Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51082.roa
File:                     AS51082.roa (raw, json)
Hash identifier:          CkIEsLxdSRWZBYU0YQwumR3R1v3W/B8JQyNftmT9e7I=
Subject key identifier:   AC:5B:5F:C4:51:8C:9D:A7:02:DC:2F:AD:58:CF:3E:1A:8F:6B:F0:69
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       50B8B650659E9330E0672109FA5B0092E9FE9D1E
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51082.roa
Signing time:             Fri 30 Jun 2023 07:06:06 +0000
ROA not before:           Fri 30 Jun 2023 07:01:06 +0000
ROA not after:            Fri 28 Jun 2024 07:06:06 +0000
asID:                     51082
IP address blocks:        2a05:dfc1:6100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b8:b6:50:65:9e:93:30:e0:67:21:09:fa:5b:00:92:e9:fe:9d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jun 30 07:01:06 2023 GMT
            Not After : Jun 28 07:06:06 2024 GMT
        Subject: CN=AC5B5FC4518C9DA702DC2FAD58CF3E1A8F6BF069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:3a:f0:33:4d:13:31:e5:61:f0:83:11:b7:
                    d0:69:06:6d:f6:77:ae:e6:96:00:df:6b:74:64:d0:
                    c5:c1:99:06:49:72:7a:95:5a:e2:47:14:b5:15:a1:
                    8e:84:a5:26:8d:7c:09:71:48:e8:69:02:4f:a7:50:
                    5b:c6:39:c3:83:95:d6:82:50:1f:0f:29:7a:ef:62:
                    f8:fe:34:05:63:48:10:3b:96:4d:1d:48:98:39:d7:
                    31:47:ba:8f:64:ad:53:cc:06:f3:a1:48:f6:cd:13:
                    13:78:f7:21:f2:18:e3:68:d5:24:51:c0:10:84:cb:
                    90:86:13:ed:a8:3b:40:28:2d:c9:66:d1:91:d9:7f:
                    bb:ba:2a:1e:24:62:9a:cf:8c:44:23:35:01:4b:50:
                    3d:5d:5e:c9:ca:95:4e:a5:33:c2:88:4a:6f:c2:2d:
                    ba:b5:a8:1b:c5:17:59:d6:30:9a:79:b7:a4:06:94:
                    fd:f4:27:ce:15:ef:22:61:35:29:4e:48:dd:59:d6:
                    e3:41:08:5c:31:c3:ce:0b:86:f4:3f:37:1a:ff:25:
                    b9:b0:e4:75:f0:c0:6e:6e:81:dc:20:e8:b8:96:e9:
                    4f:26:a3:ee:d1:ce:61:23:bd:16:90:66:1c:74:a2:
                    53:f1:4b:b5:8e:51:6f:6a:d4:71:bd:5c:5c:16:e0:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5B:5F:C4:51:8C:9D:A7:02:DC:2F:AD:58:CF:3E:1A:8F:6B:F0:69
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:1b:9e:5b:96:16:82:3e:fc:68:f2:c0:5d:1e:91:65:fe:59:
         14:86:90:bc:9c:a6:e3:d5:71:82:b6:03:72:e7:dd:20:8d:b3:
         8f:97:3c:1c:05:e5:1f:6d:55:61:bb:4e:12:ab:81:60:b8:ba:
         8e:91:49:e0:65:5d:b5:c2:8b:ae:18:a4:46:9d:52:93:c5:fe:
         cf:a4:57:af:2c:ca:0c:7e:38:43:d7:50:44:39:86:aa:00:80:
         03:64:df:52:b6:c5:90:40:ef:37:ab:65:e1:e7:9e:79:83:9c:
         51:ce:7e:e6:b0:ba:d9:f7:ff:92:dd:2b:b3:f8:69:85:63:88:
         ee:96:10:38:ab:23:b0:10:2c:1e:fc:83:81:6f:2a:f8:21:25:
         b4:23:99:f7:ec:b4:47:cd:2b:3e:85:a3:40:30:03:a4:7e:6b:
         b3:1f:cf:57:53:aa:e0:1b:94:ed:2b:db:24:d9:65:a6:2e:61:
         2f:28:bb:22:37:fa:ab:66:32:ed:e1:e0:84:12:39:35:2c:08:
         97:2c:46:3d:7f:21:29:58:22:26:4a:40:8e:52:5e:4a:63:de:
         42:51:67:a2:b1:53:36:07:0c:f0:6e:d0:e4:1a:a2:e4:32:ec:
         a1:10:f8:1b:e6:a6:75:10:cc:a4:d3:4f:f4:c0:ce:51:b3:38:
         07:b6:54:a7
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUULi2UGWekzDgZyEJ+lsAkun+nR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzA2MzAwNzAxMDZaFw0yNDA2MjgwNzA2MDZaMDMxMTAvBgNV
BAMTKEFDNUI1RkM0NTE4QzlEQTcwMkRDMkZBRDU4Q0YzRTFBOEY2QkYwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwjrwM00TMeVh8IMRt9BpBm32
d67mlgDfa3Rk0MXBmQZJcnqVWuJHFLUVoY6EpSaNfAlxSOhpAk+nUFvGOcODldaC
UB8PKXrvYvj+NAVjSBA7lk0dSJg51zFHuo9krVPMBvOhSPbNExN49yHyGONo1SRR
wBCEy5CGE+2oO0AoLclm0ZHZf7u6Kh4kYprPjEQjNQFLUD1dXsnKlU6lM8KISm/C
Lbq1qBvFF1nWMJp5t6QGlP30J84V7yJhNSlOSN1Z1uNBCFwxw84LhvQ/Nxr/Jbmw
5HXwwG5ugdwg6LiW6U8mo+7RzmEjvRaQZhx0olPxS7WOUW9q1HG9XFwW4LGbAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUrFtfxFGMnacC3C+tWM8+Go9r8GkwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTNTEwODIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BYTANBgkqhkiG9w0BAQsFAAOCAQEAxBue
W5YWgj78aPLAXR6RZf5ZFIaQvJym49VxgrYDcufdII2zj5c8HAXlH21VYbtOEquB
YLi6jpFJ4GVdtcKLrhikRp1Sk8X+z6RXryzKDH44Q9dQRDmGqgCAA2TfUrbFkEDv
N6tl4eeeeYOcUc5+5rC62ff/kt0rs/hphWOI7pYQOKsjsBAsHvyDgW8q+CEltCOZ
9+y0R80rPoWjQDADpH5rsx/PV1Oq4BuU7SvbJNllpi5hLyi7Ijf6q2Yy7eHghBI5
NSwIlyxGPX8hKVgiJkpAjlJeSmPeQlFnorFTNgcM8G7Q5Bqi5DLsoRD4G+amdRDM
pNNP9MDOUbM4B7ZUpw==
-----END CERTIFICATE-----
Generated at Tue May 21 05:34:02 2024 by rpki-client on console-ams.rpki-client.org