Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          /tmwMO31CHrxE7JAMmW9K8K2mdmi7MLoE5v42w8btIk=
Subject key identifier:   9B:4A:78:A7:93:DA:43:97:C5:2D:CD:F6:01:7E:E7:AE:A3:F9:9C:42
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       08570BF56EE35F11726BEB2779D160080290FA48
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
Signing time:             Fri 04 Oct 2024 18:16:22 +0000
ROA not before:           Fri 04 Oct 2024 18:11:22 +0000
ROA not after:            Fri 03 Oct 2025 18:16:22 +0000
asID:                     23470
IP address blocks:        2602:fed2:7081::/48 maxlen: 48
                          2602:fed2:7314::/48 maxlen: 48
                          2602:fed2:7318::/48 maxlen: 48
                          2602:fed2:7319::/48 maxlen: 48
                          2602:fed2:7708::/48 maxlen: 48
                          2602:fed2:7e04::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:57:0b:f5:6e:e3:5f:11:72:6b:eb:27:79:d1:60:08:02:90:fa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct  4 18:11:22 2024 GMT
            Not After : Oct  3 18:16:22 2025 GMT
        Subject: CN=9B4A78A793DA4397C52DCDF6017EE7AEA3F99C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f9:78:70:77:a0:a3:92:00:82:15:41:a6:42:
                    38:0e:a4:9b:fb:9f:00:61:b6:47:78:a9:b5:28:b7:
                    d2:11:2b:b0:54:7a:f5:89:2d:e8:83:6e:1f:fb:e5:
                    a7:ad:8b:e7:5e:88:6c:fe:ba:e3:81:ba:79:af:58:
                    48:50:d9:d6:b9:cf:49:73:c6:7d:74:65:4c:98:09:
                    69:ad:54:c0:41:26:66:9c:4e:d4:d5:bd:f5:bb:da:
                    5b:a3:a3:47:a4:7e:b9:94:84:ab:18:fa:36:e4:1a:
                    c2:11:a5:12:24:a8:b9:35:5b:3b:5d:bc:76:79:ec:
                    47:4c:82:89:a4:ea:84:40:fd:87:55:14:eb:ac:8d:
                    ee:4d:ff:da:64:5e:b5:1c:48:3d:d2:a7:36:78:0a:
                    b5:63:90:d8:b4:64:dd:e7:a4:28:22:f4:94:7c:5e:
                    15:cd:4a:9c:78:5f:6b:e6:14:4e:b9:ea:7b:ed:9a:
                    3d:2f:9f:a4:c5:5f:80:1c:ba:80:47:eb:12:28:78:
                    cf:4f:c3:1b:d1:18:c8:89:4f:21:f6:7f:07:8d:a2:
                    70:ad:3b:46:1c:d2:91:4d:4e:d2:64:13:26:d1:62:
                    29:7a:32:cb:a1:49:e9:b9:c1:16:9c:08:bf:76:65:
                    0d:43:2f:20:3e:af:71:e9:8e:ed:b5:26:9c:99:0b:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:78:A7:93:DA:43:97:C5:2D:CD:F6:01:7E:E7:AE:A3:F9:9C:42
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7081::/48
                  2602:fed2:7314::/48
                  2602:fed2:7318::/47
                  2602:fed2:7708::/48
                  2602:fed2:7e04::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:10:71:5a:64:af:cd:f5:d9:37:b1:17:64:c3:05:4e:b4:
         32:ec:a8:c4:17:a0:8a:c9:e8:ca:d7:23:f0:cc:bf:20:0a:d5:
         f4:99:00:b3:5a:35:d9:58:88:93:ce:81:11:0d:78:9b:5b:4c:
         2b:00:c2:0d:d8:22:1e:9b:6c:b2:0b:ae:b8:53:1e:a7:57:11:
         2f:fc:cd:81:d2:3b:28:6b:c5:04:1c:4c:df:81:66:37:72:64:
         b8:f4:6c:f8:bb:57:23:65:2e:3a:c3:31:cb:c5:eb:c3:ff:96:
         54:20:35:d5:0e:f7:99:0b:34:a8:10:b7:ac:f2:e2:0a:07:9d:
         c6:7b:51:99:ad:cd:01:ad:26:af:a9:ff:20:c0:40:d9:10:78:
         18:43:dc:c6:05:2a:fd:ee:a0:ce:9f:0b:87:cb:50:45:4b:0f:
         38:3f:55:25:d9:05:1e:2c:75:f7:b3:93:19:13:ca:d5:83:29:
         b9:49:20:c9:36:a0:cc:cc:0d:47:6e:79:74:74:19:7e:95:a2:
         6a:4c:bb:b6:ff:f8:20:a7:24:30:16:20:f3:3d:82:a3:49:af:
         46:7a:55:98:19:92:a6:f7:2d:44:23:1b:47:09:94:56:63:39:
         59:e6:0a:8e:5e:f1:77:cd:96:d3:bc:3a:b8:fb:56:ed:f4:42:
         d2:cd:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org