Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS58339.roa
File:                     AS58339.roa (raw, json)
Hash identifier:          uF1TjSeCafFAMMzfdqF2mFDFIc4hdw3Oz9I6SMMeJZw=
Subject key identifier:   81:DF:F8:5B:D8:11:AB:33:49:83:F2:65:63:98:B1:CC:9C:89:B8:9C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       705C7F25B1859B843943833224355A3A7F3898E0
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS58339.roa
Signing time:             Wed 06 Sep 2023 12:25:45 +0000
ROA not before:           Wed 06 Sep 2023 12:20:45 +0000
ROA not after:            Wed 04 Sep 2024 12:25:45 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f00::/40 maxlen: 48
                          2a05:dfc1:8e00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5c:7f:25:b1:85:9b:84:39:43:83:32:24:35:5a:3a:7f:38:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep  6 12:20:45 2023 GMT
            Not After : Sep  4 12:25:45 2024 GMT
        Subject: CN=81DFF85BD811AB334983F2656398B1CC9C89B89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:4c:bf:e3:59:ab:b2:e6:e9:fe:45:0d:97:
                    eb:63:94:d9:4d:b7:02:95:7c:63:01:95:a0:77:81:
                    dd:af:50:3d:29:c0:0a:09:db:91:63:fa:a0:12:1f:
                    df:90:21:ab:a6:c0:20:e7:a6:20:a7:c3:e5:5a:b0:
                    74:54:84:19:59:37:00:86:3b:c0:c4:62:aa:ac:89:
                    f1:88:e3:fe:be:d1:60:4b:e7:13:e2:a3:47:b9:dd:
                    2a:bf:aa:c5:fb:e8:56:f8:64:80:ab:01:94:43:cb:
                    df:20:4a:10:c1:e4:4b:c7:3f:b8:41:60:29:1e:8a:
                    b6:82:d6:39:b3:c8:fb:e1:2e:30:4d:77:44:7d:1f:
                    40:70:ea:f3:6c:1e:99:c0:44:eb:b3:76:c4:d0:0d:
                    a9:bf:74:4b:e0:25:d9:af:c7:f1:3b:0a:47:65:63:
                    3b:a0:00:82:67:1e:bf:5e:59:91:96:59:75:4b:59:
                    e7:36:12:0e:10:eb:61:c9:96:be:a1:cc:54:9b:06:
                    2f:46:4a:6b:1e:9b:ef:3e:21:7c:51:ab:ef:f0:a8:
                    42:ed:3c:3e:c6:74:9a:e7:d2:d6:1e:44:f6:7c:1f:
                    77:1c:11:be:a0:00:8a:5c:fd:ce:47:90:df:e3:d4:
                    8b:41:c4:b3:05:80:9a:c1:ba:df:03:5f:19:43:d0:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DF:F8:5B:D8:11:AB:33:49:83:F2:65:63:98:B1:CC:9C:89:B8:9C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS58339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f00::/40
                  2a05:dfc1:8e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:37:37:92:bd:28:ef:f5:23:af:24:39:6a:5c:06:ac:28:40:
         f2:47:e8:f2:fa:90:8d:43:a4:3b:f1:f0:1a:cf:72:c7:ac:f7:
         b7:8d:34:02:f5:a0:8a:ea:7e:f8:7d:e5:e9:92:f4:4a:98:bb:
         2e:cd:b3:6f:8c:0e:2c:5d:fb:0a:f6:50:6f:4a:56:17:29:ce:
         5d:6b:ed:bd:8e:c2:52:67:49:53:10:f2:be:1e:18:0a:ba:81:
         28:ac:8c:5b:fb:77:b6:e3:83:10:7c:17:11:29:a7:3e:11:82:
         4d:26:7c:dd:d0:7c:5e:b7:b0:aa:8e:34:ca:d8:df:a3:45:4a:
         2d:8f:e0:35:df:f4:4f:e9:22:f3:51:0d:db:bb:a4:26:2f:4a:
         05:f6:a1:ea:40:41:f8:09:7d:a3:c9:46:db:bc:1c:40:9d:27:
         87:79:91:da:79:81:b6:72:5b:b3:bb:b9:ef:ee:3e:86:3b:5c:
         54:37:c5:f6:f9:2a:71:c5:3d:53:d8:a2:5b:bb:66:80:45:95:
         6e:19:a5:85:7f:0d:23:45:63:3a:33:d2:13:83:42:5e:94:bd:
         34:e8:17:04:33:63:0f:57:ea:f5:9e:80:2b:18:76:92:b5:7e:
         4b:5f:70:23:3d:c2:5e:b8:19:0e:d8:5f:d3:1b:99:36:eb:ae:
         f7:30:55:78
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUcFx/JbGFm4Q5Q4MyJDVaOn84mOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzA5MDYxMjIwNDVaFw0yNDA5MDQxMjI1NDVaMDMxMTAvBgNV
BAMTKDgxREZGODVCRDgxMUFCMzM0OTgzRjI2NTYzOThCMUNDOUM4OUI4OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8Ey/41mrsubp/kUNl+tjlNlN
twKVfGMBlaB3gd2vUD0pwAoJ25Fj+qASH9+QIaumwCDnpiCnw+VasHRUhBlZNwCG
O8DEYqqsifGI4/6+0WBL5xPio0e53Sq/qsX76Fb4ZICrAZRDy98gShDB5EvHP7hB
YCkeiraC1jmzyPvhLjBNd0R9H0Bw6vNsHpnAROuzdsTQDam/dEvgJdmvx/E7Ckdl
YzugAIJnHr9eWZGWWXVLWec2Eg4Q62HJlr6hzFSbBi9GSmsem+8+IXxRq+/wqELt
PD7GdJrn0tYeRPZ8H3ccEb6gAIpc/c5HkN/j1ItBxLMFgJrBut8DXxlD0FoxAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUgd/4W9gRqzNJg/JlY5ixzJyJuJwwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTNTgzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH
AQcBAf8EGjAYMBYEAgACMBADBgAqBd/BXwMGACoF38GOMA0GCSqGSIb3DQEBCwUA
A4IBAQBqNzeSvSjv9SOvJDlqXAasKEDyR+jy+pCNQ6Q78fAaz3LHrPe3jTQC9aCK
6n74feXpkvRKmLsuzbNvjA4sXfsK9lBvSlYXKc5da+29jsJSZ0lTEPK+HhgKuoEo
rIxb+3e244MQfBcRKac+EYJNJnzd0Hxet7CqjjTK2N+jRUotj+A13/RP6SLzUQ3b
u6QmL0oF9qHqQEH4CX2jyUbbvBxAnSeHeZHaeYG2cluzu7nv7j6GO1xUN8X2+Spx
xT1T2KJbu2aARZVuGaWFfw0jRWM6M9ITg0JelL006BcEM2MPV+r1noArGHaStX5L
X3AjPcJeuBkO2F/TG5k26673MFV4
-----END CERTIFICATE-----
Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org