Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200261.roa
File:                     AS200261.roa (raw, json)
Hash identifier:          WUX5ixnO6IKpRasci0cn1WfqBKTVJJiEWIuTqXc+VrA=
Subject key identifier:   43:57:0D:AF:9F:57:64:19:66:A5:8D:39:65:5A:2D:7F:37:33:45:C2
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7556D73920EEC735E205E505EE08C8998612257B
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200261.roa
Signing time:             Sun 05 Nov 2023 04:07:02 +0000
ROA not before:           Sun 05 Nov 2023 04:02:02 +0000
ROA not after:            Sun 03 Nov 2024 04:07:02 +0000
asID:                     200261
IP address blocks:        2a0a:6040:1f00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:56:d7:39:20:ee:c7:35:e2:05:e5:05:ee:08:c8:99:86:12:25:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:02 2023 GMT
            Not After : Nov  3 04:07:02 2024 GMT
        Subject: CN=43570DAF9F57641966A58D39655A2D7F373345C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:86:65:0f:db:61:22:a1:92:81:ff:83:bc:
                    19:e1:b2:bb:b7:60:04:52:55:85:b0:53:aa:f1:49:
                    91:fb:8d:ad:00:4b:84:4d:2d:52:07:7c:aa:ab:80:
                    9c:6e:0a:4b:1a:6a:b1:02:a2:75:ec:ae:4f:9c:01:
                    c2:09:51:ff:e3:52:36:c7:8c:63:cc:67:9d:5c:81:
                    d5:f1:61:b9:d0:71:79:e2:3b:37:41:28:d5:c7:eb:
                    42:ee:e2:88:0c:ee:8b:28:ce:29:cd:06:c0:91:00:
                    8f:30:a4:60:6b:5d:5c:fb:f5:f4:8d:5b:d4:46:2d:
                    15:c1:8e:44:82:07:b5:0f:07:88:b3:64:04:10:a6:
                    3d:f6:4f:90:16:e7:14:94:02:20:34:8f:20:0e:6b:
                    33:7c:b7:e0:ab:05:0a:67:f8:97:2d:31:e7:2e:13:
                    3c:53:cc:72:30:e7:fa:28:b9:28:39:f4:20:4b:46:
                    01:51:61:99:8e:29:c0:04:5f:ed:c7:24:43:70:24:
                    1c:b2:57:f9:47:7c:b0:b6:9e:9d:5b:1e:0f:ed:42:
                    22:c5:63:ed:04:c6:7a:46:47:a6:39:a1:54:0f:83:
                    e3:b9:85:7b:4a:79:2e:3e:45:83:17:73:fb:63:6a:
                    bb:24:c8:33:d2:4f:20:cc:59:15:ae:45:f5:f2:54:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:57:0D:AF:9F:57:64:19:66:A5:8D:39:65:5A:2D:7F:37:33:45:C2
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200261.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:be:67:02:2a:c6:80:87:5a:8c:0e:aa:87:35:03:12:2d:f8:
         b9:75:3d:fe:d1:87:33:21:3a:c1:59:b4:03:b9:54:59:44:81:
         54:79:53:07:d7:2e:ef:2e:57:ce:0c:23:c7:53:27:6c:5d:9e:
         c0:60:32:2e:fa:a6:87:37:a6:b2:8f:4e:11:90:7b:f4:4f:fe:
         f8:d8:fa:64:dd:28:9d:d1:df:41:5d:7d:25:42:b4:2c:0b:07:
         12:61:ff:0d:e9:9a:70:26:eb:a9:3a:d4:e2:3a:8e:99:ae:f1:
         cb:55:eb:9a:f8:5f:eb:13:b7:5b:b0:35:c2:04:59:0a:d0:0a:
         3e:b9:8e:7f:af:6d:f8:c5:66:b2:75:d8:3b:9c:43:0e:37:8b:
         d0:96:7a:91:cf:5c:47:3b:70:ab:21:cd:5b:2e:8f:9a:0c:ab:
         e4:45:e5:2a:b8:9c:99:83:c1:19:1a:e5:39:ed:7f:79:aa:7c:
         63:cf:5e:1f:5c:80:48:24:eb:1a:77:e5:db:c8:cf:3a:51:27:
         55:11:5e:dd:ab:de:c7:7c:dc:26:f4:91:82:10:b0:ba:07:e1:
         74:65:e4:10:34:ee:70:85:88:0c:fd:54:63:da:03:ca:88:ef:
         b5:33:2c:0f:48:30:e0:6e:6b:1d:ac:8a:de:90:91:8e:36:5f:
         37:c8:a0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 13:03:37 2024 by rpki-client on console-ams.rpki-client.org