Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44876.roa
File:                     AS44876.roa (raw, json)
Hash identifier:          BdS8Iym+jgqtYz2AMmD/Q2E5Gj8dXJ+d8CMdfbrfm1M=
Subject key identifier:   AB:E0:A0:D7:24:D2:A6:9A:72:16:29:44:D5:31:7E:BD:6D:FD:BC:F4
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       73AE7C6D043F12B91E7559E102AF472898F977CD
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44876.roa
Signing time:             Thu 02 Nov 2023 22:35:24 +0000
ROA not before:           Thu 02 Nov 2023 22:30:24 +0000
ROA not after:            Thu 31 Oct 2024 22:35:24 +0000
asID:                     44876
IP address blocks:        2a05:dfc1:ac0::/42 maxlen: 48
                          2a05:dfc1:9780::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ae:7c:6d:04:3f:12:b9:1e:75:59:e1:02:af:47:28:98:f9:77:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  2 22:30:24 2023 GMT
            Not After : Oct 31 22:35:24 2024 GMT
        Subject: CN=ABE0A0D724D2A69A72162944D5317EBD6DFDBCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:8d:8e:0b:31:00:07:71:1a:79:0b:b0:6a:
                    89:b0:37:31:5b:94:d0:31:8c:c9:9e:f1:22:0f:fa:
                    3a:2a:24:a4:43:07:ba:48:50:b4:61:53:3c:b1:df:
                    ce:6b:45:d2:b2:b8:f6:9a:e9:22:85:eb:45:f9:25:
                    15:ae:cb:1c:0d:f5:7b:39:85:8a:b6:5b:26:a3:99:
                    bf:9a:45:42:2b:41:13:79:72:a8:9e:51:ba:6d:c7:
                    64:04:b1:c3:92:7b:ef:07:7b:08:9f:44:39:0c:0d:
                    85:42:b4:8e:82:43:35:97:b3:91:2d:a8:a1:95:ee:
                    58:37:30:66:3c:9c:5e:bc:2f:3b:de:b8:28:d2:aa:
                    bd:dc:6b:c2:a3:96:92:4f:cc:c7:99:82:2f:d4:0d:
                    62:2b:e6:47:f3:12:47:2c:71:a5:e2:5c:3a:a3:0b:
                    53:77:b5:36:82:1e:7b:c9:3e:c2:74:a0:e5:c0:0c:
                    aa:8c:35:d8:e2:5e:10:02:ba:6c:9e:2a:44:c5:03:
                    5b:09:eb:4e:9c:45:90:2b:05:9d:c0:f5:77:98:6c:
                    8f:29:04:cc:9a:05:d6:ce:4a:33:c4:0e:84:f9:47:
                    07:8a:cd:09:fa:1c:05:84:a1:8c:d8:84:a4:05:e7:
                    a2:7b:70:99:f4:ba:bf:8e:81:0b:18:b2:93:2b:34:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E0:A0:D7:24:D2:A6:9A:72:16:29:44:D5:31:7E:BD:6D:FD:BC:F4
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44876.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:ac0::/42
                  2a05:dfc1:9780::/42

    Signature Algorithm: sha256WithRSAEncryption
         51:21:3b:2c:08:78:b3:cd:4c:8f:27:37:5e:22:83:6a:6b:08:
         a4:08:02:83:36:ef:7f:4a:76:e7:a1:1c:c4:37:fc:97:93:a2:
         cc:91:3c:fe:64:77:01:02:45:f7:81:72:b5:8d:d1:2b:41:95:
         51:57:b4:9c:92:87:7b:3d:7e:0e:28:64:20:9c:16:13:6b:79:
         2f:0c:92:a4:bb:e6:ee:e2:a2:a7:8f:4a:ec:ca:ee:7d:95:10:
         51:40:ce:fa:cd:93:d5:d1:d4:0a:6f:b2:88:57:91:81:a4:d1:
         da:a9:48:d4:56:e7:1a:81:28:bd:b8:1a:22:3d:b0:af:0f:44:
         7c:08:e9:26:e9:e6:96:fd:cb:91:f4:a9:33:6d:5e:de:16:e0:
         bd:71:36:28:fa:5b:a6:cc:ee:73:d9:6d:80:11:cb:a8:1b:b9:
         a2:92:69:58:5e:3f:ef:2c:d1:62:df:bb:17:74:c9:32:21:f7:
         c5:dd:3b:a6:48:06:35:af:b0:dd:cd:bb:92:71:55:7b:96:51:
         ea:b6:97:a2:37:9f:db:38:e5:df:06:04:23:b8:8d:46:3c:7a:
         ca:06:d7:be:45:b6:bb:f3:43:c3:47:2d:ec:4e:76:98:e7:ba:
         78:4e:f7:25:e6:a9:41:f7:55:19:d5:89:1b:e5:a1:76:d8:c9:
         d6:79:d2:c0
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUc658bQQ/ErkedVnhAq9HKJj5d80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzExMDIyMjMwMjRaFw0yNDEwMzEyMjM1MjRaMDMxMTAvBgNV
BAMTKEFCRTBBMEQ3MjREMkE2OUE3MjE2Mjk0NEQ1MzE3RUJENkRGREJDRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbY2OCzEAB3EaeQuwaomwNzFb
lNAxjMme8SIP+joqJKRDB7pIULRhUzyx385rRdKyuPaa6SKF60X5JRWuyxwN9Xs5
hYq2Wyajmb+aRUIrQRN5cqieUbptx2QEscOSe+8HewifRDkMDYVCtI6CQzWXs5Et
qKGV7lg3MGY8nF68LzveuCjSqr3ca8KjlpJPzMeZgi/UDWIr5kfzEkcscaXiXDqj
C1N3tTaCHnvJPsJ0oOXADKqMNdjiXhACumyeKkTFA1sJ606cRZArBZ3A9XeYbI8p
BMyaBdbOSjPEDoT5RweKzQn6HAWEoYzYhKQF56J7cJn0ur+OgQsYspMrNMQzAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUq+Cg1yTSpppyFilE1TF+vW39vPQwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTNDQ4NzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH
AQcBAf8EHDAaMBgEAgACMBIDBwYqBd/BCsADBwYqBd/Bl4AwDQYJKoZIhvcNAQEL
BQADggEBAFEhOywIeLPNTI8nN14ig2prCKQIAoM2739KduehHMQ3/JeTosyRPP5k
dwECRfeBcrWN0StBlVFXtJySh3s9fg4oZCCcFhNreS8MkqS75u7ioqePSuzK7n2V
EFFAzvrNk9XR1ApvsohXkYGk0dqpSNRW5xqBKL24GiI9sK8PRHwI6Sbp5pb9y5H0
qTNtXt4W4L1xNij6W6bM7nPZbYARy6gbuaKSaVheP+8s0WLfuxd0yTIh98XdO6ZI
BjWvsN3Nu5JxVXuWUeq2l6I3n9s45d8GBCO4jUY8esoG175FtrvzQ8NHLexOdpjn
unhO9yXmqUH3VRnViRvloXbYydZ50sA=
-----END CERTIFICATE-----
Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org