Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200256.roa
File:                     AS200256.roa (raw, json)
Hash identifier:          GbA1hrH2tvODRDDIWEORORBf4GZNu706K/I88ASLPgY=
Subject key identifier:   CA:C8:69:2A:DB:02:44:97:9F:F8:4E:04:60:CA:6B:CF:86:E4:DB:5C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7E987C0D27BD73E70947BDB5F3F6DFD6EB6FD733
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200256.roa
Signing time:             Sun 06 Oct 2024 04:44:56 +0000
ROA not before:           Sun 06 Oct 2024 04:39:56 +0000
ROA not after:            Sun 05 Oct 2025 04:44:56 +0000
asID:                     200256
IP address blocks:        2a0a:6040:2d00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:98:7c:0d:27:bd:73:e7:09:47:bd:b5:f3:f6:df:d6:eb:6f:d7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:39:56 2024 GMT
            Not After : Oct  5 04:44:56 2025 GMT
        Subject: CN=CAC8692ADB0244979FF84E0460CA6BCF86E4DB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:b0:94:ea:4b:a8:a8:5b:74:8a:73:d0:96:
                    2a:4f:14:44:9a:92:10:47:db:2f:f7:6c:96:11:01:
                    d1:d2:58:0f:d6:fb:35:76:09:d7:04:d5:2e:ad:b0:
                    d6:df:51:ad:8b:dc:5b:87:f5:c9:f6:ce:d7:22:33:
                    e0:7e:a8:91:4f:86:90:21:21:8d:ec:2c:31:76:c4:
                    db:55:2c:a2:2c:af:e6:ff:6d:18:1c:7b:30:2c:80:
                    7c:0c:e8:48:cd:ce:cc:a7:1d:f4:9d:57:d0:91:fc:
                    7d:48:16:26:2e:a8:ae:ec:d5:bd:99:e4:61:93:7b:
                    c2:ab:5f:ac:67:b6:b2:71:7f:3a:52:70:1c:27:36:
                    e7:fe:ee:69:f0:3e:98:3f:fe:a8:49:e0:0e:f9:f8:
                    80:9e:2f:5b:6e:d3:59:73:53:da:b6:61:d3:2f:2d:
                    0c:39:44:bd:5e:2f:c3:80:9c:84:29:df:5d:ba:66:
                    09:3c:ab:3a:74:08:c1:2f:a9:2e:61:61:f4:e5:ee:
                    17:75:e2:bd:40:42:ff:86:4a:48:9f:bf:86:0d:d1:
                    a5:36:4a:64:ad:8f:65:3b:83:de:24:e8:8d:28:de:
                    f0:20:8f:68:38:c8:65:b3:4e:ed:ee:72:dc:c7:97:
                    dc:be:23:52:68:98:95:ca:33:f6:11:37:56:98:87:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C8:69:2A:DB:02:44:97:9F:F8:4E:04:60:CA:6B:CF:86:E4:DB:5C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:de:d4:7f:b8:50:5b:5f:c7:38:41:c6:e1:ce:c7:97:f0:4c:
         13:4b:0d:54:24:91:8d:a6:cb:5d:5a:a3:27:ab:25:de:60:4d:
         90:e9:2c:05:83:4d:f8:5d:3b:8e:83:0a:a1:88:e7:8f:6d:6f:
         d0:8b:f8:c1:1c:36:cc:9c:09:dd:9a:85:8e:ac:77:0e:b0:6b:
         ce:78:a9:5e:52:2f:f2:ca:b9:8e:d1:dd:15:ff:aa:a1:1a:ed:
         38:e8:27:95:7a:40:d8:34:9e:88:a6:6a:7c:9f:73:28:d6:bb:
         73:73:32:40:e6:cf:a1:63:5e:b5:dc:0c:07:01:42:30:a4:b0:
         9a:ff:70:69:c6:e3:20:1d:d6:ae:41:18:5f:f6:24:a7:03:b3:
         c0:39:5f:ad:be:08:8c:7a:10:ce:35:b3:3c:3c:f6:0c:10:7b:
         c2:7b:0d:1a:02:92:cb:bb:5e:ba:72:2c:7e:06:58:ea:57:07:
         2e:18:56:92:bc:47:9b:5d:d7:c2:e4:f9:4d:fb:08:32:82:2c:
         08:3d:a5:d1:f1:75:ba:5b:bb:a1:a7:63:be:ef:43:15:04:fb:
         c8:de:b1:9e:df:89:34:5a:63:4b:bd:c1:a1:54:f4:57:d8:58:
         c0:54:23:2d:11:40:42:0a:46:37:4d:02:dc:a7:89:d7:92:a7:
         41:40:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org