Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200581.roa
File:                     AS200581.roa (raw, json)
Hash identifier:          XUbZFfLLcIoK9o4IUkMl6XFVHA6K/NmmU4b+muRHol4=
Subject key identifier:   C8:4F:70:00:E5:99:42:F8:BE:AF:17:BB:3C:AD:95:98:8D:9A:16:66
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4E93E1D58B0D6E570B9B08D356D56FDF569F2CAF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200581.roa
Signing time:             Sun 06 Oct 2024 04:45:05 +0000
ROA not before:           Sun 06 Oct 2024 04:40:05 +0000
ROA not after:            Sun 05 Oct 2025 04:45:05 +0000
asID:                     200581
IP address blocks:        2a0a:6040:100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:93:e1:d5:8b:0d:6e:57:0b:9b:08:d3:56:d5:6f:df:56:9f:2c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:05 2024 GMT
            Not After : Oct  5 04:45:05 2025 GMT
        Subject: CN=C84F7000E59942F8BEAF17BB3CAD95988D9A1666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:1e:be:d4:37:f1:5f:ad:67:4e:d3:70:58:
                    fa:54:81:72:36:f1:66:7b:4b:ed:4e:39:85:f4:16:
                    0d:78:2a:65:35:cc:ee:bf:9a:24:f4:3d:5b:d0:77:
                    ed:68:66:71:7b:04:80:c2:cc:1e:71:cd:44:39:87:
                    f5:82:37:a7:f9:a9:2a:ef:e5:3c:dc:75:b1:13:97:
                    e1:39:90:75:40:9e:46:7d:ee:f6:e9:d0:88:b8:81:
                    a3:42:4e:89:76:e5:7e:90:35:b3:42:ed:bb:4d:08:
                    43:ec:27:bc:05:37:26:ed:e7:82:34:d1:27:24:2b:
                    4e:3e:dd:fb:02:03:63:3f:db:76:a7:be:69:39:c0:
                    77:6b:49:74:db:a0:76:68:22:37:97:a7:c9:8f:38:
                    91:d6:3e:1a:15:96:5f:f8:ed:6b:56:df:f3:dc:18:
                    90:9a:31:8a:d0:1f:8d:91:f5:a7:32:c7:b8:88:a0:
                    48:1a:52:bb:62:61:b5:8e:95:9f:95:9b:1d:72:9f:
                    8a:e4:3d:1e:1b:ca:2a:92:27:39:d1:0e:89:03:d9:
                    10:f4:0f:41:0f:83:56:28:ee:83:95:53:7a:5f:ad:
                    b5:d2:20:1a:a2:4a:d4:3c:10:6c:a1:39:88:4a:f2:
                    1d:0b:f1:69:61:47:af:14:74:da:0e:ae:6b:a2:75:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4F:70:00:E5:99:42:F8:BE:AF:17:BB:3C:AD:95:98:8D:9A:16:66
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:65:47:d5:e7:f0:d0:7e:12:48:ca:40:89:4e:4a:e7:d7:fb:
         6c:19:22:64:07:a8:24:d1:7b:80:51:5e:72:7f:00:4a:1b:50:
         5e:00:6b:e8:b1:b5:f7:f2:70:fe:aa:99:57:ca:07:c5:3b:5b:
         39:4f:bf:f5:a9:68:6f:7e:94:2e:1b:55:2e:78:28:05:9a:a6:
         cb:f8:a9:b7:9d:8e:fa:97:7f:f9:e5:a6:36:64:f8:96:3b:1f:
         da:64:8e:bf:da:56:4f:d6:56:c7:bb:b7:80:ec:cc:dc:fd:31:
         fe:82:58:8b:0d:a4:a5:07:2a:f7:b9:23:5e:6a:e3:44:8a:f9:
         e6:44:88:6f:b9:42:81:7e:b0:eb:86:bb:99:52:d5:8a:a1:65:
         3b:a8:22:2e:15:a3:16:6f:be:59:bf:db:c1:c6:fc:3b:e5:7c:
         ad:a8:b9:14:23:fb:96:fb:31:20:6d:30:2b:c5:3d:ed:ab:5e:
         83:f0:ef:56:4b:4d:ca:54:43:6f:53:27:a1:1a:4d:b4:d3:75:
         81:ca:93:18:ec:3a:9b:ce:74:f8:03:b7:50:a4:c9:10:77:7c:
         94:97:0c:87:21:df:66:91:a8:af:fc:61:53:bf:f3:c0:1a:5c:
         7c:c8:81:08:14:d1:38:54:bc:76:57:ed:71:cc:16:b5:0e:0f:
         ce:ec:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org