Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51019.roa
File:                     AS51019.roa (raw, json)
Hash identifier:          uadE1Y1Eu2MLw5Fv7mBNkiQ3uEzqa98upoWnWtA6xoo=
Subject key identifier:   E8:B1:AE:F4:B1:D9:C1:0B:82:9C:50:06:CD:09:6B:F9:C8:AA:3D:FA
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       29ADBE63F1FF90673CF31E6035D11AB111A9DB73
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51019.roa
Signing time:             Mon 25 Mar 2024 02:02:41 +0000
ROA not before:           Mon 25 Mar 2024 01:57:41 +0000
ROA not after:            Mon 24 Mar 2025 02:02:41 +0000
asID:                     51019
IP address blocks:        2a05:dfc1:b00f::/48 maxlen: 48
                          2a05:dfc1:ff00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ad:be:63:f1:ff:90:67:3c:f3:1e:60:35:d1:1a:b1:11:a9:db:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Mar 25 01:57:41 2024 GMT
            Not After : Mar 24 02:02:41 2025 GMT
        Subject: CN=E8B1AEF4B1D9C10B829C5006CD096BF9C8AA3DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:15:ea:b1:ae:78:7e:28:87:a9:fa:b6:0d:ff:
                    c1:b5:67:59:af:73:2a:e6:c9:04:84:57:92:b4:f3:
                    74:be:6b:3b:5d:a7:1b:94:41:1d:37:3a:37:bf:de:
                    88:0a:ed:55:c7:6f:78:ad:1c:5b:82:f2:f2:56:ba:
                    b6:9b:e2:df:cf:97:ef:2f:b3:fc:a8:22:46:91:00:
                    da:c5:d1:11:ab:5b:a3:be:23:7e:b7:fa:c5:6a:18:
                    86:6d:bb:77:96:9b:54:8f:21:10:fb:ce:ae:20:00:
                    f3:34:12:01:c5:9a:59:80:88:b1:47:7c:67:35:5d:
                    a8:07:e5:b0:80:47:29:4f:5c:f7:cd:93:ee:da:58:
                    ae:0f:ef:cf:10:f2:f6:60:7d:d3:c3:52:b0:da:34:
                    77:6f:22:76:3e:b2:0d:5e:ef:18:40:f3:38:88:b8:
                    ba:5e:ee:86:1a:45:3c:31:ea:12:ce:6f:ba:d7:08:
                    e7:e6:0a:ff:cd:3a:44:4e:38:82:7d:47:34:eb:40:
                    78:80:f0:38:5a:55:0c:70:e1:c4:cc:c8:44:bf:5e:
                    67:a9:12:1e:cf:b1:c4:cf:08:92:8d:54:cd:b7:ec:
                    aa:84:9e:e1:38:19:57:51:62:a6:d6:ca:3a:1e:5f:
                    77:34:f1:eb:57:60:4a:4b:1f:3d:49:bd:5d:3e:e7:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B1:AE:F4:B1:D9:C1:0B:82:9C:50:06:CD:09:6B:F9:C8:AA:3D:FA
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:b00f::/48
                  2a05:dfc1:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:1a:ea:9a:bc:c7:d0:28:a9:33:72:d3:ca:02:83:45:3c:58:
         a3:20:66:26:e5:f4:78:76:86:08:0f:d3:03:2a:d3:b0:75:94:
         59:f5:7a:04:40:58:b5:f4:2a:b7:0b:55:8d:15:c6:78:76:6d:
         28:35:23:0c:7f:71:17:39:8a:6d:cd:08:0c:10:9f:59:c7:c0:
         ae:4b:73:f6:cd:79:57:96:6f:10:cc:a7:e6:e0:08:50:b0:2d:
         e2:26:5c:46:22:d3:87:e5:74:9a:52:a9:c9:6d:92:2f:bb:62:
         88:64:0d:2e:e4:aa:72:6f:0d:88:14:28:a7:46:d5:3f:fe:4e:
         00:06:8a:cc:ef:05:9d:22:01:ba:af:e0:f0:dd:ff:58:a1:d2:
         28:a2:00:f7:24:42:fa:c8:90:39:a0:95:e3:cd:71:f0:e1:12:
         2d:e4:90:bb:ed:a7:03:e7:4f:43:26:15:36:cb:37:bd:8d:5e:
         87:8c:7e:75:fa:f3:88:f3:76:c0:bc:c6:ce:2f:cf:3f:ee:3b:
         1f:9d:a5:3d:4d:7d:fd:91:d2:26:d0:a9:78:a5:f9:78:3c:01:
         c0:02:e5:93:ed:ee:4e:40:64:26:17:17:94:5a:c5:23:a1:71:
         89:86:de:ab:a3:a4:19:58:c8:bd:c9:c7:58:0a:00:7e:f7:d8:
         82:75:4f:ca
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUKa2+Y/H/kGc88x5gNdEasRGp23MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDAzMjUwMTU3NDFaFw0yNTAzMjQwMjAyNDFaMDMxMTAvBgNV
BAMTKEU4QjFBRUY0QjFEOUMxMEI4MjlDNTAwNkNEMDk2QkY5QzhBQTNERkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjFeqxrnh+KIep+rYN/8G1Z1mv
cyrmyQSEV5K083S+aztdpxuUQR03Oje/3ogK7VXHb3itHFuC8vJWurab4t/Pl+8v
s/yoIkaRANrF0RGrW6O+I363+sVqGIZtu3eWm1SPIRD7zq4gAPM0EgHFmlmAiLFH
fGc1XagH5bCARylPXPfNk+7aWK4P788Q8vZgfdPDUrDaNHdvInY+sg1e7xhA8ziI
uLpe7oYaRTwx6hLOb7rXCOfmCv/NOkROOIJ9RzTrQHiA8DhaVQxw4cTMyES/Xmep
Eh7PscTPCJKNVM237KqEnuE4GVdRYqbWyjoeX3c08etXYEpLHz1JvV0+51BTAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQU6LGu9LHZwQuCnFAGzQlr+ciqPfowHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTNTEwMTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH
AQcBAf8EGzAZMBcEAgACMBEDBwAqBd/BsA8DBgAqBd/B/zANBgkqhkiG9w0BAQsF
AAOCAQEARxrqmrzH0CipM3LTygKDRTxYoyBmJuX0eHaGCA/TAyrTsHWUWfV6BEBY
tfQqtwtVjRXGeHZtKDUjDH9xFzmKbc0IDBCfWcfArktz9s15V5ZvEMyn5uAIULAt
4iZcRiLTh+V0mlKpyW2SL7tiiGQNLuSqcm8NiBQop0bVP/5OAAaKzO8FnSIBuq/g
8N3/WKHSKKIA9yRC+siQOaCV481x8OESLeSQu+2nA+dPQyYVNss3vY1eh4x+dfrz
iPN2wLzGzi/PP+47H52lPU19/ZHSJtCpeKX5eDwBwALlk+3uTkBkJhcXlFrFI6Fx
iYbeq6OkGVjIvcnHWAoAfvfYgnVPyg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:31 2024 by rpki-client on console-fra.rpki-client.org