Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS137509.roa
File:                     AS137509.roa (raw, json)
Hash identifier:          pqSFeSMtC46eoZBh7R08XNVlDpF7/5jvGQ8eqq48hRg=
Subject key identifier:   0F:DE:58:25:9D:BD:BF:11:F4:48:8D:81:D7:06:A9:9F:DA:34:A2:01
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5D9F7539D73DFCE2D60C51378687E0A32734F65D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS137509.roa
Signing time:             Mon 08 Apr 2024 19:13:47 +0000
ROA not before:           Mon 08 Apr 2024 19:08:47 +0000
ROA not after:            Mon 07 Apr 2025 19:13:47 +0000
asID:                     137509
IP address blocks:        2602:fed2:7121::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9f:75:39:d7:3d:fc:e2:d6:0c:51:37:86:87:e0:a3:27:34:f6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Apr  8 19:08:47 2024 GMT
            Not After : Apr  7 19:13:47 2025 GMT
        Subject: CN=0FDE58259DBDBF11F4488D81D706A99FDA34A201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:21:7e:3f:16:14:14:4c:f4:e9:43:b0:76:
                    9e:94:46:01:f9:58:de:15:79:5b:ff:61:10:57:d5:
                    02:1c:73:fc:af:56:ab:90:c2:b8:d6:eb:50:d1:83:
                    a4:87:9a:9c:98:1a:c5:d4:10:8a:1b:f9:29:f4:27:
                    1a:9e:54:3a:a2:4c:d2:d9:60:70:8f:35:6b:4f:0c:
                    67:1e:2b:ee:09:57:d2:07:40:a0:8b:35:6f:52:ad:
                    09:45:51:ca:db:6b:b1:e1:51:30:12:5e:de:12:00:
                    c6:d2:52:92:46:cf:a8:f5:61:70:53:db:10:9c:1c:
                    88:c4:7b:7f:0b:51:28:ff:5e:13:b5:b3:30:a7:96:
                    57:3c:3a:bf:76:bb:c2:08:79:53:a8:75:7f:a1:80:
                    bf:ed:53:d4:c2:1c:e3:a9:a2:84:36:78:4b:5a:32:
                    5c:b3:b2:c4:5b:b6:3b:c1:27:3a:a3:c4:f8:50:0f:
                    f5:8b:af:0f:bf:a5:5c:dc:10:54:e3:b8:cb:4a:20:
                    30:e4:d6:0d:b7:1d:ba:1a:f2:ef:87:1e:7d:d1:a8:
                    8e:a9:83:34:ec:8a:d2:19:89:35:f5:1c:a7:b5:1b:
                    85:fe:f0:3c:36:1d:4b:4a:e3:2e:7b:ff:33:64:44:
                    1b:83:8e:28:8c:1f:d3:23:bd:d3:28:cb:1b:4c:a9:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DE:58:25:9D:BD:BF:11:F4:48:8D:81:D7:06:A9:9F:DA:34:A2:01
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS137509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7121::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:b9:86:23:ec:ea:73:9c:69:f1:39:c5:40:48:5b:f7:7b:
         df:ce:30:49:ac:93:35:c7:3d:68:1f:c2:10:07:6b:ab:99:a2:
         a3:df:cd:42:fd:95:c8:a4:63:d4:40:e1:f4:88:cf:e9:a5:b0:
         e5:01:36:aa:f3:ca:cb:09:5c:7f:38:6e:f4:33:b9:45:f1:7f:
         31:62:d1:a7:e8:aa:1a:73:77:29:80:9f:4a:1a:4c:ca:b4:d4:
         33:6c:ea:fb:41:86:3e:82:31:5f:e1:ed:39:5f:22:23:90:56:
         a8:73:4d:3f:1f:2c:bd:3a:e8:d7:11:43:f9:4c:1b:c8:e8:9f:
         19:20:9a:ea:da:a9:29:28:55:63:4d:0e:2f:aa:e7:84:ab:6f:
         24:c0:e3:5c:2f:04:d2:63:06:53:eb:53:09:de:be:3f:a1:bd:
         89:0c:1a:c2:49:50:03:d9:60:63:78:23:59:dd:71:90:a0:dd:
         66:65:c2:28:c9:60:12:55:78:ef:79:99:42:ed:5a:90:2c:3b:
         eb:be:7d:8f:d7:2b:14:c5:a4:95:72:29:f2:62:6a:0c:6f:7e:
         1f:0f:43:73:1a:6a:7c:ec:25:ea:b0:84:f3:1e:ec:a2:a4:fe:
         b6:89:fb:c0:29:a7:ec:53:c4:71:5e:a2:a5:02:5d:7c:16:3d:
         10:75:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:23 2024 by rpki-client on console-fra.rpki-client.org