Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57110.roa
File:                     AS57110.roa (raw, json)
Hash identifier:          wIXQBmKWBgpDhyjIsmCpnWXvbXGDFFsb77Xexe3l6Uw=
Subject key identifier:   71:F1:7E:57:B7:43:1B:21:C0:2F:FC:B9:86:9E:AB:57:17:32:CA:95
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5785F774AC7F04E9475C4D2E312452D41C711CFA
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57110.roa
Signing time:             Wed 23 Oct 2024 23:45:27 +0000
ROA not before:           Wed 23 Oct 2024 23:40:27 +0000
ROA not after:            Wed 22 Oct 2025 23:45:27 +0000
asID:                     57110
IP address blocks:        2a06:9f81:1600::/40 maxlen: 48
                          2a06:9f81:1700::/40 maxlen: 48
                          2a06:9f81:1800::/40 maxlen: 48
                          2a06:9f81:1900::/40 maxlen: 48
                          2a06:9f81:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:f7:74:ac:7f:04:e9:47:5c:4d:2e:31:24:52:d4:1c:71:1c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct 23 23:40:27 2024 GMT
            Not After : Oct 22 23:45:27 2025 GMT
        Subject: CN=71F17E57B7431B21C02FFCB9869EAB571732CA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:34:77:63:cb:d9:1c:28:0f:a8:40:83:44:
                    71:fe:b9:72:11:e8:0c:94:03:84:49:d8:35:12:95:
                    d9:33:54:66:b0:07:0b:b0:a5:1c:e8:ef:c1:ae:d1:
                    9f:3f:72:8f:0f:fc:1f:c8:72:2b:2a:9d:94:c7:54:
                    38:1f:78:1f:b3:df:2c:b4:41:00:1f:e0:08:bd:41:
                    d2:c5:55:e9:50:11:3a:39:87:96:d9:f9:03:89:90:
                    5e:21:e2:f5:63:9f:f9:1e:2f:0d:34:cd:40:c2:d9:
                    eb:8a:6b:b4:18:af:02:0c:64:ae:b7:fd:5c:2d:f6:
                    c4:f1:f5:ba:f7:06:94:1a:f9:45:ff:96:ce:b3:cc:
                    29:18:02:f6:5b:38:00:c8:0d:e2:f7:f3:55:df:d8:
                    84:ea:8a:7d:52:03:33:43:1b:b9:02:fd:52:c6:ba:
                    fc:7c:2a:b5:60:55:07:a7:74:ea:1d:58:ab:db:5d:
                    15:4a:39:fb:6a:3a:e8:4a:60:1e:61:d8:41:79:d3:
                    cd:8c:77:04:30:0d:e8:c2:b4:06:18:90:69:81:39:
                    f4:a4:7e:f0:89:87:e3:5c:7c:aa:f7:ad:95:50:fb:
                    27:53:12:41:05:0f:e4:8d:9e:aa:d1:3c:ca:40:55:
                    75:4e:31:ba:72:d0:d7:a2:ba:1b:56:30:d4:e7:b4:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F1:7E:57:B7:43:1B:21:C0:2F:FC:B9:86:9E:AB:57:17:32:CA:95
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:1600::-2a06:9f81:19ff:ffff:ffff:ffff:ffff:ffff
                  2a06:9f81:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:43:53:8f:62:75:1c:89:bd:da:d7:66:c1:17:2b:00:59:8a:
         50:60:8c:99:84:53:20:91:fb:43:d9:55:ba:72:fe:fb:13:e7:
         b4:d2:90:f4:d5:1c:20:13:1c:58:a0:2d:ec:ed:4f:33:c2:7f:
         7c:64:39:57:28:86:b3:80:b6:3f:34:83:be:2b:f9:f2:0c:4d:
         d2:99:43:92:41:38:6e:ec:60:f3:69:5b:80:da:d0:10:fa:ee:
         e0:01:bc:04:e9:ea:b3:a3:f6:31:9c:fc:2e:79:1a:c0:c6:eb:
         d0:1d:0f:1d:8c:d6:97:af:e2:9d:d1:6d:e1:2f:4e:cd:a4:92:
         47:0c:8e:a2:db:3f:cd:a6:76:6c:9d:5d:6e:83:00:83:5b:97:
         cf:4b:3c:b1:e4:a0:5d:ab:1f:c9:cf:f4:0b:c7:89:20:10:e3:
         5e:12:f4:8c:52:ee:82:f2:23:71:ff:0f:0c:1f:45:38:db:fc:
         70:8b:e5:56:c5:ac:16:a6:a8:cb:f3:04:d4:04:b1:df:92:17:
         42:da:be:1a:8c:38:4f:bb:52:c9:4e:50:2a:b4:98:c7:c2:87:
         ad:72:35:e1:40:9a:58:65:29:72:c1:f8:d4:9e:63:cd:db:c5:
         79:02:f3:d2:a8:41:e2:d0:f8:e7:69:56:03:61:d5:a9:3a:40:
         ea:ca:bb:07
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUV4X3dKx/BOlHXE0uMSRS1BxxHPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDEwMjMyMzQwMjdaFw0yNTEwMjIyMzQ1MjdaMDMxMTAvBgNV
BAMTKDcxRjE3RTU3Qjc0MzFCMjFDMDJGRkNCOTg2OUVBQjU3MTczMkNBOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJATR3Y8vZHCgPqECDRHH+uXIR
6AyUA4RJ2DUSldkzVGawBwuwpRzo78Gu0Z8/co8P/B/IcisqnZTHVDgfeB+z3yy0
QQAf4Ai9QdLFVelQETo5h5bZ+QOJkF4h4vVjn/keLw00zUDC2euKa7QYrwIMZK63
/Vwt9sTx9br3BpQa+UX/ls6zzCkYAvZbOADIDeL381Xf2ITqin1SAzNDG7kC/VLG
uvx8KrVgVQendOodWKvbXRVKOftqOuhKYB5h2EF5082MdwQwDejCtAYYkGmBOfSk
fvCJh+NcfKr3rZVQ+ydTEkEFD+SNnqrRPMpAVXVOMbpy0NeiuhtWMNTntNR1AgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUcfF+V7dDGyHAL/y5hp6rVxcyypUwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTNTcxMTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUH
AQcBAf8EJDAiMCAEAgACMBowEAMGASoGn4EWAwYBKgafgRgDBgAqBp+BIDANBgkq
hkiG9w0BAQsFAAOCAQEAmkNTj2J1HIm92tdmwRcrAFmKUGCMmYRTIJH7Q9lVunL+
+xPntNKQ9NUcIBMcWKAt7O1PM8J/fGQ5VyiGs4C2PzSDviv58gxN0plDkkE4buxg
82lbgNrQEPru4AG8BOnqs6P2MZz8LnkawMbr0B0PHYzWl6/indFt4S9OzaSSRwyO
ots/zaZ2bJ1dboMAg1uXz0s8seSgXasfyc/0C8eJIBDjXhL0jFLugvIjcf8PDB9F
ONv8cIvlVsWsFqaoy/ME1ASx35IXQtq+Gow4T7tSyU5QKrSYx8KHrXI14UCaWGUp
csH41J5jzdvFeQLz0qhB4tD452lWA2HVqTpA6sq7Bw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org