Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200809.roa
File:                     AS200809.roa (raw, json)
Hash identifier:          12XO43fgtoa9cHBfWxIsqKfVfxUWmFIVC0O3cVdBV5Y=
Subject key identifier:   35:97:19:F2:B7:8A:AB:ED:F1:15:91:7C:66:A3:AF:41:E9:6E:5F:40
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0E290285ACB3A5BEEE7E4D1615343BDC6CB3B45A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200809.roa
Signing time:             Sun 06 Oct 2024 04:45:07 +0000
ROA not before:           Sun 06 Oct 2024 04:40:07 +0000
ROA not after:            Sun 05 Oct 2025 04:45:07 +0000
asID:                     200809
IP address blocks:        2a0a:6040:2200::/40 maxlen: 48
                          2a0a:6040:2300::/40 maxlen: 48
                          2a0a:6040:6600::/40 maxlen: 48
                          2a0a:6040:8800::/40 maxlen: 48
                          2a0a:6040:a400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:29:02:85:ac:b3:a5:be:ee:7e:4d:16:15:34:3b:dc:6c:b3:b4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:07 2024 GMT
            Not After : Oct  5 04:45:07 2025 GMT
        Subject: CN=359719F2B78AABEDF115917C66A3AF41E96E5F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:e3:ee:50:13:eb:e2:5f:dc:92:bf:35:df:
                    db:b7:8e:58:24:54:e4:28:44:be:ea:8a:26:90:2b:
                    ae:c2:56:06:b4:6c:b4:6f:4d:cf:f7:81:7d:5c:de:
                    f5:3a:9e:f5:4e:cd:02:c4:84:25:46:59:b1:52:46:
                    13:31:fa:65:64:8d:31:aa:e4:bd:83:41:0b:21:1d:
                    f5:96:57:4c:ab:3c:d1:00:e1:26:2b:32:75:df:95:
                    df:cc:4c:c7:1e:67:1d:de:1a:97:ad:82:48:81:29:
                    21:34:30:97:e6:0c:c6:c6:d2:8e:56:fb:6b:a6:79:
                    2f:38:e6:41:53:f0:00:3a:03:d2:3d:d2:1c:e8:e9:
                    0b:d9:fd:ab:2f:de:12:53:a4:28:71:8e:66:05:a2:
                    44:cd:16:64:3f:79:29:81:5d:3b:47:94:7c:fa:c2:
                    31:4a:86:f7:61:d3:f8:f2:c2:7a:32:e1:1a:14:f7:
                    18:9d:85:95:6b:da:c8:16:9f:af:8b:6c:c9:4f:9f:
                    39:9e:16:88:4d:4b:91:ce:6a:02:1b:fc:fa:2d:1f:
                    d4:66:a5:6f:de:c2:36:5f:17:58:b3:71:6f:d9:45:
                    89:10:fc:0b:0f:4f:3c:83:36:e5:a0:1e:d7:8e:df:
                    c3:0c:b5:ab:01:d7:0c:50:11:a0:47:c3:60:58:73:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:97:19:F2:B7:8A:AB:ED:F1:15:91:7C:66:A3:AF:41:E9:6E:5F:40
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2200::/39
                  2a0a:6040:6600::/40
                  2a0a:6040:8800::/40
                  2a0a:6040:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:0b:53:7b:fb:d4:6d:cd:a1:d3:53:ad:3d:c6:6d:17:14:
         ec:d7:e0:d9:88:b7:d4:de:f2:30:a0:b1:43:19:8f:fa:83:3f:
         ea:d8:80:45:4d:33:d3:9d:b0:a3:d0:de:3c:82:21:c3:3f:a5:
         eb:30:ef:c7:51:bb:93:8f:c1:c2:ce:41:0f:e1:f7:12:44:7f:
         73:72:5b:48:67:6b:2a:7e:5b:74:bd:e6:7d:e7:6a:53:3c:fc:
         06:0a:c6:98:58:04:21:70:03:96:bd:32:46:dc:30:76:9c:bb:
         3a:45:ee:8c:8a:c8:be:6b:a0:fb:01:90:0c:03:9a:d3:95:0c:
         3c:12:02:0f:92:0c:07:9f:df:76:75:0e:3f:ff:e8:9f:8c:52:
         df:e3:77:f5:15:a9:40:4f:1b:2a:8e:b6:2b:c5:6c:f1:27:f6:
         69:e5:77:b6:a3:c2:e2:de:ef:e4:6f:08:ad:aa:4f:fd:93:5d:
         0f:47:c1:3a:96:6f:f4:b7:2b:d7:33:7f:9d:53:f7:d2:e1:cb:
         85:63:c8:6b:47:e0:ef:fa:37:65:f4:ee:58:55:17:8a:08:a8:
         fa:8b:0d:40:62:ab:c5:fe:be:83:8c:dd:2a:26:21:40:ef:3c:
         0b:af:48:5f:8b:34:ad:7b:4e:ba:d1:2d:f5:c2:1d:97:e1:31:
         1e:06:b3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org