Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200556.roa
File:                     AS200556.roa (raw, json)
Hash identifier:          IRp+599D3Ia0siCZM5fzbFx9P/Wu7uGU+LSerpXXjkQ=
Subject key identifier:   AC:FE:8E:37:6D:B4:30:C6:AC:D5:CC:B6:98:E6:B4:E3:70:85:CA:C9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       300D8D743D146A9A525988B86FCDD75607033F21
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200556.roa
Signing time:             Sun 05 Nov 2023 04:07:19 +0000
ROA not before:           Sun 05 Nov 2023 04:02:19 +0000
ROA not after:            Sun 03 Nov 2024 04:07:19 +0000
asID:                     200556
IP address blocks:        2a0a:6040:1600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0d:8d:74:3d:14:6a:9a:52:59:88:b8:6f:cd:d7:56:07:03:3f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:19 2023 GMT
            Not After : Nov  3 04:07:19 2024 GMT
        Subject: CN=ACFE8E376DB430C6ACD5CCB698E6B4E37085CAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:7a:7e:46:3b:6d:e3:fb:7f:e5:13:7b:87:
                    83:02:74:2f:9a:5b:9c:4d:b7:26:95:0a:3d:f2:6c:
                    1c:69:fd:c4:05:54:f6:97:39:8b:bc:5e:67:8e:96:
                    d3:0d:fc:2c:f5:2d:ca:b4:20:71:b1:0f:e5:7a:89:
                    ba:4f:2b:76:4a:ed:56:48:9c:ca:55:f8:12:3d:05:
                    53:8f:bc:54:03:97:13:f0:12:e5:0a:1b:96:45:08:
                    07:ce:30:95:5b:52:b5:cb:d9:df:86:cf:de:cc:10:
                    e8:65:de:ea:98:ac:69:94:1c:89:1d:07:61:18:c7:
                    35:3d:1a:b4:9c:7c:fe:72:18:23:6c:56:4c:14:45:
                    1e:58:81:bb:d8:eb:62:1b:f3:1c:6d:1e:60:85:82:
                    7c:7f:8f:4c:62:ae:4f:9e:d2:aa:e2:7c:6f:e9:c4:
                    a8:a0:21:4e:3b:9b:35:83:70:46:cf:fa:50:e9:69:
                    b8:69:7f:c0:23:d5:9f:b4:94:1d:ac:6c:57:16:5d:
                    33:ef:28:ad:02:f1:71:35:f5:f7:1c:42:e1:60:a8:
                    47:71:d8:a2:8b:62:81:44:98:50:6f:ed:d2:c8:47:
                    5e:98:35:e2:8f:25:3f:b5:b1:0f:b3:0e:4f:1c:9e:
                    1e:51:62:c5:78:cb:72:ff:b9:1d:6d:da:1d:f1:9b:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FE:8E:37:6D:B4:30:C6:AC:D5:CC:B6:98:E6:B4:E3:70:85:CA:C9
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200556.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:07:5c:76:78:1a:d2:7f:f6:e9:ea:75:c4:ff:2d:46:8f:91:
         5e:4a:40:c3:20:82:95:74:14:47:0b:2b:77:a3:85:26:3e:d1:
         31:2a:2d:9e:e4:13:69:b8:36:b1:83:25:b6:ce:6c:ac:cf:f7:
         58:99:67:16:58:0c:bc:be:27:3c:95:24:43:2d:33:40:99:3e:
         d5:9f:2b:f4:b0:5d:d4:fe:f3:e4:8a:c3:c3:a9:77:b0:6b:6a:
         9e:27:0b:5a:41:a0:95:47:8d:87:3c:a2:89:11:46:a0:81:6b:
         4d:37:ee:47:1f:aa:5d:34:85:cb:f5:ee:3b:f5:32:67:bc:2d:
         66:12:fb:01:91:fd:17:e3:e3:c6:27:dd:74:ae:61:b3:c5:f5:
         21:ab:22:75:13:c1:2a:2d:72:dc:42:f7:e9:35:b1:93:2a:9f:
         2b:a2:2f:1d:6d:34:65:91:65:74:e0:eb:1c:cb:7e:0e:47:2d:
         50:d8:c7:ee:be:3e:2e:3b:70:6d:7d:67:01:8b:df:26:7a:da:
         6e:2d:0d:4d:53:fa:2d:73:b7:a5:86:57:ad:e0:0e:c1:68:17:
         69:07:5d:a6:7a:a3:66:fd:27:f1:19:ee:f4:03:42:73:9b:bb:
         6d:50:76:e6:65:97:c8:87:8a:0a:4f:e9:d8:6c:69:c4:d8:1d:
         07:1e:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org