Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS199974.roa
File:                     AS199974.roa (raw, json)
Hash identifier:          ST/+oiXuc35WfbtQ3ilQYV/ahsR831R5g423NrhNBzw=
Subject key identifier:   97:F8:07:4E:13:33:00:02:DC:85:BA:BC:EC:DD:EC:55:E9:C4:49:DF
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3E5D8C72A07594961FE990C3D5672590CACF2CA3
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS199974.roa
Signing time:             Sat 20 Apr 2024 22:11:33 +0000
ROA not before:           Sat 20 Apr 2024 22:06:33 +0000
ROA not after:            Sat 19 Apr 2025 22:11:33 +0000
asID:                     199974
IP address blocks:        2602:fed2:7710::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5d:8c:72:a0:75:94:96:1f:e9:90:c3:d5:67:25:90:ca:cf:2c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Apr 20 22:06:33 2024 GMT
            Not After : Apr 19 22:11:33 2025 GMT
        Subject: CN=97F8074E13330002DC85BABCECDDEC55E9C449DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:42:4a:ca:52:70:d8:24:24:2d:f0:cc:60:9e:
                    38:4a:f4:eb:15:59:aa:f7:05:b5:e6:6d:72:b1:80:
                    1e:a0:b3:76:ef:99:13:4a:6e:75:78:20:d2:6b:3a:
                    bb:25:c4:0e:a9:36:62:6b:3c:3f:df:bd:db:c4:ba:
                    de:37:9c:31:81:87:17:c5:51:1c:e6:36:e4:4d:59:
                    8c:91:6f:5e:71:14:52:2b:20:f9:e4:cb:d6:b8:02:
                    7d:7a:49:e9:ed:66:e8:73:57:75:40:a5:05:3e:b5:
                    ef:61:fc:af:f0:de:ea:49:7a:36:c5:a5:56:a7:8a:
                    7b:3d:8e:50:63:ed:29:8e:6c:b4:3d:bf:81:eb:d7:
                    8a:8f:02:41:bc:36:46:7d:31:56:42:42:08:88:e7:
                    e6:2d:db:cf:f5:3f:3b:f9:47:3c:60:4a:a7:64:58:
                    91:f6:3e:a1:d9:77:de:60:21:bf:0b:15:ab:01:a9:
                    7e:7c:8d:63:8f:b9:a0:9d:73:ef:8c:14:0c:e6:21:
                    a5:ca:c5:af:cb:55:44:e6:4a:e8:57:35:1d:5d:00:
                    ad:40:2a:9e:8c:84:3e:aa:2f:34:2d:09:08:0d:d6:
                    a6:82:e9:d2:b5:c0:a1:2b:7d:a6:29:58:c2:2d:5e:
                    09:58:d1:a1:ed:e9:69:1b:13:0c:98:a7:dd:72:1f:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F8:07:4E:13:33:00:02:DC:85:BA:BC:EC:DD:EC:55:E9:C4:49:DF
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS199974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7710::/44

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:1d:b4:7d:b3:35:89:75:30:66:80:cf:d7:1d:99:8e:91:
         a3:a8:b4:d6:52:d8:06:27:33:19:07:a1:99:ff:66:bf:33:4d:
         a7:72:e5:19:b6:bb:20:5d:63:7d:1b:a2:87:69:01:2b:98:af:
         c2:66:fc:b8:a9:a8:34:43:f3:71:3a:fc:4e:0c:04:bc:2a:96:
         63:09:11:7c:1d:1b:3b:2e:71:6f:a1:c9:ad:be:eb:db:0a:97:
         57:97:92:e5:07:0a:5e:37:29:6e:88:22:23:c3:7b:9a:9d:16:
         f6:96:78:49:4b:21:d2:47:bd:a1:f8:8e:1e:16:c7:7b:02:e4:
         cf:e9:7a:84:9d:2d:0a:9c:61:79:a1:b2:be:35:a9:3c:90:e3:
         35:2e:19:5a:11:1c:72:66:24:dc:d6:44:bb:9f:9b:16:14:8c:
         ae:8a:27:76:b0:15:c9:d1:a4:49:36:c3:df:30:1d:c0:fe:85:
         4c:f1:9d:f6:21:06:5b:8c:55:50:e8:56:08:cc:c6:f3:da:bd:
         8c:f6:cf:ea:64:c5:7a:35:00:2c:8b:d3:44:ff:58:e1:72:38:
         be:41:21:ca:e7:87:63:f3:3b:1c:a5:43:cb:97:be:f5:97:02:
         45:4a:d9:29:f7:0f:93:d2:d7:c0:01:a0:ae:dd:cb:f9:48:a2:
         d8:e5:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org