Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142594.roa
File:                     AS142594.roa (raw, json)
Hash identifier:          BOMriw5mU2IZLnmEVJNmTG3/X+XperwrnAgRPujG4sg=
Subject key identifier:   C8:A8:85:35:52:D1:D4:9B:D8:42:D9:2C:62:88:7E:27:23:09:41:F3
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1D02427AA84F22D655BF6218C999852E5A2672
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142594.roa
Signing time:             Fri 29 Sep 2023 18:19:09 +0000
ROA not before:           Fri 29 Sep 2023 18:14:09 +0000
ROA not after:            Fri 27 Sep 2024 18:19:09 +0000
asID:                     142594
IP address blocks:        2602:fed2:719b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:02:42:7a:a8:4f:22:d6:55:bf:62:18:c9:99:85:2e:5a:26:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 29 18:14:09 2023 GMT
            Not After : Sep 27 18:19:09 2024 GMT
        Subject: CN=C8A8853552D1D49BD842D92C62887E27230941F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:25:01:b2:21:64:85:14:14:b4:f1:83:25:
                    bb:3d:d9:8f:5b:a9:7d:ec:88:e9:3a:18:66:a3:cb:
                    02:db:3d:43:cf:50:5a:82:d8:57:c8:94:96:d4:a0:
                    cc:5e:74:28:04:f4:ac:63:5d:dd:d7:8f:bb:a5:21:
                    35:60:c6:26:6c:99:9a:1b:fb:15:8b:10:61:fc:ae:
                    b3:bd:3e:0a:99:8b:15:53:72:be:72:16:41:d8:16:
                    6a:56:68:f1:1f:aa:f5:dd:a0:c1:45:f9:18:e4:e7:
                    6f:7e:71:b5:8d:70:c2:9e:5e:e4:9c:5e:9c:53:aa:
                    41:cb:27:28:95:5a:59:09:2a:dd:5f:cb:f4:94:05:
                    32:01:25:eb:e1:21:06:14:3e:b2:0e:26:59:43:32:
                    e6:7a:45:20:87:2c:fc:e1:f7:57:b8:fd:53:7d:f1:
                    fa:69:08:57:85:73:5a:56:3f:35:34:e9:97:3e:b9:
                    12:10:fc:01:60:68:d7:95:7a:b2:94:6a:18:82:43:
                    6c:e6:db:9f:77:cf:50:d3:11:73:60:98:f8:db:4f:
                    b5:da:66:9d:3a:61:8b:e4:60:12:e3:c1:b4:3a:8b:
                    18:0a:ae:89:6c:f2:26:1b:19:67:98:ad:8e:e4:a4:
                    3e:ff:26:04:54:d8:59:bf:29:d0:e0:14:97:48:59:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A8:85:35:52:D1:D4:9B:D8:42:D9:2C:62:88:7E:27:23:09:41:F3
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142594.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:719b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:34:d9:0d:6f:48:70:f9:e5:8f:49:d5:d5:f7:4e:da:a6:ec:
         94:ad:cc:74:7a:fc:df:47:b5:f0:2c:4d:d2:e2:d5:db:c0:c8:
         5d:e1:ad:22:12:49:54:36:da:69:43:2c:cb:1f:e3:7c:46:90:
         14:ce:ce:ff:31:c9:7a:0c:c4:88:fb:b7:3e:29:f8:7a:c8:86:
         f4:67:f8:67:a9:d5:94:3b:0a:6d:cf:17:47:c3:41:58:b1:fb:
         f3:ef:fb:cb:80:cf:9e:1d:0e:9b:a0:bf:b7:85:31:be:fa:1b:
         9a:bf:f1:2a:02:d7:f4:a0:d6:55:af:2d:69:46:0c:38:f7:b0:
         8e:c7:f6:58:07:ed:e7:0f:fa:55:b7:6d:6b:35:1f:ca:38:b0:
         31:95:b9:3c:05:92:f7:12:d1:ba:c8:0d:25:5b:09:f4:3c:06:
         68:3a:08:50:c3:47:bc:ba:b6:34:de:49:99:52:c9:a2:fd:85:
         66:ad:a7:87:3c:54:8c:a3:19:5b:b5:da:0e:f6:4e:68:07:ad:
         2a:f4:9c:86:26:6a:f3:97:68:9c:c2:10:38:89:ad:5d:27:41:
         20:b6:8c:cb:26:42:8a:ae:3a:17:c3:5f:fb:8c:80:d8:28:75:
         52:50:6b:70:df:e7:8b:a3:24:d8:fb:a5:3a:a8:b8:ef:d4:e9:
         b8:38:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:16 2024 by rpki-client on console-fra.rpki-client.org