:29:42:ae:ec:62:80:da:0b:f1:ae:94:df:
         bf:1b:31:95:d3:3d:27:ea:a2:48:e0:b2:d1:26:90:a5:62:b1:
         5a:2c:1e:97:72:e3:09:eb:15:65:fb:2b:08:eb:a2:92:97:d6:
         a3:2c:fb:b4:8b:5b:09:56:fd:0f:52:93:7f:c2:45:15:ab:c8:
         92:99:0e:72:5a:bc:0a:ee:2d:97:fb:28:0b:c1:4f:5b:8f:41:
         4c:3e:38:34:34:1e:d2:c8:53:dc:e6:51:49:b1:49:7c:02:01:
         68:5e:aa:5c:98:3c:20:b9:2d:64:c6:00:4d:c1:f5:3c:7b:77:
         a2:f5:d7:89:c0:a2:fd:d3:6c:e5:62:48:0a:a7:4c:03:67:c2:
         2b:0a:29:96:a1:f5:fb:5d:15:29:85:0f:8f:5c:a6:76:76:e3:
         2d:d7:ab:d6:3d:20:38:ae:2e:6d:c5:dc:4a:78:05:1b:20:3f:
         6a:fe:a0:63:fc:74:c1:bc:c2:e6:80:51:e8:ee:a9:2b:95:76:
         4e:5b:0b:26:ec:d9:dc:94:92:69:d6:23:2e:07:df:48:cf:75:
         9f:4b:0f:80
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUewXdTwpdm8FL9ydr0PLj7wK+r28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTNaFw0yNDExMDMwNDA3MTNaMDMxMTAvBgNV
BAMTKEJEQTQxOTEzREE5MjVFRDg0RTZFNTVCNkI5MDU2NUIwMThFRkI5QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xJAzg4xkuWArZXnM+xI/0xbP
/VFqMeeezA7mwKrtAcfIL28uEUwtDwhB6ixKkqmnNv4ev0mVnrH50WKnAYP7B6Nj
qfhsnQxeRIS4gC6ttujFKt7NaoGhySngMIUpGLka9lO3KzhUmbanIlaXJBT/Nsdm
BzQgOVyN3nJTBPlzCKZo2smweJxjPP0LgNhWosxTHgxW35UwYeLxzorgF9ZfYjKc
RDb1rDfUvdGpzurO0KdXX0VYXvhdHRkA2rRPFtxZfFwsIMLmpkZtRdgGJCbn+YIh
l8DLhav1LfTwVAvsBuNYFcCikfy24f0zMZetUzb1tVul4ZSep6zYCw4iqGOtAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUvaQZE9qSXthOblW2uQVlsBjvuaowHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjAwMTA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQFMwDQYJKoZIhvcNAQELBQADggEBAEZW
Yy4qySrHqMmQIIq+O8E7QD0DOBf3SHrOpwnzt5kPEU7LZhr0kQFW0ilCruxigNoL
8a6U378bMZXTPSfqokjgstEmkKVisVosHpdy4wnrFWX7KwjropKX1qMs+7SLWwlW
/Q9Sk3/CRRWryJKZDnJavAruLZf7KAvBT1uPQUw+ODQ0HtLIU9zmUUmxSXwCAWhe
qlyYPCC5LWTGAE3B9Tx7d6L114nAov3TbOViSAqnTANnwisKKZah9ftdFSmFD49c
pnZ24y3Xq9Y9IDiuLm3F3Ep4BRsgP2r+oGP8dMG8wuaAUejuqSuVdk5bCybs2dyU
kmnWIy4H30jPdZ9LD4A=
-----END CERTIFICATE-----
Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org