Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142418.roa
File:                     AS142418.roa (raw, json)
Hash identifier:          Z6/ojLvKJn7ZMSYtnkaY6mrm9LCvDZb3q2Q4eRujT/g=
Subject key identifier:   BB:6E:51:D9:80:BE:9F:C6:7C:2B:FE:7D:64:F1:6A:3E:75:E4:AC:6A
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1FF4A6F267C6869D5362CCB8508FDEFBF03A3D3B
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142418.roa
Signing time:             Tue 16 Jul 2024 02:42:25 +0000
ROA not before:           Tue 16 Jul 2024 02:37:25 +0000
ROA not after:            Tue 15 Jul 2025 02:42:25 +0000
asID:                     142418
IP address blocks:        2602:fed2:731d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f4:a6:f2:67:c6:86:9d:53:62:cc:b8:50:8f:de:fb:f0:3a:3d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:25 2024 GMT
            Not After : Jul 15 02:42:25 2025 GMT
        Subject: CN=BB6E51D980BE9FC67C2BFE7D64F16A3E75E4AC6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:ec:5f:03:95:2e:83:99:9a:9b:e3:94:f5:
                    23:8e:ef:31:e7:a1:4b:9d:fe:41:68:e4:e4:93:8b:
                    9f:73:86:ce:43:99:b5:94:f2:46:bc:45:0e:2d:68:
                    68:9a:03:8f:f8:83:cd:df:21:71:18:9b:b1:86:1e:
                    64:46:ef:cc:10:80:ed:5a:f9:12:04:3c:29:76:df:
                    78:48:a1:74:da:b1:39:4d:70:0e:08:cc:5c:d6:20:
                    37:35:f8:08:e1:a0:a2:82:78:85:6f:38:36:70:f7:
                    40:df:52:35:4e:96:13:e1:4e:02:51:1d:f4:57:40:
                    3f:5e:0d:49:22:78:67:12:ff:31:02:ac:7c:69:f9:
                    83:c3:03:de:b4:b4:9b:b7:6e:b2:25:d2:c2:a5:a8:
                    18:0e:42:54:9f:4a:fc:73:fd:5a:7b:f6:f9:14:8c:
                    69:51:d3:f9:ac:d5:72:2e:e2:cf:33:db:39:3d:f8:
                    4e:a9:ec:ff:84:d2:a2:20:32:b1:e6:03:e0:a6:de:
                    7d:37:dd:f3:5d:22:b1:a5:ee:b7:14:b8:57:15:e7:
                    93:ea:86:26:38:64:5f:e2:bd:33:03:c0:c3:55:ef:
                    33:8e:60:15:92:9a:b2:92:79:a2:af:05:0d:eb:5f:
                    e1:c4:7e:24:9b:12:6b:ed:d2:36:1f:a5:ac:1c:8a:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6E:51:D9:80:BE:9F:C6:7C:2B:FE:7D:64:F1:6A:3E:75:E4:AC:6A
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142418.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:731d::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:ad:a5:31:7a:cf:4b:f5:88:da:5c:53:6e:5d:f1:c8:b5:ce:
         6c:b0:b1:42:10:42:06:97:3f:b3:0f:3c:1d:b5:a4:49:84:eb:
         f3:43:8f:8a:a4:d9:e0:4d:be:64:a8:30:13:db:6b:29:8d:6d:
         fc:20:26:30:db:16:a0:f5:05:ef:2f:f4:7a:b5:70:a8:b8:e6:
         5c:d8:9d:a5:6b:41:27:c5:a9:82:b3:dc:40:8e:0a:95:c8:64:
         fb:37:34:2a:6f:fe:35:b2:ca:6c:d6:d5:3e:5b:b1:7c:01:92:
         c1:c3:ec:03:ac:7d:ac:64:78:2c:99:18:96:4b:10:72:ee:0f:
         7e:43:4e:18:74:c1:63:2c:61:32:0b:40:d3:a3:d7:62:0d:c7:
         dc:84:e0:06:d5:b2:ad:d4:b6:35:c3:0b:dd:83:0a:c7:3e:eb:
         d8:06:26:a8:2d:e5:0f:1b:99:f5:77:b8:4b:d7:fe:21:ee:07:
         08:71:eb:b1:5a:1b:19:77:be:01:82:ca:92:cf:1b:62:f1:50:
         55:d6:f5:87:09:cc:84:f7:02:04:d9:1e:e6:7a:e7:6c:9e:fc:
         8b:5d:a6:9c:b7:af:11:29:93:08:1b:e2:40:bb:7b:da:3c:a6:
         63:0f:2f:06:4a:e6:21:a3:c2:05:6f:22:ef:36:08:f8:5c:a8:
         72:f8:a2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org