Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200266.roa
File:                     AS200266.roa (raw, json)
Hash identifier:          g1qdHDZ6ioD3x2+ilFS3/+OvveIz+8kHWCq3PDYm32w=
Subject key identifier:   EE:FE:02:7B:AF:97:3A:D7:67:AC:3B:16:86:9A:2B:0A:E5:E7:C8:0B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6642546657392AE5C099086D410E20045098C875
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200266.roa
Signing time:             Sun 06 Oct 2024 04:45:02 +0000
ROA not before:           Sun 06 Oct 2024 04:40:02 +0000
ROA not after:            Sun 05 Oct 2025 04:45:02 +0000
asID:                     200266
IP address blocks:        2a0a:6040:d00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:42:54:66:57:39:2a:e5:c0:99:08:6d:41:0e:20:04:50:98:c8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:02 2024 GMT
            Not After : Oct  5 04:45:02 2025 GMT
        Subject: CN=EEFE027BAF973AD767AC3B16869A2B0AE5E7C80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:6a:52:23:ac:d1:f1:8d:41:bf:23:f0:45:
                    bf:a9:8c:de:ab:72:d3:19:2d:c1:5e:6d:18:97:b7:
                    05:5a:29:cb:ea:cd:4f:73:af:f7:20:60:2a:0d:94:
                    09:e8:55:f5:24:8d:4a:1d:5a:bb:d7:d5:6a:2b:cf:
                    14:4d:1f:60:cc:78:e3:ca:e4:db:74:dc:fc:43:80:
                    57:05:7d:e3:81:28:be:f3:b4:6b:03:fb:93:5c:bf:
                    92:92:5f:21:48:05:46:8c:d0:bf:a0:66:66:89:9e:
                    36:0e:01:bb:bf:da:68:02:57:f8:da:3e:99:a4:43:
                    07:6a:6b:2a:b2:84:f1:fd:ec:ae:4e:f9:1f:9c:7d:
                    11:4e:1c:de:bd:fc:aa:5d:6d:9a:4b:56:9d:5f:44:
                    92:ae:4b:f3:2d:a0:59:f8:1a:77:27:07:92:e6:2b:
                    fa:b8:09:8e:62:5a:2c:02:67:a7:52:8f:65:5b:01:
                    36:b7:bc:6e:e6:6d:75:d0:c0:a3:a9:7f:04:d4:f4:
                    1e:af:a1:a4:9e:20:b7:a9:f7:08:95:75:79:cd:09:
                    b2:35:5c:28:5c:a1:dd:65:13:0b:06:c3:be:62:43:
                    4c:73:f9:2b:84:52:33:7a:e7:84:09:56:00:5a:bc:
                    8b:7e:d9:2d:a2:8d:7c:ef:6b:0a:49:ff:9e:d6:bb:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FE:02:7B:AF:97:3A:D7:67:AC:3B:16:86:9A:2B:0A:E5:E7:C8:0B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:24:10:86:ec:2d:b8:e6:2a:a7:f1:f8:ac:40:44:bd:b0:
         4c:ff:41:5d:e0:cc:0f:a4:16:e9:13:0c:7b:aa:91:59:7c:f1:
         fa:bb:27:21:cf:2b:70:53:2c:02:a1:b9:42:1c:86:e5:3f:2e:
         90:27:08:24:1e:22:f4:a4:04:8c:0e:f5:4a:eb:fc:44:67:db:
         ff:fb:6f:a4:2e:4c:0a:92:39:04:0c:9b:a6:0e:4d:dc:0d:57:
         d2:be:1f:a9:87:d5:06:70:48:c6:fe:1e:67:43:be:ad:72:d4:
         e8:64:bc:17:33:52:43:84:11:81:f5:a9:68:97:30:bd:db:01:
         fe:d5:80:df:dc:56:39:15:fe:a7:ef:9f:71:75:ca:47:fc:60:
         d0:ed:b0:1d:42:1f:3a:92:52:15:f9:8b:38:3a:e5:c3:ce:c6:
         f1:6f:1e:44:01:9b:c1:4e:77:e0:3f:69:81:69:2b:e7:ba:b7:
         e1:f2:ae:06:57:fd:75:c8:71:7a:9a:1f:43:43:ea:0e:48:dd:
         6d:b5:5e:c2:27:d0:61:24:9c:a9:6d:ab:5a:63:61:00:ac:6f:
         c5:c3:4f:d2:10:ec:ff:ab:a3:44:32:82:30:dc:3d:ea:c5:ef:
         f3:5b:df:83:a9:73:ff:f8:02:c4:72:de:e7:52:6d:94:8a:80:
         f5:83:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org