Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200262.roa
File:                     AS200262.roa (raw, json)
Hash identifier:          rN05zfXlbTBU5hWgl6eL2bLPfFVUXlGyC1/3/FawP2k=
Subject key identifier:   4A:A2:5B:C2:55:42:F5:6E:CE:15:2F:3D:F7:5B:D1:7C:0F:83:BA:36
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       35CEC13997D8FFDEB54917B46515D1AFA7B83DB2
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200262.roa
Signing time:             Sun 06 Oct 2024 04:45:00 +0000
ROA not before:           Sun 06 Oct 2024 04:40:00 +0000
ROA not after:            Sun 05 Oct 2025 04:45:00 +0000
asID:                     200262
IP address blocks:        2a0a:6040:ae00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ce:c1:39:97:d8:ff:de:b5:49:17:b4:65:15:d1:af:a7:b8:3d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:00 2024 GMT
            Not After : Oct  5 04:45:00 2025 GMT
        Subject: CN=4AA25BC25542F56ECE152F3DF75BD17C0F83BA36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:90:e7:d5:ab:11:ee:dd:6d:c9:cd:01:33:
                    e7:68:60:28:ca:a0:e5:4b:b7:7d:fb:25:cb:b7:80:
                    87:2c:50:fe:a6:0b:cb:0a:d4:57:78:e5:c4:65:1f:
                    84:ad:16:95:69:34:19:ae:9a:a8:6e:12:96:65:68:
                    11:fc:4f:e1:88:c2:4a:d6:ff:b6:f6:75:8a:a2:51:
                    42:f5:8e:7c:a5:01:d8:20:7b:9c:b0:71:d4:c0:0a:
                    a5:60:e8:c8:c5:3f:05:c5:b7:70:ef:6a:aa:ad:9e:
                    2f:65:da:d8:25:ef:d0:a8:ae:c1:b9:1a:be:bd:9a:
                    2f:37:42:69:2e:34:1c:86:e5:20:9f:ad:99:76:90:
                    ea:91:df:b9:3d:47:1f:bb:79:95:a7:9c:62:23:90:
                    89:25:36:7a:fc:41:e7:9f:3a:f0:ee:31:a0:17:bd:
                    71:c5:1f:7e:82:cb:ee:d9:81:a7:d3:97:ba:37:e4:
                    f1:ec:4d:cd:3d:9b:ec:e8:d3:b3:78:92:a8:87:35:
                    50:10:7f:2b:51:23:47:0b:10:d3:5f:e1:89:ee:7f:
                    0b:2a:e0:f7:ad:13:e6:9e:1b:f6:08:a2:02:4d:d2:
                    0b:4f:05:34:28:6d:fa:83:14:3e:a2:e9:28:c9:2f:
                    27:85:af:de:83:02:d2:2b:46:f0:7f:a3:58:03:8c:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A2:5B:C2:55:42:F5:6E:CE:15:2F:3D:F7:5B:D1:7C:0F:83:BA:36
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:14:20:72:c3:68:66:93:a7:9c:6d:a8:0d:d4:f6:86:f3:14:
         2e:ae:6d:78:8a:cf:24:65:50:63:40:4e:c1:eb:1c:c9:27:46:
         8a:10:d8:42:3c:82:d2:6b:46:c2:b8:6e:ac:0e:fb:b6:58:65:
         1c:22:92:1b:bd:a7:ee:31:c8:05:57:3d:6e:e7:66:eb:83:4f:
         69:71:00:31:3d:42:ef:07:86:71:2f:48:92:a3:c0:51:94:6b:
         73:ca:d0:1b:8e:6b:12:50:ad:d1:b1:af:b6:61:34:db:7f:7d:
         30:05:55:39:98:46:96:bc:f9:c3:ba:c1:e4:53:14:bc:a9:ca:
         7c:c9:e8:ed:b4:ee:d1:c6:4f:12:96:b9:dd:eb:39:49:05:f7:
         4f:4f:63:4a:02:21:b9:7a:7c:95:5d:a7:a9:83:3c:40:8a:2f:
         8f:f9:3f:3a:3b:ad:75:e7:41:93:54:70:fd:e0:d1:0b:e1:8f:
         34:2e:05:0c:ae:80:fa:54:3e:aa:7e:eb:9b:b6:af:93:ca:c0:
         4e:f5:59:0a:e8:c4:79:30:cf:e3:05:8c:c0:11:8c:77:8b:24:
         70:5b:e5:94:6c:c1:f6:e6:9c:78:d7:c7:a5:01:82:32:28:55:
         79:32:73:3c:dc:8b:ff:4a:58:09:cd:e5:1e:bb:94:aa:25:df:
         9f:08:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org