Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS141376.roa
File:                     AS141376.roa (raw, json)
Hash identifier:          W00biG9USls7LSmOXYrLY4U8mupESqWB8m/2rlHspn8=
Subject key identifier:   11:0B:F1:71:5F:01:EB:9B:3C:67:E6:46:36:CC:04:B1:F8:2D:FE:64
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       7C567FDB6D4E248E29C6FB4084D727E364EDC504
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS141376.roa
Signing time:             Tue 16 Jul 2024 02:42:27 +0000
ROA not before:           Tue 16 Jul 2024 02:37:27 +0000
ROA not after:            Tue 15 Jul 2025 02:42:27 +0000
asID:                     141376
IP address blocks:        2602:fed2:7310::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:56:7f:db:6d:4e:24:8e:29:c6:fb:40:84:d7:27:e3:64:ed:c5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:27 2024 GMT
            Not After : Jul 15 02:42:27 2025 GMT
        Subject: CN=110BF1715F01EB9B3C67E64636CC04B1F82DFE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:af:38:ad:2d:3d:83:8b:94:8c:74:24:c8:be:
                    dc:ce:bb:54:08:29:eb:7e:e5:e4:45:88:9e:48:98:
                    50:40:69:31:86:cc:2c:a7:b6:4d:00:8f:a8:71:86:
                    0d:02:86:f6:fb:d8:e2:4b:59:34:52:d9:17:c7:1f:
                    d0:49:b9:7c:cb:6f:8e:25:b2:f6:dc:b6:f4:f7:74:
                    83:09:8d:71:2f:bc:2f:bc:10:f7:6e:7b:ab:f3:72:
                    06:03:ce:c9:63:b1:11:c7:26:9a:f7:7a:82:5e:30:
                    dc:f0:e6:ea:d9:26:eb:dd:19:c3:71:00:30:10:cc:
                    78:80:ee:82:ce:2d:43:e4:3a:ef:ab:d9:cf:d8:b2:
                    5d:a1:70:7e:4e:a4:eb:93:55:5d:1e:eb:2f:42:f3:
                    75:8e:2d:dd:6d:1a:5b:3d:98:30:a6:6f:e7:61:ac:
                    5d:ff:b0:2c:fb:f3:fa:28:38:e8:98:49:75:74:82:
                    bd:9a:5d:1c:55:1d:dc:61:b3:63:3e:8d:49:dd:1e:
                    04:56:97:cc:e9:d2:38:8b:2c:60:dc:54:3a:17:2f:
                    86:18:56:be:25:4f:60:ef:4a:99:cd:38:64:4f:87:
                    46:0c:df:dc:26:8a:c1:78:c1:c4:e0:5c:c9:aa:f9:
                    03:21:f2:15:79:0f:8b:df:ac:6a:67:47:eb:e3:0d:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:F1:71:5F:01:EB:9B:3C:67:E6:46:36:CC:04:B1:F8:2D:FE:64
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS141376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7310::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:f2:26:04:d1:d7:dc:42:b0:01:9e:37:83:b3:cc:76:c0:
         bf:d9:77:9b:cc:d7:e2:d0:d8:35:48:d9:18:53:3b:3e:10:f8:
         dc:c1:0e:da:33:aa:ef:17:21:05:5c:bf:c6:26:aa:ef:4f:68:
         f8:9d:ed:8e:b3:fc:57:24:08:6d:6f:10:38:82:7a:f0:5a:58:
         bc:34:67:e7:63:d5:54:b5:3b:2c:36:7b:ca:58:ed:2f:2d:53:
         b1:65:02:26:9f:cf:63:bb:c2:29:2a:cc:cc:79:eb:60:f2:34:
         a3:4e:1f:4c:ad:10:f9:33:06:d0:f4:97:60:3d:13:da:d4:df:
         a7:94:1d:25:2b:03:32:e3:e2:0c:20:5a:80:e1:8d:05:27:56:
         48:5c:eb:d4:03:c2:43:4c:48:3c:68:50:f4:dc:c4:3f:2e:ba:
         c8:8b:e2:93:a0:04:2c:55:70:7b:20:dc:8f:69:ed:73:2b:d1:
         ee:91:fa:3a:1f:50:42:b1:fc:03:f0:ea:ae:7d:63:18:a0:07:
         a6:71:ce:36:41:d7:c2:47:f2:3e:9b:3c:cd:56:c6:f3:78:60:
         ee:5a:17:d3:25:8f:e2:05:5c:37:94:34:7a:c9:37:ea:cd:0f:
         c5:2e:80:61:06:e1:d5:6c:2f:56:1d:4f:26:da:13:96:4b:c5:
         9d:e9:fd:a3
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUfFZ/221OJI4pxvtAhNcn42TtxQQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwNzE2MDIzNzI3WhcNMjUwNzE1MDI0MjI3
WjAzMTEwLwYDVQQDEygxMTBCRjE3MTVGMDFFQjlCM0M2N0U2NDYzNkNDMDRCMUY4
MkRGRTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8684rS09g4uU
jHQkyL7czrtUCCnrfuXkRYieSJhQQGkxhswsp7ZNAI+ocYYNAob2+9jiS1k0UtkX
xx/QSbl8y2+OJbL23Lb093SDCY1xL7wvvBD3bnur83IGA87JY7ERxyaa93qCXjDc
8Obq2Sbr3RnDcQAwEMx4gO6Czi1D5Drvq9nP2LJdoXB+TqTrk1VdHusvQvN1ji3d
bRpbPZgwpm/nYaxd/7As+/P6KDjomEl1dIK9ml0cVR3cYbNjPo1J3R4EVpfM6dI4
iyxg3FQ6Fy+GGFa+JU9g70qZzThkT4dGDN/cJorBeMHE4FzJqvkDIfIVeQ+L36xq
Z0fr4w0E2wIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFBEL8XFfAeubPGfmRjbMBLH4
Lf5kMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMxNDEzNzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScxAwDQYJKoZI
hvcNAQELBQADggEBAAcM8iYE0dfcQrABnjeDs8x2wL/Zd5vM1+LQ2DVI2RhTOz4Q
+NzBDtozqu8XIQVcv8Ymqu9PaPid7Y6z/FckCG1vEDiCevBaWLw0Z+dj1VS1Oyw2
e8pY7S8tU7FlAiafz2O7wikqzMx562DyNKNOH0ytEPkzBtD0l2A9E9rU36eUHSUr
AzLj4gwgWoDhjQUnVkhc69QDwkNMSDxoUPTcxD8uusiL4pOgBCxVcHsg3I9p7XMr
0e6R+jofUEKx/APw6q59YxigB6ZxzjZB18JH8j6bPM1WxvN4YO5aF9Mlj+IFXDeU
NHrJN+rND8UugGEG4dVsL1YdTybaE5ZLxZ3p/aM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:42 2024 by rpki-client on console-fra.rpki-client.org