Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS11930.roa
File:                     AS11930.roa (raw, json)
Hash identifier:          Vhc3jfeCc5bcZB1nXpqgyf1tX3beXEVrH0htFMsfA5c=
Subject key identifier:   56:A3:3B:E4:9C:D8:39:DB:62:67:2B:73:C0:55:74:F7:3F:A6:16:FD
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6ABA8DBEF3FCC3629C40358AD34350504B6B4C47
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS11930.roa
Signing time:             Mon 26 Jun 2023 12:06:53 +0000
ROA not before:           Mon 26 Jun 2023 12:01:53 +0000
ROA not after:            Mon 24 Jun 2024 12:06:53 +0000
asID:                     11930
IP address blocks:        2602:fed2:7e03::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ba:8d:be:f3:fc:c3:62:9c:40:35:8a:d3:43:50:50:4b:6b:4c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 26 12:01:53 2023 GMT
            Not After : Jun 24 12:06:53 2024 GMT
        Subject: CN=56A33BE49CD839DB62672B73C05574F73FA616FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:74:95:68:39:fc:5c:1e:35:9a:43:ba:55:
                    ea:75:31:42:b9:46:7f:40:1f:a2:7f:67:3a:f7:bd:
                    4d:b9:b3:01:9b:31:96:4e:b9:27:ae:e8:8e:36:9d:
                    99:01:c9:2b:9a:e8:20:d1:ac:8f:ae:e5:b6:2f:71:
                    89:8a:c8:48:de:3c:86:f1:96:45:bd:f4:e7:13:b9:
                    ed:e2:06:d0:48:b7:28:c4:1e:1b:f4:96:44:5b:76:
                    05:ca:4f:ee:95:6a:e6:ec:f8:1c:98:13:34:cf:b9:
                    07:8f:0d:54:98:12:dd:e1:28:25:0b:1c:41:e6:b5:
                    02:38:41:fb:83:31:6b:4c:5f:72:75:e3:43:d4:31:
                    ad:12:00:a5:19:f1:46:74:9d:3a:fe:c1:8a:6e:34:
                    11:f9:4f:6e:db:4b:28:9f:d1:d5:4a:29:43:3f:70:
                    31:d2:42:6c:9a:ae:e4:fb:08:06:9c:84:bc:3c:49:
                    fc:4a:e0:b0:8e:b5:93:ff:af:56:2a:b9:b5:5b:d1:
                    80:83:29:15:17:1a:1b:82:93:da:c2:89:a4:a7:aa:
                    a9:9c:73:62:7a:33:cd:72:2b:7f:80:bc:16:d5:ca:
                    dc:52:4a:dc:39:9c:6a:34:ed:73:73:db:5c:c7:8c:
                    1d:c1:20:34:b6:a5:34:b0:7c:18:f4:2b:39:ff:70:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A3:3B:E4:9C:D8:39:DB:62:67:2B:73:C0:55:74:F7:3F:A6:16:FD
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS11930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7e03::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:8e:52:5b:ca:61:01:9e:ef:10:cc:89:d2:9a:26:3e:b4:
         a5:8a:0b:ed:8a:62:5c:76:fb:02:63:36:52:df:d9:47:3e:f1:
         7b:8a:19:c0:8a:4e:9c:d0:f1:ff:9d:5b:3b:fd:52:76:4e:00:
         1f:8f:f2:5a:13:3d:d0:2b:9a:cb:fc:1f:05:6e:84:f8:4c:6d:
         9c:50:4f:c7:be:d5:d6:7e:a5:d0:72:6c:4c:12:9e:8f:f7:fc:
         3e:19:3f:8d:cd:cf:1b:92:b0:86:7d:b9:ff:1c:c8:b6:bd:57:
         de:eb:6e:a7:05:e3:d6:84:24:a9:e1:bc:d7:4e:12:9d:99:f0:
         0f:56:38:f4:c0:5c:d4:0a:fc:9d:8a:4f:5b:52:bf:35:55:a9:
         86:75:51:61:9d:d8:6f:d4:2c:83:4a:06:66:cb:22:49:c7:40:
         7f:cc:8c:ac:91:b9:0c:5a:08:08:4e:b0:34:b7:e7:02:ad:c5:
         17:4a:f8:5d:29:07:b6:08:b8:c4:17:52:a1:7a:da:34:e0:fa:
         e1:f2:16:a1:87:91:fb:6d:6c:d6:bc:20:8b:26:2b:b7:3d:03:
         10:b3:59:64:ec:c8:46:81:a0:1b:da:88:69:77:34:0b:49:15:
         a8:ec:63:9b:76:91:2c:b0:b4:fe:68:e3:c4:bd:98:7c:17:0c:
         51:19:ea:a8
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUarqNvvP8w2KcQDWK00NQUEtrTEcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjMwNjI2MTIwMTUzWhcNMjQwNjI0MTIwNjUz
WjAzMTEwLwYDVQQDEyg1NkEzM0JFNDlDRDgzOURCNjI2NzJCNzNDMDU1NzRGNzNG
QTYxNkZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+90lWg5/Fwe
NZpDulXqdTFCuUZ/QB+if2c6971NubMBmzGWTrknruiONp2ZAckrmugg0ayPruW2
L3GJishI3jyG8ZZFvfTnE7nt4gbQSLcoxB4b9JZEW3YFyk/ulWrm7PgcmBM0z7kH
jw1UmBLd4SglCxxB5rUCOEH7gzFrTF9ydeND1DGtEgClGfFGdJ06/sGKbjQR+U9u
20son9HVSilDP3Ax0kJsmq7k+wgGnIS8PEn8SuCwjrWT/69WKrm1W9GAgykVFxob
gpPawomkp6qpnHNiejPNcit/gLwW1crcUkrcOZxqNO1zc9tcx4wdwSA0tqU0sHwY
9Cs5/3DQIQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFFajO+Sc2DnbYmcrc8BVdPc/
phb9MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMxMTkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJ+AzANBgkqhkiG
9w0BAQsFAAOCAQEAdFuOUlvKYQGe7xDMidKaJj60pYoL7YpiXHb7AmM2Ut/ZRz7x
e4oZwIpOnNDx/51bO/1Sdk4AH4/yWhM90Cuay/wfBW6E+ExtnFBPx77V1n6l0HJs
TBKej/f8Phk/jc3PG5Kwhn25/xzItr1X3utupwXj1oQkqeG8104SnZnwD1Y49MBc
1Ar8nYpPW1K/NVWphnVRYZ3Yb9Qsg0oGZssiScdAf8yMrJG5DFoICE6wNLfnAq3F
F0r4XSkHtgi4xBdSoXraNOD64fIWoYeR+21s1rwgiyYrtz0DELNZZOzIRoGgG9qI
aXc0C0kVqOxjm3aRLLC0/mjjxL2YfBcMURnqqA==
-----END CERTIFICATE-----
Generated at Thu May 2 17:17:55 2024 by rpki-client on console-ams.rpki-client.org