Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS50104.roa
File:                     AS50104.roa (raw, json)
Hash identifier:          KIn6Bd1dQXOYC+0jyC/hTZEeRuPLqzV457qjFitdPLU=
Subject key identifier:   20:BE:70:88:8C:FE:61:5A:47:E8:E6:03:96:B9:B3:F2:2C:7C:5A:5D
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       661A7A13BFDD13A83D10ED0D888180197AA4C24D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS50104.roa
Signing time:             Sun 05 Nov 2023 04:07:11 +0000
ROA not before:           Sun 05 Nov 2023 04:02:11 +0000
ROA not after:            Sun 03 Nov 2024 04:07:11 +0000
asID:                     50104
IP address blocks:        2a0a:6040:4400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1a:7a:13:bf:dd:13:a8:3d:10:ed:0d:88:81:80:19:7a:a4:c2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:11 2023 GMT
            Not After : Nov  3 04:07:11 2024 GMT
        Subject: CN=20BE70888CFE615A47E8E60396B9B3F22C7C5A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:ee:9c:83:5d:58:33:36:a4:d6:0d:9d:90:
                    36:06:5a:34:47:5d:45:bc:c6:6c:bd:d9:d9:33:3b:
                    f3:6d:9a:0f:7e:b2:e0:e4:21:3c:e2:c2:3e:ba:95:
                    43:e1:0b:02:66:69:7d:00:21:5f:38:a7:69:37:00:
                    7c:2b:09:4f:5f:a0:6c:e3:a1:4e:c2:27:1f:7f:a7:
                    76:12:32:15:bb:0f:39:00:be:72:21:7c:c3:82:63:
                    d6:80:a5:0c:16:46:d7:70:43:9e:6e:5e:77:55:b2:
                    1b:69:84:cd:32:73:c2:1e:d0:52:95:7d:7d:1e:fa:
                    0f:54:a6:1d:ac:16:71:a0:a4:ac:aa:95:13:b3:0f:
                    03:18:51:51:cf:5e:fb:50:73:8a:0f:18:48:04:a6:
                    ff:83:66:73:2b:b9:cc:94:31:e2:15:27:65:e3:72:
                    f5:b0:47:de:3a:1e:07:16:22:30:59:86:8b:5c:68:
                    28:a1:f8:e4:64:5c:55:d1:95:70:8f:2c:60:83:4a:
                    5b:29:e1:3c:e3:18:db:f7:26:8a:b2:d6:8e:3e:a0:
                    46:1d:6a:ab:85:93:fd:d7:b6:c8:28:d4:e4:9f:ab:
                    9b:bb:8e:12:ac:f8:c9:69:2f:31:d8:94:0a:bf:6c:
                    63:7f:7e:66:c8:4e:27:95:22:1a:d9:1c:59:f7:d5:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:70:88:8C:FE:61:5A:47:E8:E6:03:96:B9:B3:F2:2C:7C:5A:5D
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS50104.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:81:21:88:a8:02:26:4c:18:b6:ba:24:cf:ba:6c:95:56:10:
         2a:3d:95:9a:bc:4a:cb:fe:ed:96:e0:42:4c:2e:c6:2a:51:2d:
         bd:d4:79:02:73:de:f0:50:76:fa:91:5a:30:bb:58:47:d9:5c:
         24:b1:eb:ed:86:55:02:5c:74:bb:ba:7b:68:fd:d1:35:22:bd:
         90:d7:79:2b:5c:30:8a:45:f2:5e:2c:0a:b1:19:99:50:68:e3:
         41:43:43:ee:9a:86:b8:90:b7:2f:61:5c:30:7d:67:e5:4f:b0:
         b3:5f:04:e5:b9:17:be:1b:f8:83:a3:ee:69:89:6b:79:f1:11:
         26:09:04:5a:b0:f7:63:cd:d2:40:ad:fc:ca:3c:2f:7b:f2:e0:
         19:0e:f4:ef:a8:29:2c:b1:43:7a:c0:02:b7:b9:bf:1e:98:98:
         b3:66:75:4f:4a:a1:d5:41:78:d6:d3:74:59:98:4d:17:f5:bd:
         a9:ff:9d:7d:5a:ca:29:96:c4:b4:37:fd:93:3a:46:76:50:25:
         19:c8:e1:ef:43:7f:21:71:d9:9f:cf:01:94:3b:9c:39:19:fd:
         13:52:1d:69:3f:c0:71:55:e0:cd:dd:71:da:3a:f3:64:0a:45:
         f6:22:33:e1:d0:da:1b:b8:c8:0d:43:91:0e:60:64:b2:b3:5b:
         14:c6:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 04:45:07 2024 by rpki-client on console-fra.rpki-client.org