Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206218.roa
File:                     AS206218.roa (raw, json)
Hash identifier:          X/eIaLkolZ2r9uX3DlVOhTUZzOvpYvqF73m2/HmcXsA=
Subject key identifier:   29:6A:61:18:EC:D3:C2:4F:F6:5B:B0:36:DF:ED:CD:3C:AA:ED:F5:98
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       016D42DF43B5EE08AA32FE5E1F9729910E42522A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206218.roa
Signing time:             Sun 06 Oct 2024 04:45:18 +0000
ROA not before:           Sun 06 Oct 2024 04:40:18 +0000
ROA not after:            Sun 05 Oct 2025 04:45:18 +0000
asID:                     206218
IP address blocks:        2a0a:6040:a00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6d:42:df:43:b5:ee:08:aa:32:fe:5e:1f:97:29:91:0e:42:52:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:18 2024 GMT
            Not After : Oct  5 04:45:18 2025 GMT
        Subject: CN=296A6118ECD3C24FF65BB036DFEDCD3CAAEDF598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:f6:35:9a:7b:34:05:55:a4:de:dc:76:f5:
                    dc:92:e1:bc:95:b6:14:5d:7c:8a:3f:0f:dd:93:63:
                    81:31:8f:90:5b:6b:9c:ac:73:bb:d6:29:59:d3:93:
                    7a:e7:5f:dc:f2:43:e1:86:4d:c5:1c:a0:16:a0:24:
                    01:94:e7:d0:c6:5c:53:dc:56:99:9e:a5:19:d0:b7:
                    78:b4:24:74:76:6f:fd:ec:90:2a:64:7a:ec:40:cb:
                    30:61:08:05:15:b5:6a:10:de:1b:82:fc:7b:ee:67:
                    d8:13:85:46:6d:66:c8:31:c9:43:8c:d3:01:be:53:
                    8b:cb:3a:7a:bb:5d:e0:3f:d5:9e:50:a3:65:a6:92:
                    d6:ea:9f:ee:8c:19:0d:d4:51:91:9b:be:ff:2d:37:
                    64:3a:82:b9:76:16:49:19:6a:19:f5:bd:10:bd:fc:
                    21:fa:82:1e:22:10:da:d3:81:4d:82:44:8e:aa:fd:
                    4c:b1:ee:f5:4c:ab:0c:b3:a5:a0:98:bc:f0:db:d4:
                    3f:d5:f3:21:59:21:46:ca:80:0e:0f:f3:6c:c3:fa:
                    f9:08:7f:cf:1e:b7:3c:2d:79:0b:7c:84:48:92:71:
                    28:c2:da:75:26:f6:7f:02:82:2a:ab:3c:7e:d2:c4:
                    d7:14:40:90:1e:ed:da:21:19:2d:b5:b5:f5:38:87:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6A:61:18:EC:D3:C2:4F:F6:5B:B0:36:DF:ED:CD:3C:AA:ED:F5:98
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:15:51:46:38:22:32:ed:d5:1f:7e:07:03:c7:e1:41:34:
         eb:5b:32:b8:7d:82:ef:13:2b:ba:5c:f2:91:2b:bf:5b:f8:00:
         9b:bf:6d:95:da:c1:d2:9f:21:c4:07:6b:74:8e:f9:9e:73:65:
         ef:72:4d:e8:e3:9b:22:e0:d4:03:3b:34:d5:42:60:ab:58:4d:
         76:9b:a4:c6:5a:58:f1:b6:88:8c:86:77:c8:ac:0f:0c:16:50:
         65:19:12:28:4f:d3:e8:6a:14:70:ce:ca:c7:87:07:a5:60:3b:
         49:7b:b4:25:6d:18:bd:c4:7e:96:85:1a:bd:84:2f:d8:fa:0f:
         85:3f:ce:9d:93:9f:ec:f1:79:71:43:ab:1f:ec:cb:c0:a7:96:
         15:2e:2e:c4:34:59:43:81:43:94:d8:e6:ad:93:50:0e:a9:ec:
         1b:01:0d:5f:f7:36:c6:6f:d4:b6:0a:94:cc:18:cf:65:1b:be:
         de:e7:c9:14:8d:c2:e1:6d:32:c5:9e:bd:1a:d1:ef:06:7b:24:
         41:be:7a:fa:33:ec:46:f1:3b:6f:a5:a8:34:02:ad:4a:66:0f:
         f3:6e:ee:05:f5:2c:d9:af:36:01:2f:e6:5f:10:6b:68:53:a4:
         44:c8:2c:d1:df:38:80:a4:58:c7:23:16:92:bf:c4:d9:9f:ce:
         59:25:c5:08
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUAW1C30O17giqMv5eH5cpkQ5CUiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMThaFw0yNTEwMDUwNDQ1MThaMDMxMTAvBgNV
BAMTKDI5NkE2MTE4RUNEM0MyNEZGNjVCQjAzNkRGRURDRDNDQUFFREY1OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjAvY1mns0BVWk3tx29dyS4byV
thRdfIo/D92TY4Exj5Bba5ysc7vWKVnTk3rnX9zyQ+GGTcUcoBagJAGU59DGXFPc
VpmepRnQt3i0JHR2b/3skCpkeuxAyzBhCAUVtWoQ3huC/HvuZ9gThUZtZsgxyUOM
0wG+U4vLOnq7XeA/1Z5Qo2Wmktbqn+6MGQ3UUZGbvv8tN2Q6grl2FkkZahn1vRC9
/CH6gh4iENrTgU2CRI6q/Uyx7vVMqwyzpaCYvPDb1D/V8yFZIUbKgA4P82zD+vkI
f88etzwteQt8hEiScSjC2nUm9n8CgiqrPH7SxNcUQJAe7dohGS21tfU4h+ilAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUKWphGOzTwk/2W7A23+3NPKrt9ZgwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjA2MjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQAowDQYJKoZIhvcNAQELBQADggEBACM9
FVFGOCIy7dUffgcDx+FBNOtbMrh9gu8TK7pc8pErv1v4AJu/bZXawdKfIcQHa3SO
+Z5zZe9yTejjmyLg1AM7NNVCYKtYTXabpMZaWPG2iIyGd8isDwwWUGUZEihP0+hq
FHDOyseHB6VgO0l7tCVtGL3EfpaFGr2EL9j6D4U/zp2Tn+zxeXFDqx/sy8CnlhUu
LsQ0WUOBQ5TY5q2TUA6p7BsBDV/3NsZv1LYKlMwYz2Ubvt7nyRSNwuFtMsWevRrR
7wZ7JEG+evoz7EbxO2+lqDQCrUpmD/Nu7gX1LNmvNgEv5l8Qa2hTpETILNHfOICk
WMcjFpK/xNmfzlklxQg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org