Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa
File:                     AS25846.roa (raw, json)
Hash identifier:          YNUcPzQzuGbFBqbeh+5vIOnsMS/Vj/IW+0WhkyF7awA=
Subject key identifier:   FA:69:C1:45:D9:49:3B:28:8D:71:41:31:46:A4:97:49:F2:B0:32:6E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       70D2F85D44FE7AC8AFFFF15E51A9335691203E47
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa
Signing time:             Wed 18 Oct 2023 10:44:22 +0000
ROA not before:           Wed 18 Oct 2023 10:39:22 +0000
ROA not after:            Wed 16 Oct 2024 10:44:22 +0000
asID:                     25846
IP address blocks:        2602:fed2:770a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d2:f8:5d:44:fe:7a:c8:af:ff:f1:5e:51:a9:33:56:91:20:3e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 18 10:39:22 2023 GMT
            Not After : Oct 16 10:44:22 2024 GMT
        Subject: CN=FA69C145D9493B288D71413146A49749F2B0326E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:5f:95:f8:d0:b1:bf:b1:b3:d1:d9:d5:99:
                    52:15:af:b6:14:2b:56:a4:90:36:1d:53:15:70:9a:
                    e1:9f:c1:e1:bf:a2:23:da:0b:d8:d1:8a:73:38:52:
                    8f:14:65:b6:84:5d:01:54:c2:7d:4a:0c:ac:93:f3:
                    bc:51:4d:b0:0f:e6:c2:0c:44:5f:52:f0:e4:a4:96:
                    0c:dd:df:eb:69:da:c3:91:04:c3:05:be:19:34:0a:
                    b7:b6:cd:e6:47:36:80:db:40:14:e8:8e:a7:63:dd:
                    e6:87:ee:43:72:ce:76:36:64:a9:84:af:18:f9:61:
                    43:3e:b0:41:db:1b:a4:39:37:ec:85:a0:bf:73:90:
                    67:81:7d:54:37:15:96:23:62:12:e4:7c:3b:ff:2b:
                    36:67:e0:25:d8:5c:57:bd:0d:92:39:4b:3d:f4:05:
                    8e:35:b4:e0:cc:87:c3:bc:91:45:c9:6e:9e:16:5c:
                    28:bd:a4:b0:b6:61:fb:51:31:0a:cd:8f:b1:20:c4:
                    2e:27:5f:94:53:ba:39:2b:06:0f:85:a5:17:14:89:
                    19:ba:df:1a:8f:88:c1:d5:ae:97:4e:40:0c:56:a6:
                    67:1e:c8:e9:ad:d3:3d:42:52:23:74:4c:f1:26:18:
                    9d:4c:ff:6f:65:34:3f:72:79:b0:0e:b8:8a:69:70:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:69:C1:45:D9:49:3B:28:8D:71:41:31:46:A4:97:49:F2:B0:32:6E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:770a::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:e2:03:1a:d8:84:c9:87:72:75:5a:e3:b2:c9:17:a5:c5:b1:
         58:3c:7e:06:22:1c:a7:bc:a2:28:08:27:98:e5:9f:d1:b7:23:
         17:39:36:78:6d:3f:67:b7:c5:81:1c:c6:72:07:b2:2d:05:37:
         df:71:49:2a:5a:ad:0a:0d:e6:0e:6d:11:93:f3:50:6c:4e:1e:
         22:68:c8:45:af:11:23:cb:6a:61:d5:e5:9c:ff:53:ec:39:8e:
         e7:35:5b:6e:40:46:5b:6a:7b:fd:45:5d:0c:d6:0e:00:b2:d4:
         0c:fe:72:9f:25:56:08:a1:fe:d4:47:08:4b:c6:13:7b:58:a6:
         8a:57:c5:8b:eb:37:7e:3c:d4:3b:cb:25:7d:7c:b3:c1:78:d3:
         37:21:3d:c0:9c:78:8d:5a:32:d5:09:ef:ee:b0:75:8b:88:60:
         f2:99:bb:7d:b8:3a:e7:53:ad:20:3f:e0:10:8f:df:ef:1a:95:
         7e:02:67:1e:a4:a9:e8:28:da:9e:95:e1:31:eb:11:06:0c:bf:
         b2:1a:c5:9e:2b:c8:a9:4c:9e:f9:b9:48:39:bc:28:08:71:96:
         71:95:da:e2:4a:a0:5e:7e:62:d3:c3:10:85:b8:35:f7:5e:90:
         68:32:15:2a:c3:a9:9a:85:c2:5e:63:a3:89:11:67:51:0c:41:
         d4:97:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:55 2024 by rpki-client on console-ams.rpki-client.org