Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200728.roa
File:                     AS200728.roa (raw, json)
Hash identifier:          sgvJp4uPtdpZ5QvY2UXiCPd3LyVysJPj2uWlf7qD/zs=
Subject key identifier:   A7:6A:15:66:07:A8:CB:76:01:EA:72:F7:3F:44:AF:B4:70:A2:C5:EB
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1D3F0DE0A37357605D236A70D95E537CF75AD0B5
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200728.roa
Signing time:             Sun 06 Oct 2024 04:45:20 +0000
ROA not before:           Sun 06 Oct 2024 04:40:20 +0000
ROA not after:            Sun 05 Oct 2025 04:45:20 +0000
asID:                     200728
IP address blocks:        2a0a:6040:7e00::/40 maxlen: 48
                          2a0a:6040:d000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3f:0d:e0:a3:73:57:60:5d:23:6a:70:d9:5e:53:7c:f7:5a:d0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:20 2024 GMT
            Not After : Oct  5 04:45:20 2025 GMT
        Subject: CN=A76A156607A8CB7601EA72F73F44AFB470A2C5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:53:65:99:af:3d:a3:7b:cd:99:9f:dc:b3:
                    a9:e1:05:94:a2:17:bb:02:3c:9e:4d:73:09:b2:f5:
                    07:9d:76:d3:e6:0a:ff:3d:49:64:35:75:f1:88:2e:
                    76:1a:02:1c:74:64:6b:0b:a5:ca:1d:51:9e:59:07:
                    94:46:4f:0b:ae:af:9d:e4:e2:d5:a8:66:ba:59:f3:
                    b7:15:6b:ca:09:06:9e:cf:3d:2b:e7:75:46:4c:80:
                    a9:cf:e1:dd:37:22:bc:a6:02:eb:1a:5a:89:3b:c1:
                    91:a3:58:a8:00:cc:5a:d6:ec:3c:65:79:25:fb:b2:
                    f9:ef:05:54:95:f9:00:39:42:cc:74:df:da:d6:08:
                    6c:35:7f:9c:58:62:d9:81:63:8d:b8:6e:66:9b:41:
                    2d:ac:8d:64:7c:8a:a2:38:28:2c:99:fc:04:5b:6f:
                    72:2f:95:72:e8:50:4b:00:eb:4e:94:4d:44:e6:26:
                    e5:3b:81:5a:5a:77:54:47:04:63:2b:1f:ed:19:53:
                    14:54:17:8e:aa:9f:7a:6f:44:fd:82:dc:50:b5:d6:
                    68:23:42:ca:28:f7:93:5c:42:7e:3e:01:81:2a:1b:
                    60:ec:b5:8f:a5:cb:67:f0:f9:7b:0c:28:24:0e:44:
                    8a:9b:2d:4e:79:77:82:51:92:3d:47:d2:37:85:db:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6A:15:66:07:A8:CB:76:01:EA:72:F7:3F:44:AF:B4:70:A2:C5:EB
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200728.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7e00::/40
                  2a0a:6040:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:1e:ac:10:d2:58:ab:07:dc:0d:78:61:69:95:73:d7:9c:
         54:43:c3:b0:35:65:63:89:3b:b3:c3:8b:0d:bf:f1:83:c7:8b:
         2e:d2:f9:84:93:3f:45:25:78:bd:bc:35:dc:57:f9:11:39:73:
         d7:f5:5c:27:44:7f:d2:f4:82:0f:62:f5:3b:2a:46:df:b3:fb:
         68:92:25:64:80:91:7c:a1:a7:63:9f:6d:15:29:31:f7:7f:2f:
         17:e3:8f:00:6d:d8:3b:30:98:9e:80:17:e9:a8:8d:f3:33:1a:
         2a:fe:fb:f8:50:83:af:6b:57:59:29:32:e8:a0:1f:9b:cc:00:
         19:47:4e:e3:65:f9:e3:7e:aa:59:80:72:58:a8:8c:5f:f0:e2:
         c2:73:66:1e:fb:ca:f5:41:e7:28:c7:2b:ee:9c:7b:af:7a:b6:
         db:fc:7e:7f:60:72:97:de:18:39:78:4f:e6:4b:a9:5d:84:3a:
         5e:5a:4b:1d:21:89:05:54:44:68:be:46:b4:4e:07:02:00:3f:
         ff:7e:3a:45:69:07:87:96:ee:fe:23:1a:5b:16:7b:d2:7e:36:
         91:18:56:9c:a2:90:dd:d6:54:70:a7:5e:e6:3a:66:86:39:88:
         ca:92:6d:9b:8d:b4:bc:b6:b1:40:af:ff:94:ed:92:c7:fa:4c:
         3b:1d:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org