Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216089.roa
File:                     AS216089.roa (raw, json)
Hash identifier:          ijQHLE03ZhoubOLdWAhutrsnXgKENCKt/TP2mMforbQ=
Subject key identifier:   D9:9E:47:3F:BA:2B:38:89:F3:18:13:A9:5C:9F:19:9C:45:89:C8:50
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       309465E669088C97846D0A28E24BBBD9BA6473C5
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216089.roa
Signing time:             Thu 26 Oct 2023 11:56:45 +0000
ROA not before:           Thu 26 Oct 2023 11:51:45 +0000
ROA not after:            Thu 24 Oct 2024 11:56:45 +0000
asID:                     216089
IP address blocks:        2a05:dfc1:a800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:94:65:e6:69:08:8c:97:84:6d:0a:28:e2:4b:bb:d9:ba:64:73:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct 26 11:51:45 2023 GMT
            Not After : Oct 24 11:56:45 2024 GMT
        Subject: CN=D99E473FBA2B3889F31813A95C9F199C4589C850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:d7:70:77:08:2a:be:d8:71:26:38:14:cf:
                    cf:41:5a:0e:30:61:95:b7:fb:d3:bb:12:93:b1:a9:
                    b9:fd:15:58:49:9a:e5:95:4f:f3:35:0a:c6:53:85:
                    b5:c8:d1:01:0a:ba:e1:d5:b0:2a:a2:be:fa:16:5d:
                    d3:97:c5:0b:43:da:83:f2:8a:92:fd:20:ba:02:17:
                    95:10:05:ac:78:0f:25:65:ac:2b:49:eb:5f:5d:b2:
                    85:61:71:29:b7:ad:08:57:da:6a:2d:93:60:65:f8:
                    98:09:f5:ca:66:ad:dd:fb:3e:7d:6c:63:ee:6d:4c:
                    c8:13:29:4d:22:53:30:e8:02:57:f0:e0:27:9b:08:
                    39:37:b7:56:fe:57:f4:ed:f0:8a:1f:38:2d:83:4b:
                    ab:92:5f:48:0c:a2:44:e1:42:ce:45:81:b9:c5:3d:
                    ed:75:32:22:19:28:21:0b:36:a3:39:27:62:7b:22:
                    16:aa:37:ce:30:3a:b1:09:50:84:fd:0a:c2:e5:6e:
                    e6:6d:45:bb:01:58:1b:5d:dd:72:ca:d7:f7:40:ad:
                    7b:bb:bc:03:e7:e7:03:de:12:e8:63:a7:f0:a6:3a:
                    9b:0c:08:63:61:02:33:94:c4:60:e5:de:fb:9f:22:
                    f1:19:64:5e:66:a6:b8:a6:cf:11:1b:48:6a:85:cf:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9E:47:3F:BA:2B:38:89:F3:18:13:A9:5C:9F:19:9C:45:89:C8:50
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216089.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:b4:a9:74:b0:82:f7:9b:4c:77:7e:65:70:be:f0:b6:72:22:
         ed:3b:15:32:c5:76:4d:2c:16:ba:fb:74:f9:cc:1d:13:fa:4f:
         8c:24:19:86:e3:75:de:49:e3:3b:e1:5f:65:bf:45:90:fe:31:
         bf:17:cd:0d:53:48:70:2d:14:65:0d:dd:22:16:d6:f5:53:bc:
         60:b1:fb:0f:95:4a:5a:0c:4c:30:14:c2:6d:db:80:c8:fc:e8:
         24:e6:de:5c:bc:b3:c4:c2:97:26:de:be:6a:64:a0:d1:6a:68:
         15:8e:32:62:7a:10:f3:16:2e:22:03:83:97:fc:eb:e8:8b:b7:
         d6:2f:4d:8f:7e:d5:29:63:e1:b7:e3:b1:b1:92:d2:bb:34:21:
         bc:35:33:f2:1e:a4:3b:46:a3:97:c1:f2:32:13:15:46:0b:5c:
         ea:ad:74:05:63:70:b0:5f:9b:08:b8:dc:2b:ba:ab:cb:df:e3:
         5f:eb:1e:21:89:9f:13:15:d4:4b:44:0b:a9:65:e9:98:dc:7c:
         c0:29:c7:ad:3f:04:ff:ec:a1:98:12:c4:35:cf:4c:53:ad:ea:
         a1:2d:29:4e:68:8a:2c:6d:51:96:b0:1f:c0:fa:f6:ca:f4:70:
         10:49:50:c8:4a:57:f1:83:a7:c8:b6:04:63:1a:fe:57:8e:6b:
         99:bf:52:d5
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUMJRl5mkIjJeEbQoo4ku72bpkc8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzEwMjYxMTUxNDVaFw0yNDEwMjQxMTU2NDVaMDMxMTAvBgNV
BAMTKEQ5OUU0NzNGQkEyQjM4ODlGMzE4MTNBOTVDOUYxOTlDNDU4OUM4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSItdwdwgqvthxJjgUz89BWg4w
YZW3+9O7EpOxqbn9FVhJmuWVT/M1CsZThbXI0QEKuuHVsCqivvoWXdOXxQtD2oPy
ipL9ILoCF5UQBax4DyVlrCtJ619dsoVhcSm3rQhX2motk2Bl+JgJ9cpmrd37Pn1s
Y+5tTMgTKU0iUzDoAlfw4CebCDk3t1b+V/Tt8IofOC2DS6uSX0gMokThQs5FgbnF
Pe11MiIZKCELNqM5J2J7IhaqN84wOrEJUIT9CsLlbuZtRbsBWBtd3XLK1/dArXu7
vAPn5wPeEuhjp/CmOpsMCGNhAjOUxGDl3vufIvEZZF5mprimzxEbSGqFz6FJAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU2Z5HP7orOInzGBOpXJ8ZnEWJyFAwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjE2MDg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwagwDQYJKoZIhvcNAQELBQADggEBAAe0
qXSwgvebTHd+ZXC+8LZyIu07FTLFdk0sFrr7dPnMHRP6T4wkGYbjdd5J4zvhX2W/
RZD+Mb8XzQ1TSHAtFGUN3SIW1vVTvGCx+w+VSloMTDAUwm3bgMj86CTm3ly8s8TC
lybevmpkoNFqaBWOMmJ6EPMWLiIDg5f86+iLt9YvTY9+1Slj4bfjsbGS0rs0Ibw1
M/IepDtGo5fB8jITFUYLXOqtdAVjcLBfmwi43Cu6q8vf41/rHiGJnxMV1EtEC6ll
6ZjcfMApx60/BP/soZgSxDXPTFOt6qEtKU5oiixtUZawH8D69sr0cBBJUMhKV/GD
p8i2BGMa/leOa5m/UtU=
-----END CERTIFICATE-----
Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org