Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209864.roa
File:                     AS209864.roa (raw, json)
Hash identifier:          uh6vOB9JdE+dI5KWaJu/C751wJGeiQovwyVBtFfjs1w=
Subject key identifier:   C1:51:4D:94:81:11:DD:9C:8A:2B:A7:7A:D4:A3:26:26:0E:C6:B7:9A
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       27DDF762D55595D49838DD9FB134068E2D5CCD67
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209864.roa
Signing time:             Tue 16 Jul 2024 02:42:28 +0000
ROA not before:           Tue 16 Jul 2024 02:37:28 +0000
ROA not after:            Tue 15 Jul 2025 02:42:28 +0000
asID:                     209864
IP address blocks:        2602:fed2:7101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:dd:f7:62:d5:55:95:d4:98:38:dd:9f:b1:34:06:8e:2d:5c:cd:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:28 2024 GMT
            Not After : Jul 15 02:42:28 2025 GMT
        Subject: CN=C1514D948111DD9C8A2BA77AD4A326260EC6B79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:98:46:da:bc:bb:f5:aa:28:6e:03:53:3d:
                    88:b0:ac:12:df:15:d1:17:2f:51:5b:7d:73:52:c1:
                    b5:52:a1:7e:d6:95:26:94:98:77:c9:aa:41:f4:d3:
                    c5:03:d8:e6:58:af:d6:d0:f0:7e:91:8a:9d:f1:11:
                    22:35:58:63:03:0c:f7:3b:47:77:6b:ac:22:e6:5b:
                    72:26:1e:92:3a:14:84:e6:21:a7:68:d1:77:65:e6:
                    d7:50:37:a8:8a:d2:b1:81:a3:d5:34:63:71:bf:ee:
                    9c:cb:33:b0:39:5d:5b:5f:16:e4:1a:fe:56:68:b4:
                    7e:4b:84:58:f5:2d:b8:59:d3:42:d4:98:d1:a6:ce:
                    9c:2c:8f:07:bb:90:69:3a:a9:30:bc:d6:d7:c3:84:
                    ee:3e:94:93:f9:fe:55:c5:b1:fa:28:8e:02:5b:f4:
                    38:85:7b:00:bb:72:22:32:23:0c:a0:26:c5:03:be:
                    e4:fc:50:77:e4:e5:b8:8c:4b:c2:33:ad:ac:75:38:
                    7a:1c:bb:5d:e6:3b:a0:aa:06:c5:2a:e0:62:e6:60:
                    87:80:c6:b7:2d:fd:16:85:7c:e4:0f:9c:c7:f6:60:
                    eb:ba:fd:3b:0e:97:6b:f5:7f:40:6a:75:4d:4e:5a:
                    49:a8:38:b2:13:eb:37:d3:e8:ba:08:5f:7c:ad:7c:
                    2e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:51:4D:94:81:11:DD:9C:8A:2B:A7:7A:D4:A3:26:26:0E:C6:B7:9A
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209864.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7101::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:eb:a5:4a:85:fc:51:2d:14:13:ed:5a:a7:70:73:5f:09:dd:
         87:d2:23:0d:b4:a1:54:77:b8:0f:49:7f:4e:13:2a:7d:b6:32:
         88:5c:ad:65:8c:d2:0b:de:53:70:85:12:ad:86:d6:67:0d:e7:
         df:d2:5b:fc:d9:37:d3:b9:88:09:d1:f7:e6:ba:19:76:8e:2f:
         41:4c:50:6a:cc:71:12:35:6e:4f:d0:1e:be:9a:a1:5f:bb:c1:
         95:75:e6:49:ad:63:57:28:e9:ce:e8:34:44:a2:81:71:7e:77:
         dc:4c:cd:33:4c:09:92:5b:3c:41:8b:30:f4:54:e1:a3:b7:49:
         ef:f3:f1:c4:51:f1:20:e8:fe:21:a4:98:13:9d:f2:7f:eb:6b:
         0e:4e:ac:e9:ac:22:46:2a:68:87:f8:fb:3d:97:05:fd:df:35:
         eb:17:92:5d:36:e9:b7:d4:ef:2c:05:7d:b7:d8:2d:7b:f8:d3:
         dc:52:03:0d:83:90:e4:69:d5:0e:a1:ba:2b:0a:32:06:97:93:
         74:28:89:2a:30:b4:81:54:33:77:a0:1d:2d:28:c9:ea:47:c1:
         b2:5c:1f:a2:cc:0c:e7:d9:a7:fb:eb:e6:9d:ac:69:a5:ff:3c:
         48:d2:80:1a:dc:c7:a3:91:0e:ab:07:9f:8d:37:6f:30:7e:3d:
         8d:05:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org