Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57110.roa
File:                     AS57110.roa (raw, json)
Hash identifier:          QuW3KWyuUS5dJvxrzUFKzqW0DoxCX8zoPX2/hHblz3U=
Subject key identifier:   06:63:BE:06:3D:1E:1B:D8:D6:B5:D7:26:25:2A:2B:FA:91:54:67:F0
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1A655F926390A997930A4FDC187B21BDFBFB0FF9
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57110.roa
Signing time:             Wed 22 Nov 2023 23:21:39 +0000
ROA not before:           Wed 22 Nov 2023 23:16:39 +0000
ROA not after:            Wed 20 Nov 2024 23:21:39 +0000
asID:                     57110
IP address blocks:        2a06:9f81:1600::/40 maxlen: 48
                          2a06:9f81:1700::/40 maxlen: 48
                          2a06:9f81:1800::/40 maxlen: 48
                          2a06:9f81:1900::/40 maxlen: 48
                          2a06:9f81:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:65:5f:92:63:90:a9:97:93:0a:4f:dc:18:7b:21:bd:fb:fb:0f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov 22 23:16:39 2023 GMT
            Not After : Nov 20 23:21:39 2024 GMT
        Subject: CN=0663BE063D1E1BD8D6B5D726252A2BFA915467F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:fd:b7:4a:ce:04:7d:66:53:81:f4:1c:b0:
                    6d:25:36:95:f2:c2:99:ed:36:32:2a:b2:e8:68:76:
                    72:4f:81:18:60:a6:e4:f8:03:84:2f:cc:37:3a:ef:
                    dd:18:ea:88:1a:cc:61:d5:93:af:a6:3c:f7:0a:c0:
                    4b:29:9d:2a:35:ed:ed:ea:58:39:a2:f6:34:8a:b2:
                    52:82:c5:ee:70:53:f7:ec:83:e2:d9:27:b3:a8:74:
                    e6:8f:c0:e9:b5:ee:b4:e3:0b:f3:a0:df:83:47:95:
                    9a:c6:d6:54:0f:71:90:8a:47:65:13:99:f6:0b:4b:
                    bd:73:ee:bb:67:e9:1f:ff:80:0d:f5:2b:d3:d9:da:
                    ce:69:16:94:02:25:94:68:de:03:47:29:b1:63:4e:
                    e8:9c:d8:4a:02:70:8d:2d:73:a6:7b:b4:f3:a0:9c:
                    cd:be:a4:4a:59:ab:0d:72:25:7f:5d:7e:fa:b9:fc:
                    2e:97:84:7b:ca:41:e5:a7:b0:91:e7:3c:3a:22:0b:
                    a3:7f:90:72:bd:c6:0a:88:af:62:13:b2:86:06:97:
                    53:e5:58:93:c5:eb:94:8e:85:a1:71:2c:f3:3f:62:
                    9a:e9:55:8f:53:96:d6:9b:07:6a:59:1b:50:fa:50:
                    04:2e:8d:58:a9:d3:29:e3:83:e7:3f:76:eb:ec:a2:
                    9c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:63:BE:06:3D:1E:1B:D8:D6:B5:D7:26:25:2A:2B:FA:91:54:67:F0
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:1600::-2a06:9f81:19ff:ffff:ffff:ffff:ffff:ffff
                  2a06:9f81:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:86:4d:6d:ac:87:06:63:28:d2:f7:43:3f:bb:7a:fa:76:17:
         25:ec:a8:a0:10:e5:9a:2c:e5:bb:e5:8b:b4:ca:1a:9a:34:e7:
         35:d5:ee:e9:15:6d:d4:bc:12:4f:c4:fd:e9:80:5c:a5:e6:d6:
         22:80:df:4e:54:6e:69:b9:d8:d3:dc:69:ca:8a:c7:62:b3:a0:
         30:c1:96:a4:04:a8:cf:a6:4e:f6:f1:e4:7b:a2:ac:82:5e:d7:
         33:80:cb:30:ab:74:35:2b:0c:c2:34:62:0f:f8:8c:30:2e:1d:
         db:ac:d9:42:1f:ed:67:6d:bc:a6:36:3c:0b:6d:76:2b:3b:ce:
         7b:1d:4e:3f:01:32:e0:6c:80:0f:e2:a5:75:e7:48:90:1b:f2:
         54:52:ae:aa:46:11:00:10:12:d1:39:60:bc:46:41:dc:56:23:
         44:dc:03:7f:7b:ea:f1:fe:96:0d:56:e6:de:13:d6:d1:9f:7f:
         c3:9c:5a:c0:2c:a2:f1:48:f4:bd:e2:5f:1d:e5:56:a7:67:bb:
         c0:7f:f7:c7:f1:37:19:70:8f:5d:0b:23:90:71:62:14:1e:aa:
         02:9e:67:79:10:c8:13:fc:0c:e3:4b:50:d8:7e:75:ac:b8:85:
         91:08:b2:1b:c4:32:9b:fe:00:12:de:13:a7:71:1a:71:87:0a:
         4b:e1:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 04:45:07 2024 by rpki-client on console-fra.rpki-client.org