Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205965.roa
File:                     AS205965.roa (raw, json)
Hash identifier:          Now6Nx89LH0FKQdLaLSfsArZzxFdLCY0st/B5iw305g=
Subject key identifier:   01:E7:53:4A:74:58:6F:52:12:5C:B5:82:F6:2D:EE:1D:F1:42:B1:19
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7650B7DA593FD99A8506744DB8931257FAEA9355
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205965.roa
Signing time:             Mon 16 Oct 2023 08:43:47 +0000
ROA not before:           Mon 16 Oct 2023 08:38:47 +0000
ROA not after:            Mon 14 Oct 2024 08:43:47 +0000
asID:                     205965
IP address blocks:        2a05:dfc1:ad00::/40 maxlen: 48
                          2a05:dfc1:ae00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:50:b7:da:59:3f:d9:9a:85:06:74:4d:b8:93:12:57:fa:ea:93:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct 16 08:38:47 2023 GMT
            Not After : Oct 14 08:43:47 2024 GMT
        Subject: CN=01E7534A74586F52125CB582F62DEE1DF142B119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:10:5c:35:6b:77:fb:66:05:ab:f9:db:f4:
                    94:c7:72:bd:33:53:2b:ab:23:e6:cd:1a:73:87:ab:
                    98:18:b8:f8:69:02:ec:28:f1:29:b1:72:42:1a:55:
                    78:28:e5:6e:74:2a:34:76:e7:93:cb:10:76:08:c4:
                    5e:fd:c6:3c:49:86:82:ec:a1:b2:48:7a:7c:47:cb:
                    8a:bf:02:ce:4f:d3:ca:e8:77:33:97:cc:c3:7a:17:
                    27:7c:ba:f1:13:9b:c0:b0:2b:46:e9:80:81:90:3a:
                    8e:3b:14:53:79:e0:4d:21:77:94:5f:f5:dc:9c:a2:
                    4a:85:83:22:cb:3b:55:e2:e5:f7:e3:9c:43:dd:80:
                    61:36:22:6d:cf:33:df:eb:1d:20:ca:7b:cc:05:5d:
                    70:a5:3a:10:95:fd:8c:6b:7e:eb:a0:f2:67:51:3f:
                    65:46:78:c5:3f:e2:b4:50:40:f6:d2:81:fa:72:d8:
                    a9:b9:e3:3a:aa:16:5b:c3:d0:c6:6b:c0:d2:7f:36:
                    a2:e3:26:1f:7d:3d:8f:3a:05:31:9f:21:40:8d:91:
                    eb:15:8c:30:ce:21:f2:66:f0:10:bb:0a:28:df:db:
                    88:49:50:cd:4d:6e:8f:fd:9e:2f:15:3e:23:34:84:
                    51:e1:e6:b5:0f:ee:ae:f0:42:37:31:8f:43:8d:dc:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E7:53:4A:74:58:6F:52:12:5C:B5:82:F6:2D:EE:1D:F1:42:B1:19
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205965.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:ad00::-2a05:dfc1:aeff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         a1:8b:b7:4e:41:c0:aa:78:f9:cf:ef:0a:a8:86:b1:69:fe:ab:
         a1:eb:cf:fc:c8:62:ed:a6:aa:5b:00:e2:28:07:03:24:49:3c:
         3d:84:6b:f8:97:38:30:bb:63:8b:69:17:31:a9:90:24:d1:0a:
         d3:30:1c:d3:9b:e0:b5:7b:e0:3e:04:d8:1c:3b:d3:e5:51:4a:
         3c:3a:9e:35:f9:94:76:0f:a5:bb:33:4f:e7:40:bf:f9:d0:6b:
         23:0e:7d:7f:6b:b2:fb:b5:33:06:33:35:30:19:bb:43:17:f1:
         c3:23:7a:22:05:a1:c6:6c:f0:57:cd:b6:73:04:6c:52:12:2f:
         b0:b5:de:16:51:1b:b0:aa:7d:3d:39:ac:48:b6:29:4a:42:9e:
         39:53:cd:9d:6d:34:ea:58:75:6e:ae:c5:ef:21:e3:86:99:a8:
         df:7c:b3:a7:8a:91:d9:f4:ab:35:48:95:62:e6:ac:7d:89:b8:
         16:81:dd:f0:a0:f4:a3:8d:05:80:65:c0:ee:ed:c9:26:f1:9c:
         51:f6:60:cb:19:11:a9:8e:e1:0b:d6:55:11:76:0d:ea:6e:48:
         8d:64:8a:f2:07:77:ae:ca:b6:d4:94:90:70:12:f2:ce:e8:6a:
         93:92:e3:44:f2:b5:90:22:7e:d9:ed:3c:87:86:c5:34:b8:48:
         a5:4d:aa:20
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUdlC32lk/2ZqFBnRNuJMSV/rqk1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzEwMTYwODM4NDdaFw0yNDEwMTQwODQzNDdaMDMxMTAvBgNV
BAMTKDAxRTc1MzRBNzQ1ODZGNTIxMjVDQjU4MkY2MkRFRTFERjE0MkIxMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7xBcNWt3+2YFq/nb9JTHcr0z
UyurI+bNGnOHq5gYuPhpAuwo8SmxckIaVXgo5W50KjR255PLEHYIxF79xjxJhoLs
obJIenxHy4q/As5P08rodzOXzMN6Fyd8uvETm8CwK0bpgIGQOo47FFN54E0hd5Rf
9dycokqFgyLLO1Xi5ffjnEPdgGE2Im3PM9/rHSDKe8wFXXClOhCV/Yxrfuug8mdR
P2VGeMU/4rRQQPbSgfpy2Km54zqqFlvD0MZrwNJ/NqLjJh99PY86BTGfIUCNkesV
jDDOIfJm8BC7Cijf24hJUM1Nbo/9ni8VPiM0hFHh5rUP7q7wQjcxj0ON3FTxAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQUAedTSnRYb1ISXLWC9i3uHfFCsRkwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjA1OTY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBd/BrQMGACoF38GuMA0GCSqGSIb3DQEB
CwUAA4IBAQChi7dOQcCqePnP7wqohrFp/quh68/8yGLtpqpbAOIoBwMkSTw9hGv4
lzgwu2OLaRcxqZAk0QrTMBzTm+C1e+A+BNgcO9PlUUo8Op41+ZR2D6W7M0/nQL/5
0GsjDn1/a7L7tTMGMzUwGbtDF/HDI3oiBaHGbPBXzbZzBGxSEi+wtd4WURuwqn09
OaxItilKQp45U82dbTTqWHVursXvIeOGmajffLOnipHZ9Ks1SJVi5qx9ibgWgd3w
oPSjjQWAZcDu7ckm8ZxR9mDLGRGpjuEL1lURdg3qbkiNZIryB3euyrbUlJBwEvLO
6GqTkuNE8rWQIn7Z7TyHhsU0uEilTaog
-----END CERTIFICATE-----
Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org