Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200728.roa
File:                     AS200728.roa (raw, json)
Hash identifier:          S6Tb6v7CjYnSzvJTkyqmjQwxbFLFtDZzvVba9M4+Irs=
Subject key identifier:   79:CB:C7:CC:7A:1A:6F:32:0E:6C:8E:03:21:C2:98:BA:AE:CF:53:E9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       33CD191D47E907FD6F137B25908790EF8DB0337D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200728.roa
Signing time:             Sun 05 Nov 2023 04:07:22 +0000
ROA not before:           Sun 05 Nov 2023 04:02:22 +0000
ROA not after:            Sun 03 Nov 2024 04:07:22 +0000
asID:                     200728
IP address blocks:        2a0a:6040:7e00::/40 maxlen: 48
                          2a0a:6040:d000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cd:19:1d:47:e9:07:fd:6f:13:7b:25:90:87:90:ef:8d:b0:33:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:22 2023 GMT
            Not After : Nov  3 04:07:22 2024 GMT
        Subject: CN=79CBC7CC7A1A6F320E6C8E0321C298BAAECF53E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:03:d4:38:b0:fb:88:e9:06:6e:73:fe:c6:
                    cb:e7:65:c3:e1:43:66:8a:03:19:90:f9:b3:c4:7e:
                    1a:d5:68:7f:8f:7e:fb:75:e3:65:9c:8b:74:de:92:
                    cd:4c:96:c2:7f:44:aa:7e:dd:cb:24:99:6c:1e:ef:
                    4f:8c:0a:ca:9b:4d:41:25:70:8c:3a:2d:80:e8:b7:
                    b5:56:ae:f9:47:f0:a3:71:e4:bb:d9:69:21:aa:31:
                    86:50:76:f3:eb:5c:40:cc:1f:65:50:84:19:b2:bc:
                    dc:9e:b0:77:f8:96:45:f3:3f:4e:b4:d0:11:46:67:
                    5e:21:d5:98:41:01:76:63:79:6e:e6:ce:cf:79:45:
                    1d:fc:6e:a5:51:c8:57:89:9b:4b:76:5b:ca:c3:72:
                    dc:06:89:72:dd:46:10:d0:31:f7:b5:bd:ec:4e:a1:
                    f1:de:f1:a5:be:f5:15:25:88:08:2d:fe:35:8a:74:
                    68:2e:47:58:90:68:50:d6:81:b7:4d:6c:f2:d1:92:
                    d5:5a:b8:3d:22:af:02:ab:a0:a6:6c:36:ee:85:99:
                    3c:58:d7:46:91:2f:b5:0e:58:e5:c1:56:78:ff:85:
                    1c:a4:59:bb:b0:5b:54:db:18:c4:73:81:9f:4e:9e:
                    a6:54:31:76:47:9e:59:4e:6d:08:00:8e:3f:d2:a8:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:C7:CC:7A:1A:6F:32:0E:6C:8E:03:21:C2:98:BA:AE:CF:53:E9
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200728.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7e00::/40
                  2a0a:6040:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:e3:68:23:c3:a0:6b:44:0b:d4:4a:a7:51:3f:d1:76:1a:6a:
         af:ab:7c:c3:0f:2a:62:e5:70:88:b9:4a:3a:fc:9e:20:33:6b:
         3d:98:75:6c:11:8f:c0:04:d2:99:fe:a0:29:6d:be:71:2a:1c:
         e3:52:21:fe:26:69:4d:36:ab:34:6c:af:32:1f:3c:32:7b:0d:
         99:c3:e9:fa:18:5a:6c:b9:f2:c4:ee:3e:f7:3b:4a:28:80:27:
         0d:6d:4b:47:d8:11:18:f9:32:84:01:1f:1a:2c:bb:ee:b1:8c:
         b7:34:95:9a:55:15:1e:c9:de:12:aa:8a:61:20:d8:6d:4a:ea:
         b1:35:b0:bc:90:59:88:d0:b8:87:c1:6c:b0:a2:15:1b:09:4e:
         0f:07:7d:05:08:4e:49:6d:e8:74:c1:d6:8c:13:e5:a5:7c:90:
         12:fe:f1:75:98:a6:c5:49:38:92:3c:b7:cb:f9:01:9f:cb:17:
         71:b1:6c:4b:cb:f7:3a:af:31:d2:cf:e8:a5:cc:6e:35:65:d5:
         e4:65:c9:86:55:17:07:cd:d8:47:36:66:9b:1f:b9:08:15:0b:
         84:6a:38:58:7d:41:fa:ab:09:c5:e7:55:f5:b2:7f:58:fc:46:
         40:eb:0a:a1:ee:37:9f:75:af:7f:e5:4b:de:a1:74:08:87:66:
         d7:33:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org