Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS26006.roa
File:                     AS26006.roa (raw, json)
Hash identifier:          vSJqOg75bp5yNduiSJfuwNSatzB51yzF2jHLUM3mhwQ=
Subject key identifier:   6B:6A:9B:29:01:A1:41:55:4C:98:AD:38:10:99:D4:81:25:AC:95:2D
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1D76021EA7B10F3116A5C151BDC40709A5B037A7
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS26006.roa
Signing time:             Mon 08 Jan 2024 23:49:22 +0000
ROA not before:           Mon 08 Jan 2024 23:44:22 +0000
ROA not after:            Mon 06 Jan 2025 23:49:22 +0000
asID:                     26006
IP address blocks:        2a05:dfc1:a00::/40 maxlen: 48
                          2a05:dfc1:6b00::/40 maxlen: 48
                          2a05:dfc1:9700::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:76:02:1e:a7:b1:0f:31:16:a5:c1:51:bd:c4:07:09:a5:b0:37:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jan  8 23:44:22 2024 GMT
            Not After : Jan  6 23:49:22 2025 GMT
        Subject: CN=6B6A9B2901A141554C98AD381099D48125AC952D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:44:e4:1c:4d:0e:29:f6:86:9e:16:95:44:
                    5b:a3:30:f7:48:5c:42:2c:b1:0e:f0:c3:19:c5:2e:
                    15:f6:8e:e8:04:98:74:79:17:3a:bc:2a:8b:0b:94:
                    fc:e3:99:ab:6c:3a:e2:50:b0:9c:f2:62:0e:52:67:
                    7c:76:8d:7d:26:41:05:40:31:1e:34:02:bb:7d:87:
                    17:fd:f1:b1:16:f3:92:7f:95:95:70:5c:c8:46:83:
                    7e:78:9c:66:a3:07:62:69:99:ed:d8:13:3f:b3:ac:
                    4b:a0:9a:e8:59:68:ac:c5:85:d1:55:4f:e4:b0:bc:
                    53:0f:86:97:22:27:6d:14:15:cd:7e:7e:8f:49:5e:
                    6b:1e:5c:b0:ce:dc:8b:63:f9:f9:9c:6b:12:24:64:
                    28:e5:c9:cc:ee:48:68:97:73:72:cb:65:2a:f5:88:
                    4f:e6:cc:bb:69:20:aa:2f:5b:9b:88:e4:d5:69:48:
                    d6:dd:05:e3:34:ee:d9:c4:aa:0c:c8:8a:1b:69:09:
                    1b:ba:7e:61:b6:4c:31:f6:35:78:0a:f5:c6:28:7c:
                    19:44:cb:02:e2:e3:56:90:50:b9:67:31:2c:38:93:
                    56:f9:34:c2:10:b3:c0:e0:f6:9c:0c:83:10:58:7f:
                    bf:e8:f6:77:37:aa:31:f7:40:74:af:c7:d5:ea:24:
                    f5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6A:9B:29:01:A1:41:55:4C:98:AD:38:10:99:D4:81:25:AC:95:2D
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS26006.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:a00::/40
                  2a05:dfc1:6b00::/40
                  2a05:dfc1:9700::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:87:5d:d1:ed:3e:95:af:ec:f9:96:ae:21:62:cb:54:44:42:
         56:f8:5a:6a:b5:44:fa:6a:ba:d9:38:a6:26:74:79:4b:32:7b:
         03:78:4f:55:aa:6e:69:63:ac:6e:17:6d:a8:13:d1:8a:13:95:
         27:72:69:da:6c:bd:cd:cd:2e:e9:7d:ba:d8:9a:c1:c3:d4:86:
         05:1f:e9:97:43:bb:38:1b:f3:99:55:ba:a6:e9:a9:0a:7b:9a:
         cb:2c:a4:ed:1e:82:c7:d3:0e:d6:77:94:fc:db:7a:77:c0:a0:
         6f:7c:ab:23:25:7a:f9:bc:41:6b:1e:87:ba:8e:0a:75:c6:9b:
         76:64:d2:45:4c:13:b4:2f:74:ce:50:28:3a:03:ce:23:ba:2c:
         03:e9:aa:28:8c:3c:42:7f:2c:1c:f2:b6:33:e6:de:fa:3f:3f:
         d8:96:07:ff:8f:86:4b:0a:8c:7b:10:6e:a3:14:cd:85:38:8f:
         8d:ea:1f:b2:8d:0f:da:a3:98:2e:30:ea:2c:64:87:9e:59:40:
         55:21:f0:18:fd:1a:09:c6:13:c8:f6:08:76:aa:74:44:ca:8b:
         89:28:97:c5:14:6a:11:00:ea:0f:b3:8f:5f:ee:4b:30:39:46:
         b2:47:aa:48:24:f6:a6:d5:4d:1a:71:42:fe:7c:07:da:45:64:
         d3:3f:0e:9c
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIUHXYCHqexDzEWpcFRvcQHCaWwN6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDAxMDgyMzQ0MjJaFw0yNTAxMDYyMzQ5MjJaMDMxMTAvBgNV
BAMTKDZCNkE5QjI5MDFBMTQxNTU0Qzk4QUQzODEwOTlENDgxMjVBQzk1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUETkHE0OKfaGnhaVRFujMPdI
XEIssQ7wwxnFLhX2jugEmHR5Fzq8KosLlPzjmatsOuJQsJzyYg5SZ3x2jX0mQQVA
MR40Art9hxf98bEW85J/lZVwXMhGg354nGajB2Jpme3YEz+zrEugmuhZaKzFhdFV
T+SwvFMPhpciJ20UFc1+fo9JXmseXLDO3Itj+fmcaxIkZCjlyczuSGiXc3LLZSr1
iE/mzLtpIKovW5uI5NVpSNbdBeM07tnEqgzIihtpCRu6fmG2TDH2NXgK9cYofBlE
ywLi41aQULlnMSw4k1b5NMIQs8Dg9pwMgxBYf7/o9nc3qjH3QHSvx9XqJPWZAgMB
AAGjggIDMIIB/zAdBgNVHQ4EFgQUa2qbKQGhQVVMmK04EJnUgSWslS0wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjYwMDYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUH
AQcBAf8EIjAgMB4EAgACMBgDBgAqBd/BCgMGACoF38FrAwYAKgXfwZcwDQYJKoZI
hvcNAQELBQADggEBADKHXdHtPpWv7PmWriFiy1REQlb4Wmq1RPpqutk4piZ0eUsy
ewN4T1WqbmljrG4XbagT0YoTlSdyadpsvc3NLul9utiawcPUhgUf6ZdDuzgb85lV
uqbpqQp7mssspO0egsfTDtZ3lPzbenfAoG98qyMlevm8QWseh7qOCnXGm3Zk0kVM
E7QvdM5QKDoDziO6LAPpqiiMPEJ/LBzytjPm3vo/P9iWB/+PhksKjHsQbqMUzYU4
j43qH7KND9qjmC4w6ixkh55ZQFUh8Bj9GgnGE8j2CHaqdETKi4kol8UUahEA6g+z
j1/uSzA5RrJHqkgk9qbVTRpxQv58B9pFZNM/Dpw=
-----END CERTIFICATE-----
Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org