Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS207328.roa
File:                     AS207328.roa (raw, json)
Hash identifier:          cSsJ2zyj1W0fxwZUpo8SK3xMMf2O73uee4LuRzOABcQ=
Subject key identifier:   5A:18:99:35:2B:6C:D4:49:BA:91:3D:6A:6D:C0:B5:F0:0D:21:4E:2D
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       37805D91F06DCCDC8233D2412B2F00EB1EE46FCB
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS207328.roa
Signing time:             Mon 22 Jan 2024 19:12:49 +0000
ROA not before:           Mon 22 Jan 2024 19:07:49 +0000
ROA not after:            Mon 20 Jan 2025 19:12:49 +0000
asID:                     207328
IP address blocks:        2602:fed2:7103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:80:5d:91:f0:6d:cc:dc:82:33:d2:41:2b:2f:00:eb:1e:e4:6f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 22 19:07:49 2024 GMT
            Not After : Jan 20 19:12:49 2025 GMT
        Subject: CN=5A1899352B6CD449BA913D6A6DC0B5F00D214E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:6e:80:af:0d:8e:be:32:b6:35:5d:6b:1f:
                    0f:39:4e:c1:45:d2:aa:b4:ad:f7:5a:03:54:77:76:
                    45:07:34:cd:87:39:b7:06:60:98:a9:93:e1:ff:3b:
                    56:1e:90:9d:58:53:45:b1:26:67:e7:e1:d9:54:23:
                    5b:61:4d:e2:1f:4f:48:9c:0a:19:d5:f5:01:82:b3:
                    f6:47:d1:b7:fd:57:84:73:35:75:af:f9:17:a7:fc:
                    e1:bc:b2:53:bc:40:b5:c3:bc:f3:f9:cc:49:ed:12:
                    67:93:df:13:72:cc:d2:ed:74:15:38:6a:d1:c3:5c:
                    c7:96:06:1c:0e:e3:49:b8:d2:ee:bd:3d:16:b3:92:
                    db:8f:da:8f:fb:bc:41:e8:10:cc:20:f6:48:c0:7e:
                    0a:27:d2:ef:cd:0c:a8:cf:cd:5b:a6:ef:4a:9e:6f:
                    7f:d8:fb:d5:d7:fd:eb:e8:14:e9:88:a5:e8:4b:d7:
                    8f:34:6f:d2:c5:d3:c3:1b:7e:0b:c6:4a:54:8f:dd:
                    2e:5e:0f:97:1a:0d:97:1c:a8:62:a2:66:87:0b:6f:
                    a6:aa:09:50:3d:14:3f:d0:72:ce:50:2f:50:b6:2d:
                    66:0f:13:fc:1b:6e:92:e5:a1:35:f2:c8:a6:26:1b:
                    be:83:36:7f:13:e3:77:fa:28:34:3f:fa:18:d2:5c:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:18:99:35:2B:6C:D4:49:BA:91:3D:6A:6D:C0:B5:F0:0D:21:4E:2D
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS207328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7103::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:ec:ef:15:f3:91:41:ac:94:70:cc:bb:fd:39:42:a3:2a:
         16:22:3e:6a:84:99:e1:ff:1b:63:40:ef:87:d9:14:4c:87:54:
         14:10:4c:0d:42:57:5f:10:e2:d3:04:a5:07:9e:85:f5:e0:48:
         4b:6a:8c:85:44:42:fb:36:0a:2f:d5:f6:62:9d:ca:7d:1c:4c:
         4e:2a:c6:70:ef:ee:76:9d:1e:c5:32:9d:aa:5d:35:8d:ca:01:
         a1:8e:c3:80:95:2b:cf:8a:7d:06:69:55:57:26:1e:01:9e:3b:
         15:c4:56:77:04:bd:2b:52:7d:88:56:c1:56:f3:77:8f:75:ac:
         7f:93:d9:aa:01:b1:3d:37:a0:ae:a7:a4:f0:d4:a8:7b:dc:90:
         78:66:1e:2b:70:9b:bd:50:03:94:63:09:d5:f8:fd:c7:f6:d5:
         46:fb:2e:49:52:61:5b:f5:10:f5:79:41:f0:c9:9e:5a:45:c7:
         ef:f9:9b:3e:1a:60:51:db:16:79:2a:79:b3:9a:ec:d4:e8:24:
         b2:8a:96:b1:84:ec:c8:8a:73:79:db:02:ff:6d:bf:e0:2e:68:
         91:cb:50:78:37:ff:22:d3:60:0c:73:29:b6:44:07:46:17:6b:
         7f:ed:0e:3c:5e:c3:00:34:0a:a1:73:96:04:ad:08:bd:2b:13:
         14:d1:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org