Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200782.roa
File:                     AS200782.roa (raw, json)
Hash identifier:          FacS7aUAwBIe6M+1J+O14E2NbWFLD9l7i36wgJ5WtAA=
Subject key identifier:   30:60:64:4D:87:46:AA:08:BB:64:4B:89:ED:70:3E:E9:3C:B1:73:D0
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       05EF7704DFB9AE25AB9075CBB80A1BF0F05A2E58
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200782.roa
Signing time:             Sun 05 Nov 2023 04:07:13 +0000
ROA not before:           Sun 05 Nov 2023 04:02:13 +0000
ROA not after:            Sun 03 Nov 2024 04:07:13 +0000
asID:                     200782
IP address blocks:        2a0a:6040:ce00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ef:77:04:df:b9:ae:25:ab:90:75:cb:b8:0a:1b:f0:f0:5a:2e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:13 2023 GMT
            Not After : Nov  3 04:07:13 2024 GMT
        Subject: CN=3060644D8746AA08BB644B89ED703EE93CB173D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:d4:3d:62:bc:b6:4b:ce:3c:2b:94:0c:ce:
                    dc:e8:e9:16:e6:a1:20:29:e3:06:06:5e:52:56:01:
                    53:78:ab:6c:6a:4a:95:75:13:50:e9:2a:04:1c:e4:
                    8c:7f:54:a3:07:ba:c4:b2:10:8c:8d:d7:65:01:46:
                    cd:6a:18:84:19:8b:2c:52:7a:85:61:b1:3c:63:21:
                    d6:6c:f3:e2:82:98:4e:d3:70:91:4c:5d:29:ac:cc:
                    6c:d9:67:0a:8d:46:e7:7d:14:70:0b:61:32:a9:55:
                    23:a4:1e:d2:14:d9:98:d5:a5:4c:5f:72:06:74:74:
                    a6:13:73:b6:70:d4:24:d7:7b:f2:7e:82:2c:64:0c:
                    c7:fd:a9:62:61:3b:1a:11:4d:11:c8:24:9f:07:81:
                    2b:ed:9d:33:ab:14:66:97:14:d9:9f:69:12:05:ed:
                    ba:80:fb:ee:bb:ef:0f:d0:ef:33:55:40:69:ee:3e:
                    c7:1b:45:9a:42:ef:d5:cc:bb:ff:af:dd:18:f4:78:
                    77:79:de:28:2e:61:fd:b4:55:6b:6f:60:c4:f9:55:
                    97:87:86:09:3c:2c:65:06:63:d4:e7:ea:44:38:a7:
                    91:8d:0c:4a:b6:64:de:ff:19:52:27:e6:86:3a:75:
                    6a:08:b7:bd:f9:d3:9d:74:51:cb:d0:f7:3f:60:6c:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:60:64:4D:87:46:AA:08:BB:64:4B:89:ED:70:3E:E9:3C:B1:73:D0
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200782.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ce00::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:46:97:39:04:f8:3b:86:e8:0b:62:b4:aa:f3:fc:3d:73:d0:
         0b:99:8c:5c:e0:17:79:66:7a:22:5d:5b:06:41:d3:bd:82:4f:
         7b:69:d5:47:8a:ba:0a:61:02:7b:47:84:19:cf:cd:ce:fb:4b:
         72:0e:3f:f7:28:23:84:74:bf:5b:e5:b1:24:88:5b:51:7a:ee:
         90:b6:b9:e5:86:54:84:57:3e:e2:c2:9e:44:f9:69:d6:3c:ae:
         2d:1e:e9:e8:e8:c2:cc:b1:b5:1b:0c:ef:4e:8c:16:f4:08:21:
         6f:fd:45:6b:d4:3e:7e:11:92:08:f3:05:41:97:19:47:05:4e:
         11:2f:bb:f4:c9:95:c2:ea:da:fb:c0:c7:62:55:13:91:07:c9:
         b2:41:58:7c:41:c8:ea:bc:9f:8e:fe:f6:d6:b3:3e:8d:b6:f7:
         b6:33:d3:da:c2:08:3e:14:52:73:a8:b3:de:a8:f1:98:a9:a2:
         cc:4b:1c:ae:2a:f6:aa:1e:5a:24:5b:72:40:a6:7b:35:1a:fe:
         99:75:39:44:dd:3a:e9:fe:95:09:1f:8c:2e:71:af:f4:3e:b0:
         7b:55:3f:38:4f:4e:36:ae:18:0a:83:e8:92:81:ab:1e:6d:00:
         3a:f5:e2:02:82:af:34:2f:a9:65:df:e9:a4:79:c9:a5:bf:74:
         93:cc:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org