Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216271.roa
File:                     AS216271.roa (raw, json)
Hash identifier:          QrHqz1hwksf7NpxTXf5SQRB/gm0ngjMYyHgjBLoBTpk=
Subject key identifier:   72:F8:AC:66:86:47:FD:4B:CB:71:93:4F:16:7B:A6:8E:B7:C9:22:BD
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       124A66E9D4D360ED195C57E73A9CDF10C450AAD9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216271.roa
Signing time:             Tue 22 Oct 2024 12:33:14 +0000
ROA not before:           Tue 22 Oct 2024 12:28:14 +0000
ROA not after:            Tue 21 Oct 2025 12:33:14 +0000
asID:                     216271
IP address blocks:        2602:fed2:7600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4a:66:e9:d4:d3:60:ed:19:5c:57:e7:3a:9c:df:10:c4:50:aa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 22 12:28:14 2024 GMT
            Not After : Oct 21 12:33:14 2025 GMT
        Subject: CN=72F8AC668647FD4BCB71934F167BA68EB7C922BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7f:cc:44:44:7b:3f:aa:b2:5a:ea:b3:4f:ab:
                    4e:fc:0e:e7:bd:62:d4:d4:bf:7e:f6:3d:5b:53:f5:
                    ef:d7:f6:9a:1c:aa:fe:b7:fc:79:9c:9a:e8:a6:5c:
                    8e:94:85:c2:cb:5d:72:1c:f1:55:86:23:ab:59:59:
                    b5:34:ec:8c:a7:60:c4:3c:80:bd:0d:6f:4a:5c:ba:
                    6b:cf:ff:a3:f8:70:20:07:ca:23:32:62:81:b4:e7:
                    57:5f:b6:6f:1e:f6:5c:b3:94:25:ef:8b:ed:24:ea:
                    aa:55:0d:36:ec:9f:cf:4e:1a:f1:d9:85:d9:91:fb:
                    1c:7d:3a:75:bc:c8:5c:14:7f:30:57:8d:14:67:79:
                    54:f4:d6:b6:13:2d:b3:61:45:59:73:bc:d2:c4:47:
                    b3:8c:e5:37:5b:47:47:19:b9:1e:31:5a:23:13:4d:
                    77:42:37:ae:58:da:c7:9d:7d:8b:2b:6c:52:76:51:
                    cd:a6:84:86:aa:f1:80:a7:d7:2a:e2:f4:f9:9a:80:
                    60:59:ca:4e:54:5a:da:5a:fe:67:f7:bf:b8:1d:10:
                    b5:6d:c1:0a:50:85:41:ce:35:e5:d7:5f:60:4e:4a:
                    06:e8:61:55:75:cf:6c:51:bb:e9:d3:93:e3:69:eb:
                    46:bd:a1:24:1b:a4:66:6e:5b:49:98:40:8d:ef:37:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F8:AC:66:86:47:FD:4B:CB:71:93:4F:16:7B:A6:8E:B7:C9:22:BD
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7600::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:d8:40:37:34:a5:41:6c:88:37:e4:23:c7:31:bb:81:12:
         36:ba:d2:0b:99:4f:dd:f3:1e:08:58:ee:9a:f2:c0:f0:e3:95:
         a4:b5:7c:ba:c5:6e:1a:75:9e:67:af:65:dc:ef:51:75:40:f7:
         35:89:e2:5e:87:8b:2b:bf:2e:4c:3f:05:ed:03:af:21:d7:14:
         c0:5e:11:30:88:c8:df:47:05:3b:b9:ee:c5:33:ef:56:3c:1c:
         7f:ee:e7:9f:48:2a:8a:28:45:64:f7:3f:92:ee:8a:39:00:22:
         ce:11:ad:1c:2e:a2:1a:72:2c:58:95:4c:e6:6a:59:5c:7f:de:
         26:da:57:d7:32:8f:12:eb:19:5b:7d:ab:51:5f:0b:03:de:79:
         a3:c9:80:ad:86:34:dc:c5:c4:bc:81:e8:35:fe:03:b5:43:a6:
         82:47:d0:45:9a:e5:68:a3:97:ae:f5:dd:a9:cb:64:87:02:af:
         b2:21:cc:3a:50:bf:15:f9:8b:0b:b3:2c:29:66:4f:90:ab:88:
         2d:34:93:93:07:07:de:10:eb:57:98:86:b7:60:c4:31:1e:09:
         8e:e9:2c:3c:ad:27:63:b9:c9:79:13:78:8c:76:0a:5a:df:a4:
         c2:3c:7b:56:0e:9d:35:53:30:ba:a1:33:50:db:ad:2a:32:ff:
         73:38:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:42 2024 by rpki-client on console-fra.rpki-client.org