Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS50104.roa
File:                     AS50104.roa (raw, json)
Hash identifier:          G9R9qSUVaHh2ELuH5v0n30GZBOGZ3fG7cZs5V+sU5hs=
Subject key identifier:   E9:C8:B1:EA:6E:B1:59:88:BB:5E:D9:FE:D2:8A:4F:80:52:B0:68:DC
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2838492B94121F6C98BD4FB6D1C87ED56E81FC1E
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS50104.roa
Signing time:             Sun 06 Oct 2024 04:44:55 +0000
ROA not before:           Sun 06 Oct 2024 04:39:55 +0000
ROA not after:            Sun 05 Oct 2025 04:44:55 +0000
asID:                     50104
IP address blocks:        2a0a:6040:4400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:38:49:2b:94:12:1f:6c:98:bd:4f:b6:d1:c8:7e:d5:6e:81:fc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:39:55 2024 GMT
            Not After : Oct  5 04:44:55 2025 GMT
        Subject: CN=E9C8B1EA6EB15988BB5ED9FED28A4F8052B068DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:f6:97:03:a1:cd:a8:a1:68:53:6c:8f:d9:
                    d8:2e:28:84:6d:83:51:3a:dc:20:12:d6:07:13:19:
                    7b:65:7b:3c:9b:89:79:cb:6c:e0:b9:74:c5:5d:5c:
                    99:62:d6:ab:0e:a9:cc:86:73:e6:f0:15:1d:bf:bc:
                    27:d5:0d:9e:61:5f:d8:69:e5:f9:0d:e9:02:2e:55:
                    36:c6:a9:6a:15:32:cb:1c:a1:30:56:c8:49:ab:db:
                    25:2e:94:a9:db:c3:93:4c:97:9d:da:f4:35:59:16:
                    8c:b2:68:a5:7b:d4:9a:b6:46:f4:92:58:1e:57:e9:
                    e5:85:c2:39:ff:0e:ec:27:79:1b:6d:6e:0f:42:ae:
                    d1:46:5a:45:08:e4:9c:b9:53:85:3b:7d:6f:b8:b7:
                    29:f3:66:28:c8:6b:5a:5e:69:71:c1:6e:c9:2c:e1:
                    d3:91:4b:f7:de:a2:91:c7:08:d4:07:39:59:6e:3b:
                    0b:89:87:c8:ca:3b:2a:36:42:01:5f:ed:51:84:4c:
                    be:fe:91:d9:71:37:a0:d7:36:0d:00:73:1c:95:0d:
                    a8:3e:29:48:cc:cd:e7:9a:ec:57:ee:4f:27:3c:50:
                    7b:bd:de:12:f4:3e:ec:84:9a:31:3a:b9:87:3b:81:
                    5f:d6:76:b3:aa:ef:ba:e1:dc:b4:48:1c:80:d1:46:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C8:B1:EA:6E:B1:59:88:BB:5E:D9:FE:D2:8A:4F:80:52:B0:68:DC
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS50104.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:57:82:7b:5d:49:6e:8b:8e:77:2e:3a:7d:ad:57:78:51:1c:
         bd:9b:40:00:d0:f2:36:1c:c3:c5:f0:ad:aa:a2:a5:3c:24:b1:
         be:10:ec:2b:d3:ed:2d:4e:e1:bd:08:af:dc:b1:1b:60:00:6d:
         c8:fb:7b:96:dd:7d:af:ae:c1:62:e9:1d:0d:e5:a3:8b:d9:b2:
         4b:49:ee:3b:f9:4f:1e:a6:74:d3:31:54:19:5e:59:35:cb:56:
         d3:da:1d:0f:a3:ec:10:64:f6:46:54:3d:2f:69:65:97:03:72:
         88:83:c9:0e:0a:f5:2e:b8:89:1d:50:8b:ee:56:ae:99:86:17:
         2f:2b:1e:60:77:0b:08:cc:ab:8f:fd:be:a2:a9:08:e0:45:9a:
         72:aa:30:d0:b4:eb:05:3e:99:d1:e0:d9:40:32:7a:78:05:25:
         1b:76:df:29:c7:8b:7c:11:f7:2b:6e:18:3c:23:c5:72:61:d1:
         c4:e8:94:fa:2c:13:8e:4f:80:92:a2:b0:32:fc:67:70:28:8f:
         40:03:c3:c7:b7:4e:a3:e1:58:08:1e:76:39:dd:0b:94:30:ce:
         16:81:d8:e7:d6:ab:47:04:76:f3:96:a1:10:97:2e:9b:2d:2a:
         fc:16:ae:60:f8:d7:30:32:10:b1:64:a1:65:e0:96:77:e6:df:
         24:49:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org