Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51082.roa
File:                     AS51082.roa (raw, json)
Hash identifier:          ODTb5qO2xokc/CW5a4J/7TLdf0F5U99oAtD4mqhCIro=
Subject key identifier:   1E:E3:E3:20:80:4C:08:24:EA:25:5F:E3:A9:B3:79:EE:C3:F2:2D:6B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       610AA5D094128FA40C1CE66E69034AD7CF59D0B4
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51082.roa
Signing time:             Fri 31 May 2024 07:59:47 +0000
ROA not before:           Fri 31 May 2024 07:54:47 +0000
ROA not after:            Fri 30 May 2025 07:59:47 +0000
asID:                     51082
IP address blocks:        2a05:dfc1:6100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0a:a5:d0:94:12:8f:a4:0c:1c:e6:6e:69:03:4a:d7:cf:59:d0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: May 31 07:54:47 2024 GMT
            Not After : May 30 07:59:47 2025 GMT
        Subject: CN=1EE3E320804C0824EA255FE3A9B379EEC3F22D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4a:9d:0b:74:86:d2:9e:44:ec:1e:49:ad:06:
                    e5:57:ee:9f:2d:3b:e9:c2:6e:39:55:50:dd:a4:5c:
                    a4:43:aa:5e:ea:3b:f3:b8:d5:fd:46:47:03:6b:e9:
                    e3:07:91:67:e9:88:d3:d0:a5:25:7b:d7:0b:54:17:
                    6b:b8:aa:1c:a7:7b:a6:5f:52:e7:85:ac:38:ea:4a:
                    26:d6:9f:5d:8b:3f:61:01:0a:33:69:e4:4a:1a:86:
                    87:98:fb:4b:05:58:9f:63:15:35:29:45:89:d7:83:
                    50:e1:a4:35:94:f2:51:6b:ee:f0:b4:6b:f2:34:dc:
                    71:5a:c6:a1:e9:2d:fa:be:ca:1b:41:d3:b8:ed:62:
                    4a:cf:86:4f:9d:0e:8d:56:fe:d2:91:d1:09:e9:e2:
                    61:1d:8b:e3:f8:58:fe:36:0a:0d:8a:e9:20:7e:80:
                    b9:a1:39:ed:35:e0:41:92:8f:ea:c3:d3:71:e5:9a:
                    1d:b5:7f:80:fb:fb:0f:fb:5e:ad:ca:28:13:89:49:
                    37:b2:d4:5a:f1:45:ce:40:1f:6c:a7:e2:7e:08:f9:
                    4c:8b:4b:d5:4e:ef:4e:77:d7:2c:14:c5:38:56:74:
                    4c:0d:ac:0b:c0:b8:a6:52:82:9e:ba:71:1b:4e:49:
                    b4:60:8b:ea:3f:b4:f8:d1:44:b4:a9:74:3f:13:2d:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:E3:20:80:4C:08:24:EA:25:5F:E3:A9:B3:79:EE:C3:F2:2D:6B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:be:e9:4d:3a:ca:05:da:d0:ed:5a:ce:9f:60:ba:bf:ff:
         bb:6a:25:a7:4c:3a:90:7f:96:64:7a:73:5f:4d:b0:5f:25:cc:
         6d:3a:23:9b:99:ad:09:35:74:04:4d:40:dd:9f:94:9f:c2:d1:
         8e:d8:9f:8e:da:05:ba:08:ab:c3:51:39:10:81:d3:2b:d6:28:
         62:22:46:44:87:14:47:3c:56:6f:e5:0e:e1:77:6b:49:40:6d:
         67:36:59:84:c6:27:92:0c:30:ee:a3:b0:da:ab:97:d7:49:43:
         1d:7c:76:f6:81:7c:f4:ef:c4:c3:84:f1:d7:4b:9f:a3:f8:e2:
         dc:fc:09:ee:28:d8:05:fb:4e:1a:d2:cd:ec:1e:04:56:92:54:
         be:08:8e:3c:69:e2:ab:5c:b5:32:fa:6c:d9:d8:d9:d8:7f:bb:
         49:9c:8f:35:2d:38:1f:6a:64:43:b6:c3:44:f2:bf:d5:41:95:
         b5:69:8f:de:f6:01:86:b8:19:09:60:98:3f:8c:e3:a6:6b:28:
         d0:3e:45:1e:65:53:b9:ac:55:be:67:28:93:84:06:13:1b:97:
         91:0f:c0:11:90:cb:85:81:e1:c6:3d:81:24:7b:69:8e:75:16:
         64:ec:ae:84:2e:bf:c3:57:09:b4:41:3b:ef:5e:78:2e:e8:95:
         70:94:b1:51
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUYQql0JQSj6QMHOZuaQNK189Z0LQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDA1MzEwNzU0NDdaFw0yNTA1MzAwNzU5NDdaMDMxMTAvBgNV
BAMTKDFFRTNFMzIwODA0QzA4MjRFQTI1NUZFM0E5QjM3OUVFQzNGMjJENkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSp0LdIbSnkTsHkmtBuVX7p8t
O+nCbjlVUN2kXKRDql7qO/O41f1GRwNr6eMHkWfpiNPQpSV71wtUF2u4qhyne6Zf
UueFrDjqSibWn12LP2EBCjNp5EoahoeY+0sFWJ9jFTUpRYnXg1DhpDWU8lFr7vC0
a/I03HFaxqHpLfq+yhtB07jtYkrPhk+dDo1W/tKR0Qnp4mEdi+P4WP42Cg2K6SB+
gLmhOe014EGSj+rD03Hlmh21f4D7+w/7Xq3KKBOJSTey1FrxRc5AH2yn4n4I+UyL
S9VO70531ywUxThWdEwNrAvAuKZSgp66cRtOSbRgi+o/tPjRRLSpdD8TLWbbAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUHuPjIIBMCCTqJV/jqbN57sPyLWswHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTNTEwODIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BYTANBgkqhkiG9w0BAQsFAAOCAQEAfVi+
6U06ygXa0O1azp9gur//u2olp0w6kH+WZHpzX02wXyXMbTojm5mtCTV0BE1A3Z+U
n8LRjtifjtoFugirw1E5EIHTK9YoYiJGRIcURzxWb+UO4XdrSUBtZzZZhMYnkgww
7qOw2quX10lDHXx29oF89O/Ew4Tx10ufo/ji3PwJ7ijYBftOGtLN7B4EVpJUvgiO
PGniq1y1Mvps2djZ2H+7SZyPNS04H2pkQ7bDRPK/1UGVtWmP3vYBhrgZCWCYP4zj
pmso0D5FHmVTuaxVvmcok4QGExuXkQ/AEZDLhYHhxj2BJHtpjnUWZOyuhC6/w1cJ
tEE77154LuiVcJSxUQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org