Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS150863.roa
File:                     AS150863.roa (raw, json)
Hash identifier:          Pk99zOB6Ps0NwLE+eoUS199tqW796z3pXUg+lDKxn0g=
Subject key identifier:   B6:D7:88:DF:CB:C1:C7:B3:7B:7A:BF:C1:80:3C:E8:60:74:4E:B2:CC
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       790ACEEC4490D0DA184FD5E1B5015E112E4D2F67
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS150863.roa
Signing time:             Sat 24 Aug 2024 06:24:08 +0000
ROA not before:           Sat 24 Aug 2024 06:19:08 +0000
ROA not after:            Sat 23 Aug 2025 06:24:08 +0000
asID:                     150863
IP address blocks:        2602:fed2:7044::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0a:ce:ec:44:90:d0:da:18:4f:d5:e1:b5:01:5e:11:2e:4d:2f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 24 06:19:08 2024 GMT
            Not After : Aug 23 06:24:08 2025 GMT
        Subject: CN=B6D788DFCBC1C7B37B7ABFC1803CE860744EB2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:f6:eb:eb:9a:ba:43:aa:5b:ce:09:88:45:
                    91:d3:86:bf:b6:c5:81:53:8b:bc:89:50:7b:9a:a9:
                    82:35:aa:ac:6a:82:cb:95:54:0f:fb:3c:c5:31:74:
                    39:46:99:6f:79:2d:57:f1:6f:97:c0:4d:34:e1:da:
                    e7:71:ec:c6:ac:a1:d1:94:65:02:10:43:3a:7d:64:
                    0a:41:ef:85:f5:6e:d9:9d:78:d8:05:9c:f0:ff:57:
                    89:8d:39:ab:b7:b8:77:af:af:57:eb:03:67:3b:95:
                    22:9c:35:dd:37:b6:bd:e2:79:dd:b1:69:35:7d:48:
                    88:e4:e3:d7:cf:a7:5b:eb:87:c2:50:f8:47:9b:c1:
                    f2:34:33:f5:59:e5:e7:2f:2b:0b:1c:1e:2c:c7:ee:
                    8c:6a:39:c6:71:c7:01:17:df:ee:8c:8d:3b:86:1f:
                    d2:68:8c:10:a3:c6:8e:4b:08:ad:2e:5b:36:92:fa:
                    b2:81:0e:18:8d:de:0e:8d:13:eb:b0:af:1f:15:3f:
                    f9:c5:91:d4:23:a1:19:03:c6:3d:10:e7:31:f7:51:
                    07:04:33:93:b9:46:58:77:a4:49:2b:3e:6c:45:74:
                    90:c0:bf:f9:10:c3:cc:99:a9:42:c3:cd:71:5b:1b:
                    49:9a:64:7d:bb:40:f2:b2:c0:ac:0c:d1:d8:cd:63:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D7:88:DF:CB:C1:C7:B3:7B:7A:BF:C1:80:3C:E8:60:74:4E:B2:CC
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS150863.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7044::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:35:f8:47:b7:c3:23:cf:3f:f4:00:c2:59:8f:3f:35:93:f9:
         ef:4b:e5:16:7f:f8:76:87:c5:49:4d:0c:ed:e9:4f:55:33:ed:
         1d:8f:7e:ac:56:9a:7b:3a:f0:38:55:bb:1d:a1:9f:95:e5:2e:
         a1:de:49:4b:6e:87:4b:7b:b9:be:5a:91:6b:e6:31:36:a7:ba:
         63:a4:60:23:28:b8:5e:68:fd:db:aa:2d:7d:28:4e:3a:1a:01:
         bd:32:42:b8:5b:51:cf:4a:11:6c:35:a4:45:6a:ec:e0:72:d3:
         53:fa:53:d3:d1:aa:8b:11:09:14:96:f5:fd:7c:b1:53:07:57:
         99:03:99:ac:db:8b:c3:3e:10:27:f7:43:c3:ba:97:be:16:13:
         b0:a2:8f:93:0b:69:74:03:ab:fd:52:1f:dd:e6:53:4a:d4:be:
         9d:a8:cf:a4:c1:d9:bb:3c:1b:cf:4b:22:28:6a:1c:0a:07:47:
         94:fe:19:5b:dc:31:aa:40:43:89:5f:7f:78:30:ad:b9:40:49:
         d6:2e:46:ed:d3:8f:91:c1:be:18:4b:56:cd:c5:35:89:ff:b8:
         ae:52:ec:23:75:8c:fe:e3:7a:32:af:4c:ec:d9:3d:65:ee:1d:
         2e:2d:69:97:2c:69:c7:02:67:a9:15:3a:6e:ad:f3:6d:3c:76:
         73:88:78:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:17 2024 by rpki-client on console-ams.rpki-client.org