Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS141376.roa
File:                     AS141376.roa (raw, json)
Hash identifier:          6gb6y2XhlBf7Epkc3753ahcB//xTIVqLfc7Gele/nr0=
Subject key identifier:   AF:A5:9A:9A:08:B7:20:7E:25:97:70:61:BA:3B:EB:35:CF:48:1B:FB
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0BFD71E19CF9A47B8EE058B35C066D9CF2838F5F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS141376.roa
Signing time:             Tue 15 Aug 2023 02:00:29 +0000
ROA not before:           Tue 15 Aug 2023 01:55:29 +0000
ROA not after:            Tue 13 Aug 2024 02:00:29 +0000
asID:                     141376
IP address blocks:        2602:fed2:7310::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fd:71:e1:9c:f9:a4:7b:8e:e0:58:b3:5c:06:6d:9c:f2:83:8f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:29 2023 GMT
            Not After : Aug 13 02:00:29 2024 GMT
        Subject: CN=AFA59A9A08B7207E25977061BA3BEB35CF481BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:d0:e9:c1:d5:2e:a6:da:92:9e:25:b1:66:
                    d2:58:d9:72:a0:bf:f0:0c:a8:b8:96:c3:c9:88:2f:
                    ad:84:0d:3c:08:79:0c:a2:69:e4:9c:ee:83:28:21:
                    f5:e3:e7:da:f2:4c:59:7f:92:b7:73:6f:1d:b7:6b:
                    91:16:b3:f3:64:29:00:b4:68:fa:12:c2:d7:77:6f:
                    8d:05:e7:42:5f:fd:81:17:a1:f0:fd:06:10:d1:e2:
                    0c:0f:e4:52:6c:30:80:23:89:68:be:04:9c:80:a6:
                    41:74:2d:c4:fa:2d:15:68:35:d4:80:a9:15:2d:7a:
                    a4:27:61:04:bc:2c:09:61:49:3b:a2:f1:a8:e7:9d:
                    9b:71:9b:18:9c:0f:f8:af:e9:71:ca:22:44:d6:73:
                    23:64:e2:2c:d3:e4:68:fc:e1:aa:27:6b:a2:b9:40:
                    77:4d:79:31:cf:2b:e0:d2:84:4b:a3:1e:4a:f6:f5:
                    85:83:3c:3d:44:e3:21:11:24:86:db:5d:9a:46:f4:
                    67:b1:00:3c:05:ea:6a:ca:37:e5:3a:53:fc:33:da:
                    75:a8:16:b2:22:e1:a0:93:83:e4:23:3c:c6:63:74:
                    ee:ed:1b:11:c3:52:b4:56:b6:85:1f:c7:22:03:b6:
                    38:a9:81:3b:00:a3:41:0e:e6:c6:67:ae:45:12:87:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A5:9A:9A:08:B7:20:7E:25:97:70:61:BA:3B:EB:35:CF:48:1B:FB
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS141376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7310::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:72:19:0a:3a:af:e8:21:85:7c:6a:84:d8:33:1e:54:98:66:
         45:9c:88:0f:9d:d7:66:27:73:d8:d8:d9:af:67:89:60:0f:b4:
         7b:78:65:4a:37:aa:42:94:df:32:9f:3f:aa:86:0a:df:8f:39:
         58:fc:ce:bb:d3:50:e1:f2:2b:f5:ad:76:dc:60:6e:e8:33:02:
         92:91:0a:32:39:51:7f:67:13:a6:72:78:73:1a:e9:f7:2e:83:
         49:82:b2:82:a9:55:d9:10:71:af:e4:25:cd:71:82:46:ea:a1:
         75:8f:c2:e4:98:78:4a:e4:20:cc:87:8e:8c:f4:1a:92:7d:97:
         9c:68:58:fa:b3:99:68:70:a2:4c:26:b9:77:cb:4b:70:fb:57:
         71:5d:fa:65:0c:df:9e:86:3a:57:ce:55:37:d1:ba:d9:da:d1:
         7f:9d:c7:0a:18:45:1f:87:08:28:4a:b1:b4:8e:a4:94:f4:48:
         a8:30:29:0c:d5:20:23:8f:a3:e8:9f:d2:af:aa:58:9b:22:c4:
         d0:46:44:5e:e3:5a:0c:fa:da:71:34:a4:54:44:b1:81:bb:ff:
         ce:29:70:0e:35:3e:ef:72:02:85:ce:1b:95:b0:d5:ab:a0:9c:
         d2:69:9f:e9:b6:5a:ac:11:31:3f:45:70:43:27:6d:42:ea:be:
         42:2e:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:16 2024 by rpki-client on console-fra.rpki-client.org