Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205183.roa
File:                     AS205183.roa (raw, json)
Hash identifier:          004yTB+w/WyV7b6ZG6rTmO32k9ZhPrh2qHsCa5anCJA=
Subject key identifier:   6B:06:6C:5B:DF:C2:09:92:3F:5F:77:98:55:47:DC:95:74:DE:28:40
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4E77F3B99F15525A9751CB814AE0F5120C258065
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205183.roa
Signing time:             Sun 05 Nov 2023 04:07:22 +0000
ROA not before:           Sun 05 Nov 2023 04:02:22 +0000
ROA not after:            Sun 03 Nov 2024 04:07:22 +0000
asID:                     205183
IP address blocks:        2a0a:6040:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:77:f3:b9:9f:15:52:5a:97:51:cb:81:4a:e0:f5:12:0c:25:80:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:22 2023 GMT
            Not After : Nov  3 04:07:22 2024 GMT
        Subject: CN=6B066C5BDFC209923F5F77985547DC9574DE2840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:ff:15:26:f4:e9:64:e5:86:e5:5f:41:63:
                    65:99:68:23:51:a2:0c:68:e5:d9:81:78:c4:ec:de:
                    75:6a:8c:85:02:cd:13:11:04:c6:04:7f:6f:c7:1b:
                    81:8b:af:77:ad:cf:36:c3:96:61:15:7a:4f:e9:51:
                    ae:af:2c:bd:3b:45:b6:c3:98:15:f7:a6:19:92:49:
                    25:ec:9e:98:8e:b8:84:2e:51:55:cd:ff:61:22:ab:
                    f2:ca:d8:14:a4:6d:71:f4:ae:d9:db:e0:26:4a:7a:
                    d6:65:44:22:70:78:69:42:c0:16:53:30:da:09:55:
                    39:a8:6f:ee:23:b4:5c:df:94:79:ad:3d:cd:0d:b8:
                    2c:32:ae:cd:32:97:a8:80:90:7f:99:cc:88:41:54:
                    9a:25:a2:e4:f5:d6:59:57:19:9e:5b:0b:44:18:e1:
                    02:47:dd:0f:f2:bb:de:b3:db:6b:4d:1f:36:99:69:
                    48:b1:af:0b:09:d5:74:ff:bd:55:74:a5:d9:6b:a3:
                    93:48:36:88:f1:6d:97:e4:ee:bd:ad:7c:bd:b7:c8:
                    52:e2:ec:3d:b7:de:38:27:bd:7e:53:13:2c:37:70:
                    c7:44:6d:52:a5:c7:39:4f:cf:07:cb:70:69:2b:66:
                    69:81:e5:87:1b:08:91:15:12:b7:28:b4:71:36:5d:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:06:6C:5B:DF:C2:09:92:3F:5F:77:98:55:47:DC:95:74:DE:28:40
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205183.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:44:c4:0e:61:f8:b4:d1:6a:6f:a0:b0:c2:34:81:ed:58:72:
         bd:ed:22:34:59:6b:b4:f0:68:03:7b:f6:80:df:91:15:4d:08:
         3b:f0:f0:6a:2f:35:f2:0b:70:67:45:4a:81:19:02:ff:eb:78:
         7e:5b:b1:a9:bb:04:69:a1:9b:0e:9c:96:04:be:77:a5:54:f4:
         ba:bb:bb:7e:36:71:b8:c7:d6:07:1b:9e:c7:63:7b:40:09:b8:
         15:92:6b:9d:b6:fb:12:26:3d:b4:76:a5:80:4f:e3:de:fc:60:
         e5:55:92:a2:cb:fa:d7:4f:04:57:04:f7:ce:07:b7:f1:74:02:
         2d:dd:ba:c8:26:13:4c:6c:87:42:97:ff:58:29:fe:13:71:6f:
         10:39:9c:b3:2f:16:00:c5:be:22:f5:87:d6:d3:d6:d6:a4:01:
         72:ba:da:0b:fd:63:78:b9:32:55:2d:4e:79:2e:a4:35:3d:f3:
         9e:3b:61:7b:98:e8:30:ef:c3:d4:87:96:27:27:9e:f4:1c:de:
         94:c9:b1:55:91:33:89:2c:3e:9e:45:cf:96:a3:c9:47:0d:bd:
         bc:cf:2e:b8:0d:bd:5a:9b:ef:d4:a3:78:af:1d:b5:ec:3c:3d:
         b2:64:4e:77:e9:3f:06:93:df:18:ad:77:01:6c:02:f1:2e:eb:
         69:4e:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org