Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206016.roa
File:                     AS206016.roa (raw, json)
Hash identifier:          UEJD7+M3lDfw61hitBWlwNRQP8rGnhyoy98koi8WQXs=
Subject key identifier:   74:21:D5:86:B7:A4:87:79:E9:DC:A1:4C:B1:B5:6A:00:E1:21:DA:53
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5F2B60EB5E538FC4E1516213DBE6B9CF44E52676
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206016.roa
Signing time:             Sun 06 Oct 2024 04:45:09 +0000
ROA not before:           Sun 06 Oct 2024 04:40:09 +0000
ROA not after:            Sun 05 Oct 2025 04:45:09 +0000
asID:                     206016
IP address blocks:        2a0a:6040:200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:60:eb:5e:53:8f:c4:e1:51:62:13:db:e6:b9:cf:44:e5:26:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:09 2024 GMT
            Not After : Oct  5 04:45:09 2025 GMT
        Subject: CN=7421D586B7A48779E9DCA14CB1B56A00E121DA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:65:c4:5f:32:33:c8:45:c1:af:94:9f:5e:
                    0a:c4:b3:af:16:a3:ab:34:9f:ab:e2:87:8f:56:f5:
                    71:64:3f:60:4d:7a:ad:85:7b:ae:2e:7a:e2:10:ae:
                    55:28:2d:44:db:88:c1:75:5e:ff:1a:3a:7e:1e:cd:
                    09:7e:51:1f:08:d6:a6:fd:f7:56:e1:30:82:11:da:
                    84:aa:53:95:d6:18:c8:85:59:09:00:65:bc:34:bc:
                    c5:7b:bb:57:bc:a9:fc:ed:98:d9:55:fc:a1:03:40:
                    dc:3f:cd:53:aa:01:87:50:29:d5:f9:79:51:5e:2e:
                    d1:ad:ee:14:a9:4d:44:52:88:3f:8f:88:0d:a0:85:
                    45:fc:c6:b7:33:1a:df:13:79:e3:c8:7d:a9:f1:1f:
                    4a:ff:ab:44:89:ae:59:f6:71:03:40:2b:d7:a1:54:
                    b9:95:31:00:38:c2:52:11:42:b0:00:6a:db:ad:79:
                    3d:74:84:e8:da:21:b9:a9:18:b0:95:db:fd:04:09:
                    42:97:87:cf:40:59:65:d0:89:0f:3c:f1:f4:cd:30:
                    27:03:8a:5d:82:39:63:e9:57:cc:c5:48:95:32:c3:
                    5b:eb:d2:8a:0e:09:96:3c:bc:63:f6:7b:6d:50:cd:
                    97:12:13:db:83:cb:17:42:cf:cc:5e:29:69:6d:e3:
                    9d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:21:D5:86:B7:A4:87:79:E9:DC:A1:4C:B1:B5:6A:00:E1:21:DA:53
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:0f:1d:10:5d:ac:93:23:42:a8:34:5d:25:dc:b6:b2:94:
         96:8c:9b:e5:77:7e:6a:c7:22:4d:0c:2b:13:7e:bc:e7:e5:96:
         a5:d8:b2:fe:1a:f1:54:b2:6b:c5:0f:09:61:ea:01:55:02:8c:
         ae:7f:ff:cf:48:19:13:d3:39:19:c1:1e:8d:b0:ec:81:58:ad:
         ac:69:76:29:08:63:ad:c4:22:e4:68:c0:da:b7:1e:d3:8c:7f:
         82:57:80:62:b3:43:31:4b:16:79:1a:17:b8:5a:df:ce:19:ba:
         03:33:2f:1d:66:71:de:3e:87:80:f2:4c:95:b6:1c:97:35:f6:
         a5:b8:1e:14:b8:7f:b5:aa:bb:aa:41:95:37:49:27:25:94:66:
         32:c4:fb:9b:4d:ac:da:48:03:f5:6c:22:30:f4:88:b2:64:17:
         53:b7:df:5c:f3:81:6c:71:45:3e:a6:ff:7f:10:e3:fe:7f:71:
         b6:32:56:8f:f6:ee:4d:08:c9:7d:1a:ec:3c:e8:69:93:dd:e6:
         d9:5c:25:bb:6d:cd:b5:ce:c9:c0:3e:49:a6:82:22:b7:0e:b2:
         5e:80:12:62:3a:84:4f:c0:f6:9a:3c:a3:62:e0:6a:ea:4c:b3:
         84:f4:09:c6:89:49:b4:0f:8a:b8:81:24:1b:ca:2d:36:fe:4e:
         db:18:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org