Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS54681.roa
File:                     AS54681.roa (raw, json)
Hash identifier:          DMkovmZHyB/LI2LNfYZ/NF00oW2v7O/T/1fVs9mkp5c=
Subject key identifier:   93:A1:8A:08:8A:05:50:F4:15:71:A8:BE:1F:70:FC:89:99:17:10:1B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6E476473242CBF62123A57846B0CAE057A2AF2C5
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS54681.roa
Signing time:             Fri 24 Jan 2025 07:45:40 +0000
ROA not before:           Fri 24 Jan 2025 07:40:40 +0000
ROA not after:            Fri 23 Jan 2026 07:45:40 +0000
asID:                     54681
IP address blocks:        2a05:dfc1:200::/40 maxlen: 48
                          2a05:dfc1:2000::/40 maxlen: 48
                          2a05:dfc1:2100::/40 maxlen: 48
                          2a05:dfc1:2200::/40 maxlen: 48
                          2a05:dfc1:2300::/40 maxlen: 40
                          2a05:dfc1:2400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 02:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:47:64:73:24:2c:bf:62:12:3a:57:84:6b:0c:ae:05:7a:2a:f2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jan 24 07:40:40 2025 GMT
            Not After : Jan 23 07:45:40 2026 GMT
        Subject: CN=93A18A088A0550F41571A8BE1F70FC899917101B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:05:6d:02:2e:ec:b5:27:a0:b8:67:b5:b2:
                    d5:56:b9:ae:7c:5d:03:c8:21:3d:11:27:0d:c1:7e:
                    f2:cb:ca:7d:23:28:23:34:49:50:8e:fb:e3:45:d8:
                    d6:2b:f8:bb:71:90:df:bf:89:c7:83:d0:70:99:f7:
                    ee:1c:62:df:00:b7:5d:89:3f:bd:77:b8:4d:9e:9b:
                    c9:20:50:24:da:78:b4:71:3e:2e:d7:b2:8b:13:51:
                    ea:bd:f5:3d:96:d0:c3:22:0a:be:46:4b:45:04:a9:
                    bf:c9:c8:74:5a:3e:dd:ee:23:65:db:2d:49:e4:2b:
                    52:b2:0e:b5:63:ed:de:16:37:df:a2:f7:97:ac:ee:
                    eb:ad:af:73:48:1c:0d:91:11:01:f0:4d:1f:58:e7:
                    e2:37:eb:2b:ac:8f:9b:2d:ea:7b:fe:55:98:88:b0:
                    de:30:c6:a2:74:dd:7b:3b:cc:88:79:f9:1b:c6:7a:
                    d2:44:3e:b3:56:2b:d6:88:b5:bc:90:c4:c6:dd:90:
                    86:db:99:ec:6e:b2:b8:fe:d1:5d:c2:98:fa:d5:60:
                    67:2d:e8:6a:3a:ad:12:30:00:93:01:28:77:fb:4c:
                    3c:c9:59:d4:e6:23:11:2f:81:5d:d1:ae:97:e6:96:
                    d3:15:e9:30:64:71:08:52:04:05:45:8e:5f:63:65:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:8A:08:8A:05:50:F4:15:71:A8:BE:1F:70:FC:89:99:17:10:1B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS54681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:200::/40
                  2a05:dfc1:2000::-2a05:dfc1:24ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         23:07:cb:ca:01:5f:84:3f:c4:22:f5:56:60:39:41:45:b5:4b:
         96:c6:ba:09:9c:dc:e1:75:7b:e7:b1:c4:17:18:68:0f:9a:b9:
         01:36:c6:0d:ba:db:5d:49:06:e6:00:95:c4:eb:96:29:8d:bd:
         8a:0b:f9:29:87:d5:ab:b9:9d:8f:5d:06:0b:f1:05:9d:79:11:
         71:22:a6:7d:27:9c:3d:ac:22:52:ed:0b:b1:40:61:67:55:9c:
         82:27:e2:4e:b2:93:c0:4b:9d:5b:32:a0:25:78:a6:1f:93:54:
         08:2d:27:b5:e7:57:32:42:14:92:39:16:cc:d9:48:b5:ec:5b:
         dd:7b:91:0f:3e:34:8c:24:36:85:2f:e9:e4:51:d2:85:e7:47:
         7c:48:b1:6a:f7:a5:47:e8:c1:3d:ca:3c:69:81:fc:02:4d:54:
         ae:fc:8c:14:9e:4b:3e:c9:52:04:e9:e3:21:a9:8f:d7:9f:9c:
         1b:f6:5e:bb:29:b9:61:6c:c7:09:83:76:d1:ac:63:1c:00:85:
         93:56:aa:be:ec:16:72:57:8a:e5:af:b0:cf:b2:61:e7:0a:e0:
         fa:4f:82:3c:a9:80:b4:9e:05:fe:67:eb:ac:1d:6e:0e:95:f7:
         23:09:2b:16:00:3f:ee:e5:11:e8:92:08:43:db:02:68:fd:bd:
         7c:6c:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:03:27 2025 by rpki-client