Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209650.roa
File:                     AS209650.roa (raw, json)
Hash identifier:          2AJMnVE/A57YCurvjanIW+K5YmIR/olLoSfmxDnbNHg=
Subject key identifier:   77:E5:D9:52:46:75:E9:FC:E8:49:A8:B7:73:89:75:DA:C0:BF:B2:EF
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       2DDFEFBF9CE9880C530E40D0510CEFC6E88D38DE
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209650.roa
Signing time:             Tue 15 Aug 2023 02:00:28 +0000
ROA not before:           Tue 15 Aug 2023 01:55:28 +0000
ROA not after:            Tue 13 Aug 2024 02:00:28 +0000
asID:                     209650
IP address blocks:        2602:fed2:7302::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:df:ef:bf:9c:e9:88:0c:53:0e:40:d0:51:0c:ef:c6:e8:8d:38:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:28 2023 GMT
            Not After : Aug 13 02:00:28 2024 GMT
        Subject: CN=77E5D9524675E9FCE849A8B7738975DAC0BFB2EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:86:0c:50:d4:0c:cf:88:a5:ee:aa:b3:11:
                    ab:79:14:ea:f5:4c:ee:c3:4d:9e:43:8d:42:fd:56:
                    ee:ca:fa:8d:e4:1c:0f:8f:8a:5f:52:91:c7:00:af:
                    79:26:cd:4a:83:81:1b:0f:3c:45:d2:d2:92:88:3c:
                    0f:83:3c:4a:5c:ce:b3:89:4c:1e:20:d4:df:44:13:
                    26:9a:fd:09:34:d4:18:19:24:bd:c8:e5:e9:0b:7f:
                    37:6b:2f:d6:39:78:05:ec:fa:39:00:cb:33:12:02:
                    8d:e0:9e:24:23:65:f0:84:68:c7:88:37:e9:7e:34:
                    1e:39:cf:f6:cf:28:ee:42:a0:a2:c6:b4:c7:cc:54:
                    29:0e:49:bc:39:96:ef:46:30:d5:7e:84:b0:3e:c8:
                    29:26:69:c7:60:49:78:74:99:12:18:da:da:7d:f2:
                    7e:91:c1:38:4a:82:a9:96:85:d9:f1:2a:10:72:6f:
                    a3:27:4b:72:01:1e:3c:74:f2:79:c9:cb:4f:44:70:
                    3b:de:ce:84:e3:e4:03:dd:8b:95:b5:e2:a0:db:fe:
                    1e:29:b5:4d:00:f3:80:c2:ce:31:8b:4d:30:6d:53:
                    bf:69:43:f5:19:da:9d:70:82:b5:90:48:83:86:45:
                    e6:0a:59:49:b7:7d:6d:64:39:36:41:a5:0b:a5:e3:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:D9:52:46:75:E9:FC:E8:49:A8:B7:73:89:75:DA:C0:BF:B2:EF
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7302::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:19:8a:6c:67:e6:c0:e2:5d:64:3c:9d:af:d1:29:74:88:3d:
         19:1d:ca:aa:a5:c8:86:e5:d3:01:7a:8e:41:61:cf:76:d6:52:
         2b:6f:d3:07:f2:57:a3:50:d6:d1:54:76:0b:a3:f2:6a:de:26:
         3f:8b:07:fd:6b:e8:8b:80:07:3f:96:fb:3e:56:e3:00:c7:9c:
         56:96:fc:c1:48:58:92:7e:03:03:65:75:44:ee:97:06:da:96:
         82:d7:ee:48:a0:75:fa:1d:58:1f:58:c0:c2:27:2a:f1:bb:5a:
         56:76:3a:d6:39:b3:eb:3e:5d:eb:6d:dc:bf:cc:be:16:7f:da:
         2a:39:72:b0:96:01:8c:e9:4b:28:03:24:db:bd:ea:a3:e0:a5:
         df:05:08:0f:24:6b:ff:40:49:b2:ad:b3:fa:b4:d0:df:59:38:
         a1:fb:55:c4:ea:ca:3e:3a:ee:f6:7b:c5:96:c1:0b:85:24:b5:
         8e:81:6d:1d:56:61:11:b2:5e:e8:52:23:4c:21:98:9b:5d:7e:
         39:0d:93:4d:a3:62:dd:67:03:d3:94:08:66:2d:76:d8:a9:06:
         54:16:e7:d8:ba:05:f4:c3:39:fe:80:c9:c4:80:3b:3a:42:fa:
         2a:ac:e0:7d:4c:82:17:65:d9:87:d0:f0:ba:f2:11:3d:bc:54:
         75:72:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org