Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209650.roa
File:                     AS209650.roa (raw, json)
Hash identifier:          Z+qd5f2MRP7m5mpN/EMBgwS1tyaAXSw6dJq+7RuKwUo=
Subject key identifier:   C4:F8:94:15:DF:2E:E3:0E:30:06:DF:FA:04:D6:78:71:C2:5F:19:E9
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1DF552DA9BDF9B68F949D0C7E320B088691FA8FD
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209650.roa
Signing time:             Tue 16 Jul 2024 02:42:26 +0000
ROA not before:           Tue 16 Jul 2024 02:37:26 +0000
ROA not after:            Tue 15 Jul 2025 02:42:26 +0000
asID:                     209650
IP address blocks:        2602:fed2:7302::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f5:52:da:9b:df:9b:68:f9:49:d0:c7:e3:20:b0:88:69:1f:a8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:26 2024 GMT
            Not After : Jul 15 02:42:26 2025 GMT
        Subject: CN=C4F89415DF2EE30E3006DFFA04D67871C25F19E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6d:78:65:90:93:ae:36:36:5d:2e:cf:4e:c8:
                    25:d5:1d:9a:8b:c7:46:0b:9e:e2:67:c3:db:6a:33:
                    95:1f:5d:46:fa:96:15:74:be:23:f7:b8:62:87:3e:
                    cf:a0:e3:d8:0b:bb:af:6f:b6:d7:01:b4:46:f0:90:
                    d5:f9:2a:19:b9:03:4f:62:5b:d0:bd:07:db:1c:a2:
                    63:57:a5:cd:5e:1c:64:ee:85:51:82:e2:b4:8d:07:
                    1e:83:b0:ad:b7:4b:53:85:73:67:d8:d3:ba:9e:7c:
                    1b:ea:fd:0b:4d:e6:73:c4:1a:b4:6e:d3:03:b8:32:
                    89:5b:1e:14:db:69:9d:17:28:7d:9e:c9:a6:7e:db:
                    06:e5:09:45:11:4a:0f:4c:0f:45:a4:8b:af:84:5f:
                    bd:ae:c1:7c:2c:e7:2f:78:99:81:18:0a:d9:a9:ad:
                    9a:ca:7a:e7:fc:78:05:fa:38:df:2d:4d:92:e8:10:
                    12:30:f4:4d:6e:a0:bc:8b:a7:c1:86:c3:8f:ae:57:
                    9c:5d:40:17:cc:d4:35:db:ed:89:85:92:27:5c:45:
                    2c:bf:42:93:62:d8:a4:4b:2f:79:6d:e5:c5:cf:f3:
                    11:4f:f7:42:f3:c0:b0:e8:59:a2:85:d9:e2:0c:35:
                    db:6f:b6:8a:03:84:6c:e0:35:ca:4f:6a:23:83:95:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F8:94:15:DF:2E:E3:0E:30:06:DF:FA:04:D6:78:71:C2:5F:19:E9
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7302::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:03:da:ef:57:e6:0d:ed:eb:65:91:f4:db:df:e9:33:c8:
         b4:ac:72:68:18:3c:f7:2d:54:ad:c7:aa:d0:72:96:e4:a8:53:
         33:8a:d9:8b:43:4e:a3:79:9d:42:c5:af:5f:d7:15:55:db:c9:
         d8:7d:86:30:27:c7:6a:ee:41:38:11:44:ef:f3:4e:88:56:ce:
         5e:9c:f2:9f:dd:3d:8e:fa:65:e0:6b:a2:24:bc:6a:ec:d1:a5:
         fc:7b:10:85:33:de:f1:80:2a:5d:51:a0:af:94:18:11:02:8c:
         07:f1:95:31:d9:a5:6c:5a:b9:4c:d6:65:1a:0a:91:55:46:64:
         9e:be:47:1e:94:5c:13:96:d6:5a:a6:66:79:60:44:e9:8a:97:
         b1:ba:e8:fe:4a:26:d7:2e:b0:48:e9:fc:12:9c:fd:c0:3b:3f:
         ba:b3:cd:0d:41:9b:85:28:de:c3:b7:97:38:58:e6:dc:b0:8b:
         d0:cf:ed:4f:ae:b6:fb:3a:42:b0:15:03:a6:f0:41:ba:21:f8:
         97:d7:5e:86:5a:29:f2:47:e7:f0:79:16:c8:9e:89:d1:f9:75:
         de:26:fb:ff:53:04:b9:11:98:0e:88:43:4a:08:89:ee:62:83:
         4e:69:a8:4c:b6:9a:d0:03:61:c9:52:1d:b9:22:c2:75:ad:f7:
         c1:88:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org