Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS50755.roa
File:                     AS50755.roa (raw, json)
Hash identifier:          7jsdJi8xnVdX+gySE06V0bfdkklbHIuhl74XCd0mpvU=
Subject key identifier:   26:AE:4E:C1:6A:70:31:6A:33:56:F6:1E:A8:BD:28:98:38:34:4B:BD
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       56A8E6EA75199AF382B62B1F9EA4727A05D3883D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS50755.roa
Signing time:             Sun 05 Nov 2023 04:06:59 +0000
ROA not before:           Sun 05 Nov 2023 04:01:59 +0000
ROA not after:            Sun 03 Nov 2024 04:06:59 +0000
asID:                     50755
IP address blocks:        2a0a:6040:ed00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a8:e6:ea:75:19:9a:f3:82:b6:2b:1f:9e:a4:72:7a:05:d3:88:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:01:59 2023 GMT
            Not After : Nov  3 04:06:59 2024 GMT
        Subject: CN=26AE4EC16A70316A3356F61EA8BD289838344BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:4b:28:f9:d1:00:ef:4c:b0:5b:cb:5c:f1:
                    db:86:23:7a:85:67:7d:ec:0b:f1:04:44:87:27:00:
                    8b:5c:87:1d:eb:5b:65:57:14:8b:f8:69:50:fb:17:
                    e4:72:10:cd:b9:b1:f6:2f:15:a9:b6:d9:d1:6b:16:
                    59:3a:9a:0a:43:42:e0:ca:69:78:1a:d2:df:d1:dc:
                    b8:dc:fb:68:b1:80:61:7b:a3:3c:5c:a8:63:0a:66:
                    6f:3a:8d:fc:f0:ca:6a:10:61:f1:8e:10:19:e4:a8:
                    3c:45:fd:a3:52:54:51:82:37:a4:54:3c:ad:e1:c8:
                    0a:17:51:a6:c5:37:7d:ec:b3:84:9a:33:bd:08:8d:
                    a7:96:53:95:c3:e0:05:d7:b7:e4:76:42:53:df:22:
                    dc:9b:f4:97:81:75:3a:09:fa:4d:24:f7:e6:03:8e:
                    6d:06:40:28:10:d6:b0:c9:a1:d4:3f:bb:88:97:91:
                    d6:e4:67:02:92:30:7e:ee:11:c1:1f:c7:f5:23:b1:
                    4f:78:c2:83:2b:0a:f0:4e:29:9a:42:ef:fd:49:63:
                    14:f0:b8:a0:5a:c0:fb:a0:4e:c9:d2:43:34:48:e9:
                    28:44:07:b7:df:1e:e1:38:93:87:c4:3b:e4:59:b4:
                    b5:53:62:fa:a9:3b:c4:03:bc:1c:d4:97:a1:f5:b2:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AE:4E:C1:6A:70:31:6A:33:56:F6:1E:A8:BD:28:98:38:34:4B:BD
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS50755.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ed00::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:12:a1:7f:a3:c5:44:56:2d:2f:6e:4a:f8:a1:24:f6:5b:c4:
         e8:fb:61:15:12:f7:42:db:83:10:bd:6b:45:0e:02:68:b2:d6:
         2d:37:93:51:ca:05:2a:12:42:09:04:e0:1b:95:b9:3e:c8:e6:
         9c:eb:86:33:1e:fc:d6:26:17:53:86:01:3f:4f:d1:a9:ab:5b:
         14:3f:2f:83:88:95:c3:12:05:63:d0:3e:f7:9e:c6:3c:17:5c:
         3c:a9:96:ad:8a:b1:a7:21:6d:35:9d:7a:3a:18:07:5c:f3:dc:
         e5:09:e3:8f:ef:dc:6e:74:0e:98:27:cd:07:1a:12:b6:d7:1b:
         59:35:b5:e6:0b:54:20:12:6a:35:eb:f9:a4:32:b1:a4:f1:55:
         7b:91:fa:a9:f9:41:f8:82:a1:62:c3:3a:da:84:83:2e:52:9b:
         7b:d7:b3:ae:d6:de:40:3b:dd:b9:30:e8:1e:c0:79:c0:58:7e:
         84:31:a1:61:4d:f9:b7:90:f9:be:fa:15:85:01:fb:f3:6e:cd:
         71:ba:a5:f1:23:8f:e5:89:a6:fe:2f:71:ed:37:05:5e:79:f9:
         f1:76:4a:b6:ea:fe:79:19:c0:14:79:60:ce:a3:6f:f9:a3:fb:
         ab:f6:50:93:66:aa:b8:f4:70:3c:78:c5:28:79:d5:ac:62:87:
         75:e1:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org