Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          VisA+HoKBVW1MiYXYX4+IogOYDE1LxGCbfqXCgytHU4=
Subject key identifier:   23:6A:21:A6:EB:52:A3:08:81:E2:76:AC:7A:D0:90:F2:9B:CA:48:C6
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       376D42B89698394D2E6247247BA8DE2B1E4ED5EC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
Signing time:             Fri 03 Nov 2023 17:37:31 +0000
ROA not before:           Fri 03 Nov 2023 17:32:31 +0000
ROA not after:            Fri 01 Nov 2024 17:37:31 +0000
asID:                     23470
IP address blocks:        2602:fed2:7081::/48 maxlen: 48
                          2602:fed2:7314::/48 maxlen: 48
                          2602:fed2:7318::/48 maxlen: 48
                          2602:fed2:7319::/48 maxlen: 48
                          2602:fed2:7708::/48 maxlen: 48
                          2602:fed2:7e04::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 03:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6d:42:b8:96:98:39:4d:2e:62:47:24:7b:a8:de:2b:1e:4e:d5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Nov  3 17:32:31 2023 GMT
            Not After : Nov  1 17:37:31 2024 GMT
        Subject: CN=236A21A6EB52A30881E276AC7AD090F29BCA48C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:8a:73:55:a7:8f:32:00:15:fa:12:bf:b3:
                    7f:1f:ac:7a:d3:8a:9c:0c:75:8e:b1:ce:36:3e:6a:
                    0d:f5:a2:5c:f3:8e:bb:f6:6d:61:c3:af:e0:07:19:
                    fc:49:cf:7f:2c:df:24:f1:b5:42:c2:6a:5b:4f:ea:
                    7b:41:a2:af:b0:61:54:3c:5d:d1:da:34:68:7a:6c:
                    a7:ce:dd:96:1b:91:b8:e7:6d:8e:be:da:f3:d5:8d:
                    52:cb:73:06:5b:7a:67:0a:90:59:77:43:25:74:e8:
                    6c:3f:0e:87:ac:6a:5f:46:5a:50:d7:f2:6d:9d:a8:
                    3a:5f:6c:9e:10:7c:b8:c0:d0:70:fa:10:d5:a4:03:
                    5e:95:b1:03:de:86:e4:ca:5d:ec:63:b9:35:30:77:
                    e4:07:b4:36:79:aa:28:f0:bf:5d:3e:6f:a7:24:c1:
                    6c:32:7f:b3:7b:19:ff:42:21:65:6d:1a:e2:f3:53:
                    2d:98:13:dc:e1:51:e5:ab:58:aa:7c:74:6a:69:38:
                    a0:be:bf:2d:43:76:ea:09:4c:83:78:c8:43:bb:7b:
                    8b:a7:93:04:bf:a2:e9:71:9a:cf:24:c5:5a:3c:48:
                    8d:23:9a:72:ea:dd:13:c8:9b:5f:bd:94:2d:0f:e3:
                    c6:f4:8f:f3:d5:fd:fc:ea:02:2c:33:f4:e4:b9:10:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6A:21:A6:EB:52:A3:08:81:E2:76:AC:7A:D0:90:F2:9B:CA:48:C6
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7081::/48
                  2602:fed2:7314::/48
                  2602:fed2:7318::/47
                  2602:fed2:7708::/48
                  2602:fed2:7e04::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:66:11:90:87:3d:59:c3:9c:2d:bb:3c:5e:e1:a5:e0:f4:2c:
         fd:a8:c8:83:10:33:42:b6:49:63:55:7f:a5:9c:46:44:ae:1c:
         93:b9:86:fa:3c:0a:3a:f5:e6:05:c4:2e:0d:ee:c0:57:f7:78:
         3f:8e:74:7f:4d:be:26:7b:56:e9:33:bb:30:d0:57:4b:e2:8d:
         89:52:00:7b:2e:ba:3c:ea:86:cf:f8:48:db:58:0f:ac:6c:98:
         2a:4e:06:12:c4:34:f5:38:89:6d:5d:c9:30:91:24:23:71:68:
         68:2f:a9:16:7c:4d:9d:80:c3:f0:69:92:bc:61:46:e5:16:58:
         e3:b2:f2:93:7a:62:22:72:64:b2:ce:a2:8b:4a:48:0a:5a:c4:
         cd:d7:f5:55:f8:e3:7d:9f:f1:08:b7:16:68:47:0f:88:88:13:
         fd:46:63:17:89:0b:67:bc:5d:27:c4:9d:b1:16:a0:e6:6e:f2:
         1b:13:88:46:bb:99:44:c6:5b:5b:1c:ba:32:9f:e2:c2:ba:f3:
         ac:64:85:8b:eb:45:54:2d:05:05:55:dc:9d:12:41:cc:5e:64:
         2e:d8:df:bd:4d:65:fc:d9:62:70:21:12:1f:d1:7a:19:a4:82:
         97:e6:70:e2:63:a3:db:d5:fd:62:e9:fc:68:66:a2:de:12:48:
         a7:d9:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:55:40 2024 by rpki-client on console-ams.rpki-client.org