Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57483.roa
File:                     AS57483.roa (raw, json)
Hash identifier:          2bB2pOCvGFc+B2n+cHzZufXgD6eTvr6I7cXAOXKanBE=
Subject key identifier:   8E:7D:6B:D2:DA:C1:4A:59:46:B1:D0:E0:58:02:D9:E6:8A:AB:53:71
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4CB25A543E028D343B93D07BD9AF58E3EDB5A3F4
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57483.roa
Signing time:             Sun 21 Jan 2024 23:12:14 +0000
ROA not before:           Sun 21 Jan 2024 23:07:14 +0000
ROA not after:            Sun 19 Jan 2025 23:12:14 +0000
asID:                     57483
IP address blocks:        2a06:9f81:2500::/40 maxlen: 48
                          2a06:9f81:2600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b2:5a:54:3e:02:8d:34:3b:93:d0:7b:d9:af:58:e3:ed:b5:a3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jan 21 23:07:14 2024 GMT
            Not After : Jan 19 23:12:14 2025 GMT
        Subject: CN=8E7D6BD2DAC14A5946B1D0E05802D9E68AAB5371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0d:a4:5b:4e:7f:be:22:fb:e6:27:1b:e1:23:
                    f7:b4:eb:26:1a:64:cd:eb:f0:de:3b:16:01:7c:e9:
                    0d:d7:f2:c0:7b:98:a8:eb:80:f9:82:f5:f3:ce:85:
                    06:6e:47:65:fc:bc:c3:1a:c9:bb:2f:0a:88:65:9a:
                    d1:23:4b:eb:69:82:f1:7e:3a:04:4e:9f:4a:70:0a:
                    c9:32:1b:6f:43:f3:9a:db:c1:dd:91:57:25:e8:42:
                    24:89:b5:3f:6a:2f:33:12:ee:c9:ba:ae:0d:2f:21:
                    85:05:d1:cd:7d:17:60:20:93:61:51:12:5b:30:15:
                    25:3f:9a:18:8e:4d:43:9d:69:01:59:63:bf:7d:bb:
                    a1:4d:92:0d:2c:cf:94:57:29:fc:c7:72:f6:e6:db:
                    2f:13:75:4d:00:09:87:17:f8:c3:8b:50:54:a8:26:
                    3d:98:66:df:d3:4d:0b:32:79:e3:b1:fb:fb:14:46:
                    82:cb:6f:80:5d:28:65:fe:de:ad:9c:26:b7:c7:48:
                    87:0b:db:5b:56:a7:e6:e8:85:83:c2:d9:f1:28:95:
                    91:69:84:bc:f8:3a:17:bf:1c:0e:2f:a2:2d:e6:6f:
                    4c:34:53:f6:fb:5e:eb:98:b6:67:67:57:e8:5a:fe:
                    70:db:21:c0:ee:cd:3f:b2:99:c0:b8:db:38:f9:ee:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7D:6B:D2:DA:C1:4A:59:46:B1:D0:E0:58:02:D9:E6:8A:AB:53:71
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:2500::-2a06:9f81:26ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c5:ba:29:8a:03:f3:9f:04:e7:39:40:87:a3:63:f7:c8:92:71:
         46:3c:d5:16:ec:97:f1:56:d2:fd:61:5d:a8:b5:6d:fe:7d:15:
         52:0b:d7:d8:a3:a8:65:7d:72:ed:9d:5f:bd:92:65:23:4a:0f:
         6a:72:87:71:b2:47:2c:ec:76:c0:96:7f:fe:f7:36:fe:c9:1c:
         af:d6:3f:4a:ea:dd:33:1f:b4:21:72:bc:80:f0:a3:92:74:bc:
         ec:d3:9b:13:0c:9c:0a:5e:61:77:1a:b1:80:a2:8f:4d:f2:2b:
         9f:e8:53:3b:08:c9:84:ae:23:1d:19:4d:d1:b8:8f:30:41:9c:
         1a:c0:94:ca:ac:70:f1:fe:3d:cc:1e:69:1b:44:ae:25:c9:a6:
         a7:ba:96:ae:89:9d:be:3b:67:db:d8:1b:2c:9b:e0:3a:5a:86:
         54:8b:3b:fa:72:57:27:38:14:9d:20:cc:88:12:11:d7:44:2e:
         77:28:44:d2:8d:41:a7:cb:65:ac:9f:6b:2f:fc:e2:8c:12:64:
         91:25:f1:94:cc:58:c2:d1:63:56:15:4b:92:a8:17:12:14:c1:
         f1:02:2f:11:f1:19:e4:69:a8:ba:c3:29:26:25:24:34:35:69:
         7d:3d:be:85:5c:81:40:64:41:37:20:44:74:d4:55:2e:80:66:
         52:7a:e8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org