Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205749.roa
File:                     AS205749.roa (raw, json)
Hash identifier:          bQ8kslNBXaU+QVqni6DjNRyzrq3d0vhIQTIHeM1+N6k=
Subject key identifier:   84:58:AE:C5:33:60:FE:AC:BE:CF:E5:CB:AA:B4:10:E8:1B:99:15:BE
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6287791CFE3E8F2AA628B236C8E75440CFE3898E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205749.roa
Signing time:             Thu 03 Oct 2024 23:06:39 +0000
ROA not before:           Thu 03 Oct 2024 23:01:39 +0000
ROA not after:            Thu 02 Oct 2025 23:06:39 +0000
asID:                     205749
IP address blocks:        2602:fed2:7191::/48 maxlen: 48
                          2602:fed2:7193::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:87:79:1c:fe:3e:8f:2a:a6:28:b2:36:c8:e7:54:40:cf:e3:89:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct  3 23:01:39 2024 GMT
            Not After : Oct  2 23:06:39 2025 GMT
        Subject: CN=8458AEC53360FEACBECFE5CBAAB410E81B9915BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:77:3f:0d:21:07:56:6d:27:00:d9:c7:fb:
                    c5:7d:e8:89:54:40:60:ca:f1:72:14:35:dc:78:c8:
                    ea:26:88:5e:e4:0a:73:f6:91:bc:6c:60:9b:f9:8a:
                    2b:82:96:26:8c:e6:4f:f1:9d:16:0e:a1:d8:40:ed:
                    f5:9e:8c:8b:a0:cd:86:29:df:8b:2f:58:73:fc:8b:
                    10:e6:d7:d3:0a:00:2a:ed:76:f1:a8:2c:c8:35:25:
                    5d:41:fe:3f:5e:59:d9:c1:37:c7:d6:d3:0a:ac:00:
                    2a:c2:3a:4b:f5:f3:93:b8:81:dd:28:fd:4c:cd:08:
                    bd:38:02:7b:79:d3:d4:ba:e6:b5:4a:44:99:25:7f:
                    c3:3e:da:29:4a:75:17:bf:1f:f0:99:48:b1:26:02:
                    b7:33:d1:f8:1b:c0:ed:ee:08:08:dd:09:77:20:12:
                    1b:03:b9:58:8e:62:4f:5e:a2:8f:97:26:0a:37:ef:
                    73:ff:0c:39:e3:f0:2a:b3:a3:96:58:d0:cb:3b:be:
                    8c:b4:92:49:4b:81:48:78:b4:2f:6f:6b:79:1c:a6:
                    b1:58:5e:a8:db:04:5b:80:58:02:7b:0c:15:25:55:
                    cf:86:b5:b4:b1:2c:1a:b4:c0:c4:33:31:d1:9e:dd:
                    b7:1c:b2:ff:08:fe:7b:f9:2d:90:9a:8c:2e:f2:3b:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:58:AE:C5:33:60:FE:AC:BE:CF:E5:CB:AA:B4:10:E8:1B:99:15:BE
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205749.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7191::/48
                  2602:fed2:7193::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:82:5f:f0:f9:80:15:bd:9b:8f:82:b6:99:a5:e5:a3:2b:
         5f:29:eb:3a:8b:e8:d0:41:ce:99:88:dd:48:18:50:8e:b5:c1:
         e1:e5:c0:ea:6a:71:3e:1d:b0:0e:95:bf:34:81:6c:75:5f:16:
         7d:16:36:68:8c:ef:b6:e2:e0:9e:ae:af:99:65:4b:ca:18:00:
         63:2c:c6:c4:d6:27:f4:9c:b6:c0:23:dd:04:31:73:4b:60:5a:
         ba:25:b2:c8:8f:5b:3a:29:b4:2d:57:1d:6f:56:da:98:92:53:
         9c:82:6e:b5:4c:1d:22:f5:0d:bf:44:be:78:75:76:de:51:f4:
         9d:34:05:09:7c:ab:27:23:09:91:5d:c3:74:52:56:d2:1e:ee:
         9a:ba:8c:f3:0d:06:d9:d4:b7:9f:53:7f:70:ee:9b:02:85:78:
         a7:62:bc:a7:52:fe:64:53:fb:42:93:85:4f:de:42:3f:be:bf:
         bf:31:8b:65:f4:a5:b0:ca:12:73:53:b5:ab:32:0b:dd:c4:ee:
         79:ab:dc:bf:92:00:0b:6e:9a:56:7c:b1:ea:de:9a:e8:7e:d0:
         5c:61:26:1a:98:29:e7:25:a5:57:9c:30:f2:90:a0:a3:3b:ae:
         92:7c:41:4b:b4:de:0d:af:9e:11:c2:53:d1:9b:87:76:a4:7b:
         84:9f:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:23 2024 by rpki-client on console-fra.rpki-client.org