Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216030.roa
File:                     AS216030.roa (raw, json)
Hash identifier:          tz/38qLox4XR2FHSvnsrlMFvOc1FdV2YKBXt+93IS4M=
Subject key identifier:   37:34:CA:24:F6:8B:52:60:1A:DC:0F:BC:7D:4D:3C:E4:B9:8C:12:02
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       06B147D1A5002F337221E60BC2833A2D842C5581
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216030.roa
Signing time:             Tue 05 Nov 2024 02:51:49 +0000
ROA not before:           Tue 05 Nov 2024 02:46:49 +0000
ROA not after:            Tue 04 Nov 2025 02:51:49 +0000
asID:                     216030
IP address blocks:        2602:fed2:7130::/48 maxlen: 48
                          2602:fed2:7131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 16:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b1:47:d1:a5:00:2f:33:72:21:e6:0b:c2:83:3a:2d:84:2c:55:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Nov  5 02:46:49 2024 GMT
            Not After : Nov  4 02:51:49 2025 GMT
        Subject: CN=3734CA24F68B52601ADC0FBC7D4D3CE4B98C1202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9b:15:62:bf:c2:35:a4:fb:8a:56:46:45:4e:
                    14:03:b5:10:08:18:5a:27:c8:88:b8:02:ff:e5:5c:
                    6b:36:7b:1d:90:aa:1b:26:cc:39:1e:dd:18:63:f4:
                    79:25:ef:4f:d4:b2:28:87:9f:cb:bc:4b:12:70:b2:
                    0d:fd:f5:2a:0a:79:6a:fb:d6:64:7e:aa:06:72:6d:
                    15:18:b0:4c:80:e9:e9:04:12:f9:67:75:49:ca:e1:
                    b4:e4:0a:62:1d:be:18:5a:b7:26:b1:80:4c:37:9d:
                    1a:7f:2f:02:b2:25:59:26:0b:e2:66:ef:c9:9c:b1:
                    43:05:cf:04:a2:e1:0a:d1:c2:43:bb:b2:37:b9:bd:
                    a8:63:20:07:4a:74:a8:9d:d1:ed:4c:3e:80:0d:22:
                    e1:1a:f0:e9:81:d8:58:97:59:14:1c:9e:9e:bd:03:
                    10:2d:ad:1d:09:04:dd:94:12:72:52:4d:0c:c1:ac:
                    01:b8:af:b4:ce:15:bb:81:2a:28:ee:02:97:34:2e:
                    e2:33:48:a3:32:62:64:f1:45:21:26:ca:2d:8f:70:
                    d1:64:8d:2f:ea:22:03:26:10:5b:2b:62:93:f5:46:
                    cc:36:96:2e:4b:78:2c:92:91:66:4e:e4:18:89:58:
                    0b:44:db:76:eb:0f:7d:38:c8:f9:16:25:da:d3:f5:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:34:CA:24:F6:8B:52:60:1A:DC:0F:BC:7D:4D:3C:E4:B9:8C:12:02
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7130::/47

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:e4:85:5f:70:d4:be:ed:c6:35:47:b9:55:06:f9:34:68:
         e7:2b:09:4b:de:d4:4f:08:ca:4f:0d:17:3f:83:86:e0:b9:a4:
         94:81:93:de:db:4f:cf:b1:4f:d8:f2:2d:e8:ee:82:89:e1:f5:
         53:22:85:e0:d3:78:50:e0:4a:89:70:29:78:a1:62:99:a6:03:
         48:7b:1e:e7:fa:2f:2d:e4:3c:10:b1:84:4d:68:46:73:f8:1e:
         71:5e:47:92:b9:86:96:a1:f8:0a:1d:43:2e:80:73:b7:55:70:
         f1:b8:58:61:39:d3:e7:08:38:00:a4:12:28:a3:90:67:35:5e:
         85:74:79:91:fa:6d:e6:f3:9c:88:7a:c0:4f:96:d7:ba:2a:aa:
         f2:2c:30:76:0a:c7:d5:18:b2:34:be:d0:63:93:0a:71:d5:e5:
         a9:39:c3:58:9c:8c:71:d7:af:75:f9:a6:ca:be:6d:5f:68:fb:
         c5:b0:e6:79:22:af:56:a6:da:87:f9:0b:8a:95:3f:d6:6d:90:
         e3:9c:0c:42:16:8e:7b:60:fe:e4:05:49:e0:79:5c:cc:b5:6f:
         2f:f8:fa:7b:14:7e:71:1c:8e:82:22:56:30:04:8c:10:61:90:
         a1:dc:c3:2b:f3:fd:b9:be:71:78:5c:92:db:59:fd:61:62:16:
         a8:99:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:37 2025 by rpki-client