Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205212.roa
File:                     AS205212.roa (raw, json)
Hash identifier:          CwtemUweJoncraAP4VAeuMfe/ihlnad2TEsPvQT5L5E=
Subject key identifier:   BE:D1:28:79:47:1A:9A:84:16:FF:F5:07:DE:30:21:8C:02:22:E2:0F
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6E933C51B45A18F45107E467073149D6AE8D0FA7
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205212.roa
Signing time:             Sat 13 Jan 2024 00:08:45 +0000
ROA not before:           Sat 13 Jan 2024 00:03:45 +0000
ROA not after:            Sat 11 Jan 2025 00:08:45 +0000
asID:                     205212
IP address blocks:        2602:fed2:7070::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:93:3c:51:b4:5a:18:f4:51:07:e4:67:07:31:49:d6:ae:8d:0f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 13 00:03:45 2024 GMT
            Not After : Jan 11 00:08:45 2025 GMT
        Subject: CN=BED12879471A9A8416FFF507DE30218C0222E20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:ec:f4:1f:5a:5e:44:9e:54:fa:5c:c9:1f:
                    fe:46:69:b6:81:6a:59:4e:39:6e:ee:54:2c:d1:55:
                    31:9b:6c:54:3e:4a:ff:5b:ad:07:06:59:2d:d3:4f:
                    87:95:9f:a8:20:3f:8b:d8:7d:40:34:4d:b4:e0:76:
                    ff:e0:8b:7d:8a:a8:7e:81:10:52:8b:34:8c:2c:e3:
                    e7:d4:18:e4:bc:70:1c:f0:ad:be:2b:fd:ac:42:68:
                    c9:a1:22:af:0e:07:0a:65:9c:b7:19:e7:b2:14:54:
                    d0:d1:21:89:f8:e2:b0:9f:10:4d:42:a2:bd:02:d1:
                    95:42:67:b2:b3:50:3c:f6:cf:4c:92:d8:79:4f:39:
                    c9:35:68:4e:7d:6a:15:64:ba:95:54:dc:d0:bc:06:
                    14:5d:07:8a:90:f1:bd:a2:84:56:1c:02:44:6a:aa:
                    19:86:92:89:88:c9:cb:41:a9:97:b1:89:63:c2:d4:
                    f2:bd:b3:31:17:66:77:6c:dd:6c:91:64:58:96:f9:
                    95:93:6c:0c:68:3f:75:cc:39:7f:8a:f9:f5:1e:7e:
                    68:c0:a3:0b:4f:eb:8b:8d:db:5c:88:ba:35:69:c8:
                    f2:29:48:cd:d2:86:ba:26:d3:aa:a6:c5:f0:39:70:
                    aa:e8:27:7d:43:9f:91:5e:2d:c2:2b:1b:fc:8a:9e:
                    ca:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D1:28:79:47:1A:9A:84:16:FF:F5:07:DE:30:21:8C:02:22:E2:0F
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205212.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7070::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:58:f7:a0:53:e7:60:23:dd:83:94:f0:2b:06:07:f9:11:77:
         4a:81:76:b5:ca:86:66:38:94:32:fb:39:05:da:8c:0a:48:1f:
         bd:91:20:43:ad:e3:ac:79:6b:f5:52:c2:db:6d:57:bb:aa:21:
         1e:86:8f:e8:6b:80:3c:37:16:dd:1d:39:a5:cf:bf:58:53:53:
         bb:e6:6b:da:f1:50:b8:82:8e:ec:b3:5f:c6:46:1e:9b:e7:57:
         1c:81:c2:66:4a:98:4b:08:d8:4d:82:18:56:ca:86:63:80:af:
         7e:04:4f:fa:a9:ab:01:57:dd:58:42:c9:1e:33:40:07:70:95:
         a1:c0:f3:df:48:af:cf:0a:92:c2:40:97:ed:0c:ec:4b:6a:ba:
         03:0f:7f:fa:62:52:ef:2a:de:ea:ea:3e:c1:2c:e4:96:34:18:
         91:14:d0:7d:d1:d8:0c:b4:78:a1:ba:fc:71:53:dd:b7:fe:c4:
         77:66:ff:aa:6e:b2:27:45:af:42:aa:c9:9c:f1:14:c2:65:fc:
         02:2a:fb:42:1e:31:4b:6b:9e:47:de:5f:bd:96:ec:27:78:fa:
         af:c5:6d:61:50:e0:cd:45:6d:32:f7:f6:1e:b3:70:52:d4:36:
         0c:84:3f:2a:65:09:93:5e:18:a7:a8:15:1a:e1:0d:09:bb:57:
         fd:c2:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:59:50 2024 by rpki-client on console-ams.rpki-client.org