Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200263.roa
File:                     AS200263.roa (raw, json)
Hash identifier:          +BW3+Aiaaj9gkOlPfOW/m5pf4yY95NUCL/XhW064wQo=
Subject key identifier:   25:81:29:81:82:51:0C:A2:A0:67:D8:41:6C:4C:AA:FD:75:CC:F4:DD
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4DAB5D2105295283F4FFD0DA7AF9041FB7FBB8C9
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200263.roa
Signing time:             Sun 05 Nov 2023 04:07:22 +0000
ROA not before:           Sun 05 Nov 2023 04:02:22 +0000
ROA not after:            Sun 03 Nov 2024 04:07:22 +0000
asID:                     200263
IP address blocks:        2a0a:6040:2b00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ab:5d:21:05:29:52:83:f4:ff:d0:da:7a:f9:04:1f:b7:fb:b8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:22 2023 GMT
            Not After : Nov  3 04:07:22 2024 GMT
        Subject: CN=2581298182510CA2A067D8416C4CAAFD75CCF4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:74:02:c8:75:58:09:44:57:34:ee:72:f5:
                    a9:db:89:75:7f:c7:b6:e0:1d:3c:04:7f:96:4d:a5:
                    7d:3b:a3:64:26:94:8f:7a:63:27:65:dd:08:48:3f:
                    2d:b5:2b:3b:c9:51:73:e5:46:2f:ef:06:72:bb:0d:
                    a5:b2:e6:3e:02:87:dd:82:e6:a5:c9:93:8b:03:93:
                    65:36:0e:a0:22:36:78:11:81:c5:78:09:41:0f:44:
                    4a:2e:65:1a:b4:01:c7:73:81:e6:50:7e:ce:eb:3a:
                    78:78:3d:38:8d:43:65:ed:26:3e:2a:ba:6d:2f:f0:
                    ca:1b:17:9b:90:6f:ae:c0:a1:b2:4c:21:da:39:18:
                    ea:04:ed:b3:88:ab:5d:8b:76:75:4f:d6:d9:e6:0e:
                    36:34:45:ad:33:9f:05:42:1a:a7:61:ca:55:c2:43:
                    fc:48:a3:74:4e:88:71:59:56:0e:ee:53:e7:f9:ff:
                    25:ab:87:28:7b:63:d7:6f:87:d4:e8:b6:2a:0c:06:
                    77:c5:82:e8:02:9a:88:4b:de:ba:52:2f:f5:4e:83:
                    47:8f:cb:a8:fa:00:08:bc:c6:91:ce:40:9b:22:6d:
                    d9:e8:cb:41:5a:73:d7:0e:2f:6b:b5:51:69:c0:2b:
                    8e:f0:23:aa:11:e0:1d:a0:14:de:69:98:3e:bd:03:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:81:29:81:82:51:0C:A2:A0:67:D8:41:6C:4C:AA:FD:75:CC:F4:DD
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200263.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:e9:b6:d5:86:08:c6:b9:e8:f7:a0:e9:86:63:6f:f7:38:70:
         93:f8:01:19:de:12:3c:f5:60:08:e8:c7:26:a9:a7:5f:ed:72:
         5c:6b:dc:ca:0e:4d:fa:8f:7b:33:89:dd:cc:aa:65:77:4d:43:
         eb:8e:da:84:ab:51:a2:1d:93:2c:1b:b3:b4:82:46:5c:dc:f0:
         cb:2b:1d:c2:a3:ff:e4:46:58:6e:67:a9:3d:e4:c2:64:2b:cd:
         50:4a:cf:29:83:ec:e3:d2:b5:25:35:a7:e0:4d:90:e9:17:fa:
         81:8b:76:a8:8e:35:65:aa:9d:c0:7a:35:1a:27:b8:95:f3:a0:
         f0:92:7a:23:23:53:6f:6d:77:ab:e2:fa:bf:42:94:0d:de:8a:
         52:b7:26:df:ac:fe:f1:96:7e:58:72:39:7e:60:f9:84:27:c2:
         35:09:e8:e8:c8:94:da:00:65:6c:7b:96:55:00:67:48:95:e8:
         c6:d3:3c:bc:c8:62:85:c6:8d:49:25:d9:a7:af:0c:f6:d7:65:
         cc:1f:77:8c:4e:61:2b:af:b3:63:04:38:51:e2:e6:83:37:c0:
         79:aa:e6:22:0d:e6:52:60:60:b0:ca:d6:11:7e:b7:f6:05:0f:
         9b:b7:2f:82:a7:f6:32:75:ff:4d:54:02:5d:84:11:98:55:36:
         3b:25:dc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org