Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          BUg+sFhL7x/xZV8FxLk8N5OSPips7mv2Ex9OM1CTEls=
Subject key identifier:   59:93:68:B4:9B:06:EF:79:3D:F0:5B:5E:F0:1F:A1:8F:82:73:B0:A5
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3012BC5C2B44E3454F8F526FB6A4BCD0D488320C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
Signing time:             Wed 30 Oct 2024 15:23:43 +0000
ROA not before:           Wed 30 Oct 2024 15:18:43 +0000
ROA not after:            Wed 29 Oct 2025 15:23:43 +0000
asID:                     20473
IP address blocks:        2602:fed2:7086::/48 maxlen: 48
                          2602:fed2:7106::/48 maxlen: 48
                          2602:fed2:710e::/48 maxlen: 48
                          2602:fed2:710f::/48 maxlen: 48
                          2602:fed2:7110::/48 maxlen: 48
                          2602:fed2:719a::/48 maxlen: 48
                          2602:fed2:719e::/48 maxlen: 48
                          2602:fed2:730d::/48 maxlen: 48
                          2602:fed2:7316::/48 maxlen: 48
                          2602:fed2:731c::/48 maxlen: 48
                          2602:fed2:7e08::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:12:bc:5c:2b:44:e3:45:4f:8f:52:6f:b6:a4:bc:d0:d4:88:32:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 30 15:18:43 2024 GMT
            Not After : Oct 29 15:23:43 2025 GMT
        Subject: CN=599368B49B06EF793DF05B5EF01FA18F8273B0A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:08:fc:53:de:1e:31:f7:a4:de:cd:1f:0e:58:
                    8e:64:d8:b2:76:f1:e0:b9:1d:7e:a4:36:02:e0:19:
                    b8:96:67:92:29:28:3b:e0:43:3d:94:81:26:6a:d6:
                    df:7d:2b:8b:67:8f:7c:af:76:ab:eb:0e:70:40:72:
                    29:78:bb:55:90:cb:1e:9c:c8:d9:d8:39:3c:4c:5e:
                    38:79:47:f4:39:71:9e:e8:61:b6:5c:c4:22:06:5a:
                    ae:f4:4b:3b:87:58:6d:83:47:97:1e:3b:04:d4:49:
                    c2:a8:b4:81:19:29:92:a0:04:2c:94:33:bd:3d:f2:
                    f4:ab:7e:34:b9:9b:e6:4f:f3:c1:e4:d3:82:5b:34:
                    f1:6e:72:35:82:6f:c6:8d:00:4b:8f:7e:c8:76:17:
                    ff:49:3c:33:0d:87:92:22:50:e8:31:a8:9c:c1:07:
                    f0:8e:8a:96:13:8d:20:a3:1e:87:85:ca:63:4c:c3:
                    fc:77:fb:77:d1:5e:35:b0:a1:f4:cd:ad:e5:c0:c4:
                    20:b5:36:31:b4:ba:e3:fd:d3:d5:77:eb:39:61:77:
                    56:1d:40:e5:c7:58:6e:bb:7e:46:c5:b3:95:ff:bf:
                    9d:70:0c:49:7b:b3:34:0d:82:04:6e:3f:85:b5:21:
                    20:fb:68:51:c4:63:27:9c:11:8f:58:6c:31:67:e9:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:93:68:B4:9B:06:EF:79:3D:F0:5B:5E:F0:1F:A1:8F:82:73:B0:A5
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7086::/48
                  2602:fed2:7106::/48
                  2602:fed2:710e::-2602:fed2:7110:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:719a::/48
                  2602:fed2:719e::/48
                  2602:fed2:730d::/48
                  2602:fed2:7316::/48
                  2602:fed2:731c::/48
                  2602:fed2:7e08::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:74:42:92:ca:fa:25:43:1c:98:e2:cf:95:1e:07:18:ee:bf:
         e3:27:e2:88:fe:07:9c:66:99:0f:8f:f4:81:66:b8:a1:47:37:
         02:80:fa:f1:a3:15:77:51:24:98:93:ec:4d:42:7b:8d:e0:bd:
         84:74:ae:99:49:48:28:f7:30:db:da:4c:41:d5:97:9e:8c:df:
         b0:28:58:40:e8:34:e9:fb:ec:1f:2b:eb:4c:2b:32:31:8c:4a:
         55:15:9d:3b:1e:58:22:41:14:e1:0a:78:35:e1:17:1b:fd:68:
         5b:ce:1f:6b:62:1c:fc:11:8d:7b:5b:af:df:7b:55:61:25:7b:
         03:28:18:13:a0:63:56:39:e2:00:70:41:f1:99:cf:14:92:81:
         fa:f1:56:0e:c4:ea:47:5c:bf:da:49:45:21:f8:b7:69:7c:8c:
         4c:58:f3:6d:74:63:77:b4:c6:34:5c:0f:61:c4:f2:f2:c3:62:
         a0:11:dd:54:ca:10:33:21:c0:18:4c:dd:04:2f:65:54:31:b6:
         f8:c4:35:8e:d2:5a:27:6b:0a:6d:22:39:ad:4a:ff:3e:83:19:
         b9:7a:2b:ba:5c:2a:97:ba:f9:0b:5a:5b:ef:bb:37:82:63:a5:
         07:90:02:ec:f6:49:a2:90:03:57:9d:8f:ab:64:38:c3:5f:f1:
         73:a1:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:42 2024 by rpki-client on console-fra.rpki-client.org