Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          BH3Cg6CRD7T4xcyWhALAeu4ITVShAtUKqXIYa5Msnvg=
Subject key identifier:   E8:DD:99:1A:79:83:B6:85:17:74:9D:0D:1F:E2:49:5D:E4:EE:CC:26
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5C93067E362B895E8E3BF12CD0559C1D2CFEA7D9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
Signing time:             Sun 21 Apr 2024 16:44:41 +0000
ROA not before:           Sun 21 Apr 2024 16:39:41 +0000
ROA not after:            Sun 20 Apr 2025 16:44:41 +0000
asID:                     20473
IP address blocks:        2602:fed2:7083::/48 maxlen: 48
                          2602:fed2:7086::/48 maxlen: 48
                          2602:fed2:7087::/48 maxlen: 48
                          2602:fed2:7106::/48 maxlen: 48
                          2602:fed2:710e::/48 maxlen: 48
                          2602:fed2:710f::/48 maxlen: 48
                          2602:fed2:7220::/44 maxlen: 48
                          2602:fed2:731b::/48 maxlen: 48
                          2602:fed2:731c::/48 maxlen: 48
                          2602:fed2:7e02::/48 maxlen: 48
                          2602:fed2:7e08::/48 maxlen: 48
                          2602:fed2:7e82::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 06:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:93:06:7e:36:2b:89:5e:8e:3b:f1:2c:d0:55:9c:1d:2c:fe:a7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Apr 21 16:39:41 2024 GMT
            Not After : Apr 20 16:44:41 2025 GMT
        Subject: CN=E8DD991A7983B68517749D0D1FE2495DE4EECC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:ab:fb:b4:09:10:f5:20:0f:34:d0:59:0a:
                    1b:73:26:dd:26:4c:5c:b0:8d:87:03:59:24:14:31:
                    4e:6d:f7:48:2f:f7:3e:f6:6c:c6:40:e4:1e:1d:5a:
                    0d:e0:aa:b5:fc:c0:f9:e4:15:fe:6f:9c:c4:fc:88:
                    38:5d:ed:8a:c5:ab:4d:e3:68:d2:4e:b5:ff:b0:71:
                    39:4c:4d:69:e0:32:b6:1a:8b:a2:2f:96:ec:d4:54:
                    38:f3:49:ed:3a:0c:e6:bc:49:ea:66:4d:36:0e:97:
                    c0:6e:3d:30:d0:84:fe:19:e2:29:ff:7d:ec:e0:e9:
                    bd:0f:83:4d:c6:99:ce:a4:50:9e:f1:d2:90:06:30:
                    37:03:67:2e:ef:95:97:12:af:b4:dd:88:d2:b4:21:
                    c9:3b:14:ad:e7:8d:9e:9e:59:a3:90:77:53:c5:bc:
                    eb:b9:18:a9:1d:57:57:89:55:f5:0b:29:1a:f2:f7:
                    03:75:82:f5:95:84:44:4f:d8:a6:e9:1e:5d:97:da:
                    75:ae:74:ae:6e:fb:00:92:71:67:b3:21:a0:7b:7d:
                    08:41:33:b0:e6:cc:5f:d7:38:1f:c1:31:95:40:a2:
                    b9:4e:d1:8c:ab:ac:28:ae:ea:e0:5b:b3:be:e5:c3:
                    b5:fa:3c:2f:3e:47:77:01:6d:f2:30:fe:06:a8:4d:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DD:99:1A:79:83:B6:85:17:74:9D:0D:1F:E2:49:5D:E4:EE:CC:26
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7083::/48
                  2602:fed2:7086::/47
                  2602:fed2:7106::/48
                  2602:fed2:710e::/47
                  2602:fed2:7220::/44
                  2602:fed2:731b::-2602:fed2:731c:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7e02::/48
                  2602:fed2:7e08::/48
                  2602:fed2:7e82::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:58:d5:8f:31:f7:c1:a0:68:5e:26:6d:7f:24:f8:d9:69:b3:
         da:42:10:28:22:c9:ec:a8:8e:e2:c8:82:05:7f:78:99:8e:d9:
         78:f7:d1:72:2c:68:83:b7:40:5f:e6:76:c3:9a:12:fa:08:9b:
         7e:ed:2e:f8:12:2f:9b:c1:40:8d:6c:47:3b:91:b0:c8:8a:1a:
         1f:0a:c1:ae:20:d7:36:81:6d:62:53:c1:43:30:0e:ab:c9:b3:
         80:4a:ed:85:a2:f6:28:a5:4e:ac:f2:ae:93:2c:ad:45:41:a8:
         22:d2:4a:99:26:be:85:76:c1:50:7b:c2:a6:b7:5e:80:16:a0:
         2f:53:8b:47:f9:49:64:1c:3b:83:fe:c2:29:54:27:02:53:b0:
         39:93:5e:45:04:96:d5:e1:11:d0:13:81:3f:82:94:fd:83:d8:
         71:25:53:56:83:ef:34:8f:d1:ca:ea:7a:ae:ed:2e:e8:9a:5e:
         5a:98:f9:50:bb:d7:cd:a9:e0:86:e2:4a:7c:2a:1f:13:e2:2e:
         b1:f0:a7:b0:ed:14:9a:fb:6e:86:60:9b:f1:b3:dd:e7:a8:20:
         91:45:a3:ad:ac:96:91:a2:25:0b:82:ce:82:cd:db:15:60:d7:
         8d:5a:eb:86:02:b7:b5:27:38:6d:f3:26:fc:91:20:02:5d:10:
         68:f3:fe:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:44:23 2024 by rpki-client on console-fra.rpki-client.org