Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49105.roa
File:                     AS49105.roa (raw, json)
Hash identifier:          m8xeaS82G1DRSCX5O1aFc0V7oO7n1SgMtlsxmlhY1Zg=
Subject key identifier:   53:F8:D3:73:46:A2:A0:91:5B:D7:78:87:86:7A:45:C2:C0:BF:1C:A6
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       74273713F66E6B52D2D7C60B9EB155CB269C7C23
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49105.roa
Signing time:             Sun 06 Oct 2024 04:45:03 +0000
ROA not before:           Sun 06 Oct 2024 04:40:03 +0000
ROA not after:            Sun 05 Oct 2025 04:45:03 +0000
asID:                     49105
IP address blocks:        2a0a:6040:7900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:27:37:13:f6:6e:6b:52:d2:d7:c6:0b:9e:b1:55:cb:26:9c:7c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:03 2024 GMT
            Not After : Oct  5 04:45:03 2025 GMT
        Subject: CN=53F8D37346A2A0915BD77887867A45C2C0BF1CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:f9:77:07:60:d6:74:88:66:6a:78:a1:2b:
                    9b:f1:d8:f4:31:72:37:b2:50:8a:c4:53:0c:9f:ee:
                    e0:cb:9d:27:8b:2f:79:61:e6:e0:f0:5d:20:ed:39:
                    ce:85:8a:36:90:0c:46:aa:cd:3e:f1:88:50:6c:e9:
                    9b:3a:92:3b:dc:b8:c6:e4:6a:39:93:dd:75:c8:78:
                    80:01:18:5b:1e:ec:8c:10:fb:da:c5:9f:73:18:ed:
                    18:89:28:90:7f:c6:1a:82:54:0e:be:39:0d:ac:24:
                    d2:fc:c5:c9:d3:5d:cc:66:ca:04:be:fe:39:6a:93:
                    34:6f:39:d1:80:69:9f:94:b6:bb:4d:58:0b:d9:04:
                    9a:72:77:18:ae:ee:6e:2b:2f:e6:50:92:9c:cf:52:
                    cd:31:97:8d:56:4a:45:2f:38:ac:ea:7d:b2:c5:49:
                    03:24:04:b6:3a:3e:8f:29:1c:65:0f:9e:ea:0f:42:
                    06:8c:dd:7e:e1:ee:5c:8a:91:dd:cb:93:6d:d1:b5:
                    cc:14:6d:b9:aa:64:88:b8:84:41:b9:5d:b3:62:61:
                    2d:a2:05:1c:a5:f5:33:b8:67:4f:39:18:76:3d:66:
                    37:9e:29:47:32:99:d2:98:fc:1a:0b:e7:2c:b3:7d:
                    73:57:59:10:1c:16:cf:62:b5:2a:ed:55:ff:0b:ce:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F8:D3:73:46:A2:A0:91:5B:D7:78:87:86:7A:45:C2:C0:BF:1C:A6
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:7900::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:4f:11:1e:18:70:07:58:75:b1:64:f1:14:bb:08:65:38:20:
         4e:df:e5:0f:18:a6:b1:b9:08:dd:49:63:16:40:84:fa:5c:ed:
         dc:69:3a:aa:95:4e:ec:9c:9a:be:d7:c1:47:0f:a7:03:5d:62:
         bd:4f:ce:ad:90:ca:ba:f3:3e:2d:2b:9b:4a:ed:a8:ba:35:7d:
         2e:72:d1:e1:83:69:ea:9b:88:1e:b2:15:01:83:36:11:54:c8:
         03:5e:57:76:6d:76:8c:d2:2d:ef:be:43:1c:c5:72:ad:4d:15:
         b6:f3:46:a8:36:ec:68:a1:c4:ad:d6:23:20:46:f3:b1:07:94:
         d4:7a:1f:bd:7e:92:f6:db:36:db:9b:f2:f9:0d:83:87:89:fa:
         b8:9d:53:e8:3f:f0:b8:6a:4d:09:25:52:a0:47:c8:da:5b:b3:
         70:92:e0:3b:56:c3:2c:81:b8:61:a6:dc:40:4f:56:e8:ee:e0:
         67:ee:e5:5f:bc:6b:c9:f5:33:32:e4:61:2a:1d:61:73:16:09:
         cb:33:c8:22:74:cf:50:bb:94:1a:2a:d4:e8:ba:3a:5a:6b:f9:
         2c:30:16:cd:28:2c:48:c8:c0:d4:59:ce:a4:8c:5b:8f:0a:fb:
         34:b7:bd:b4:2f:40:5d:c0:67:96:74:58:ee:3d:a2:af:48:ac:
         46:07:96:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org