Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS26042.roa
File:                     AS26042.roa (raw, json)
Hash identifier:          bbpANn57lvzgHd6g/gZK8wq05LIE9GAf/328jC9mEd8=
Subject key identifier:   31:5E:8D:0A:3A:83:E4:E4:E1:1A:77:39:B0:BF:6C:5A:01:40:1B:76
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3A4B2B2FE103EEE9122316967DC8D118C6575F45
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS26042.roa
Signing time:             Thu 21 Nov 2024 05:36:50 +0000
ROA not before:           Thu 21 Nov 2024 05:31:50 +0000
ROA not after:            Thu 20 Nov 2025 05:36:50 +0000
asID:                     26042
IP address blocks:        2602:fed2:708a::/48 maxlen: 48
                          2602:fed2:7114::/48 maxlen: 48
                          2602:fed2:7128::/48 maxlen: 48
                          2602:fed2:7185::/48 maxlen: 48
                          2602:fed2:7e05::/48 maxlen: 48
                          2602:fed2:7e06::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4b:2b:2f:e1:03:ee:e9:12:23:16:96:7d:c8:d1:18:c6:57:5f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Nov 21 05:31:50 2024 GMT
            Not After : Nov 20 05:36:50 2025 GMT
        Subject: CN=315E8D0A3A83E4E4E11A7739B0BF6C5A01401B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:29:7f:f3:15:87:09:e6:fc:2e:e2:45:ab:
                    12:74:fb:65:ab:87:8e:f3:a1:de:40:96:89:29:2b:
                    73:3f:0a:26:81:26:92:51:ec:17:45:d2:4b:41:8f:
                    36:df:3c:0e:96:01:d6:3a:fc:43:49:45:3a:8f:17:
                    7c:bc:60:d2:d0:54:41:21:e1:47:d7:3e:16:07:d4:
                    d6:80:01:ce:86:c3:aa:bd:56:99:c7:d2:ae:a5:6d:
                    48:df:86:45:08:80:4a:a2:f1:c4:c5:e7:73:10:dc:
                    5f:9d:a4:6f:fa:5a:8d:1f:77:53:39:93:7f:e3:93:
                    de:d3:ab:b1:3c:a3:70:50:69:27:20:6b:2f:83:8a:
                    a4:d3:7e:c5:08:51:b3:98:05:fe:7b:ee:96:4f:8d:
                    e5:3f:07:f7:ef:9b:26:0a:92:7a:12:0c:16:dc:cc:
                    be:3d:fd:95:5b:5f:7f:fa:f7:c2:d3:bf:d7:06:4d:
                    85:fe:d0:09:11:36:96:f9:7b:06:68:fb:d6:45:58:
                    37:50:80:0a:ff:1a:04:3f:6d:97:f7:03:03:a7:6c:
                    06:60:cd:68:4f:3a:1d:05:94:1d:6b:72:74:92:79:
                    ec:f3:fd:0d:e3:2e:c0:e9:cc:7b:d6:f0:11:ee:98:
                    f3:79:f8:e6:22:a2:a3:f6:f2:d2:88:ad:7d:3c:80:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:8D:0A:3A:83:E4:E4:E1:1A:77:39:B0:BF:6C:5A:01:40:1B:76
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS26042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:708a::/48
                  2602:fed2:7114::/48
                  2602:fed2:7128::/48
                  2602:fed2:7185::/48
                  2602:fed2:7e05::-2602:fed2:7e06:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         73:a8:f3:ee:e8:51:d0:70:2e:ec:35:d1:d2:0c:06:91:dd:33:
         c7:18:78:55:06:ee:a7:90:ba:3c:cd:7e:c8:02:54:73:ff:a2:
         0b:93:59:f7:5f:d2:37:92:ff:44:e1:84:84:5b:da:5c:f3:17:
         2f:b9:35:ed:b7:c1:69:6c:d2:e2:e7:22:35:ed:7a:13:7d:9f:
         51:8a:0c:20:5e:8e:0b:bc:57:e1:4a:76:e3:a9:70:95:26:31:
         8f:b1:c7:60:02:66:1d:cd:91:c7:7d:de:5d:7d:4b:f4:c3:ce:
         32:4f:96:82:c0:a9:69:25:8f:2a:58:a9:ac:ae:68:ca:73:5e:
         a5:ac:73:4e:a2:61:8e:74:bc:5f:2d:c8:40:a2:0e:54:41:34:
         a5:0c:74:41:b1:35:c9:b1:7e:8b:28:1c:b6:3c:08:bd:c5:a3:
         eb:7a:ef:06:35:d9:ac:9c:57:b2:06:37:38:90:3f:33:5a:0e:
         25:23:4c:fa:d3:d5:98:16:9f:7f:3d:fc:93:80:fc:b9:43:1b:
         9d:76:61:51:ea:fd:5c:f2:ca:26:d1:0d:53:3b:10:5f:cc:02:
         5d:78:fc:91:8a:a1:a2:18:f5:33:a5:9e:bc:0f:27:54:71:60:
         b8:5b:8b:20:6a:af:d9:6f:79:07:d8:95:84:8f:98:fd:58:ee:
         66:d4:fb:41
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUOksrL+ED7ukSIxaWfcjRGMZXX0UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQxMTIxMDUzMTUwWhcNMjUxMTIwMDUzNjUw
WjAzMTEwLwYDVQQDEygzMTVFOEQwQTNBODNFNEU0RTExQTc3MzlCMEJGNkM1QTAx
NDAxQjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Qpf/MVhwnm
/C7iRasSdPtlq4eO86HeQJaJKStzPwomgSaSUewXRdJLQY823zwOlgHWOvxDSUU6
jxd8vGDS0FRBIeFH1z4WB9TWgAHOhsOqvVaZx9KupW1I34ZFCIBKovHExedzENxf
naRv+lqNH3dTOZN/45Pe06uxPKNwUGknIGsvg4qk037FCFGzmAX+e+6WT43lPwf3
75smCpJ6EgwW3My+Pf2VW19/+vfC07/XBk2F/tAJETaW+XsGaPvWRVg3UIAK/xoE
P22X9wMDp2wGYM1oTzodBZQda3J0knns8/0N4y7A6cx71vAR7pjzefjmIqKj9vLS
iK19PIDSjQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFDFejQo6g+Tk4Rp3ObC/bFoB
QBt2MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyNjA0Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBRBggrBgEFBQcBBwEB/wRCMEAwPgQCAAIwOAMHACYC/tJwigMHACYC/tJx
FAMHACYC/tJxKAMHACYC/tJxhTASAwcAJgL+0n4FAwcAJgL+0n4GMA0GCSqGSIb3
DQEBCwUAA4IBAQBzqPPu6FHQcC7sNdHSDAaR3TPHGHhVBu6nkLo8zX7IAlRz/6IL
k1n3X9I3kv9E4YSEW9pc8xcvuTXtt8FpbNLi5yI17XoTfZ9RigwgXo4LvFfhSnbj
qXCVJjGPscdgAmYdzZHHfd5dfUv0w84yT5aCwKlpJY8qWKmsrmjKc16lrHNOomGO
dLxfLchAog5UQTSlDHRBsTXJsX6LKBy2PAi9xaPreu8GNdmsnFeyBjc4kD8zWg4l
I0z609WYFp9/PfyTgPy5QxuddmFR6v1c8som0Q1TOxBfzAJdePyRiqGiGPUzpZ68
DydUcWC4W4sgaq/Zb3kH2JWEj5j9WO5m1PtB
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:42 2024 by rpki-client on console-fra.rpki-client.org