Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS28045.roa
File:                     AS28045.roa (raw, json)
Hash identifier:          DXp/7fHuzHYEPqtjx7Elb4xvnRjpOe3jT2xyyJDeYuM=
Subject key identifier:   BB:F0:E0:A2:92:96:D4:BB:BD:81:35:5C:16:32:E2:A8:30:F9:66:01
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       E4FC8A27AF525D3EA78276FB66173B76DB4793
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS28045.roa
Signing time:             Tue 15 Aug 2023 02:00:28 +0000
ROA not before:           Tue 15 Aug 2023 01:55:28 +0000
ROA not after:            Tue 13 Aug 2024 02:00:28 +0000
asID:                     28045
IP address blocks:        2602:fed2:7198::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e4:fc:8a:27:af:52:5d:3e:a7:82:76:fb:66:17:3b:76:db:47:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:28 2023 GMT
            Not After : Aug 13 02:00:28 2024 GMT
        Subject: CN=BBF0E0A29296D4BBBD81355C1632E2A830F96601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:66:19:94:38:1b:f8:bb:5d:9d:b8:eb:64:
                    3e:cb:8d:7a:a9:a7:1c:97:a8:f8:4e:35:47:a2:25:
                    eb:7a:e0:39:09:1e:a3:7a:59:48:46:f0:b4:52:6a:
                    18:59:d7:ff:f0:4e:29:da:94:9c:ce:be:b5:59:4d:
                    b8:21:bb:dc:14:d7:a0:49:0a:bf:d2:c5:f7:09:70:
                    f8:51:22:14:ed:ad:c2:77:4f:02:73:b6:ab:85:4c:
                    52:62:7b:16:bc:5e:04:e9:47:e5:f0:15:8f:2f:19:
                    91:15:14:d4:20:3d:18:f9:3d:94:7e:9c:67:4e:bb:
                    96:f6:4d:51:c5:ba:17:79:d3:97:3c:ab:21:06:f8:
                    5b:33:32:27:94:24:aa:be:9f:1e:96:01:5a:e9:f2:
                    8e:d4:6e:eb:20:76:ca:87:62:c1:66:13:85:9c:04:
                    e7:34:c1:9d:7f:54:9a:11:6c:d4:96:1f:8c:3b:69:
                    ec:c6:75:e8:27:13:57:17:72:f9:96:8a:f5:09:0e:
                    b7:c5:21:bc:16:88:48:84:21:0e:c3:fc:97:9c:8d:
                    34:78:12:7b:b8:3e:ee:d0:25:a7:a1:84:48:97:37:
                    92:f7:ef:67:cf:a3:88:3e:13:81:bb:82:9c:25:b2:
                    12:e0:aa:85:2f:ec:d8:26:c9:55:62:42:0b:94:4d:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:E0:A2:92:96:D4:BB:BD:81:35:5C:16:32:E2:A8:30:F9:66:01
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS28045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7198::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:85:f7:f7:c3:38:6f:2d:00:1a:b6:39:5f:6e:bc:67:9d:
         be:61:1c:ba:8c:07:3f:d7:a4:b2:56:90:63:4e:74:cd:52:48:
         3c:99:3f:d1:16:d3:a3:a3:e4:81:5c:b7:c4:b7:76:d1:76:fd:
         74:af:78:7f:a8:4d:51:ee:a2:ad:9e:eb:a5:b9:29:19:ac:6c:
         00:6a:ad:64:6d:a0:1a:0c:0e:34:32:72:ff:48:1e:4f:ee:35:
         b0:6f:b9:0e:d6:d8:78:4e:8f:29:b1:67:9c:36:dd:cc:09:72:
         8c:28:13:fc:54:d1:5e:d8:b6:4c:f2:30:8f:95:50:35:a3:43:
         b7:25:98:83:cf:cd:06:f0:97:48:5a:8c:84:65:ef:02:4c:51:
         1a:a1:76:6f:ef:37:71:c0:4f:72:71:83:d9:1a:3a:97:6d:b5:
         30:e5:59:84:a2:ac:31:4d:99:11:b9:61:b1:ef:bf:19:0c:f8:
         5d:6b:09:34:e5:35:ff:66:67:c9:2c:47:1d:d8:83:69:36:1f:
         5d:03:7c:fd:fc:76:47:7f:0d:94:91:30:f9:a7:d1:ed:92:cd:
         43:5f:a0:a9:76:d4:13:76:7b:70:23:86:4e:97:44:bb:4f:cd:
         76:d4:fd:7a:be:3d:a1:d2:d0:a0:e8:a1:fe:fb:c5:ba:fe:44:
         1a:bb:e8:d1
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUAOT8iievUl0+p4J2+2YXO3bbR5MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjMwODE1MDE1NTI4WhcNMjQwODEzMDIwMDI4
WjAzMTEwLwYDVQQDEyhCQkYwRTBBMjkyOTZENEJCQkQ4MTM1NUMxNjMyRTJBODMw
Rjk2NjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydJmGZQ4G/i7
XZ2462Q+y416qaccl6j4TjVHoiXreuA5CR6jellIRvC0UmoYWdf/8E4p2pSczr61
WU24IbvcFNegSQq/0sX3CXD4USIU7a3Cd08Cc7arhUxSYnsWvF4E6Ufl8BWPLxmR
FRTUID0Y+T2UfpxnTruW9k1RxboXedOXPKshBvhbMzInlCSqvp8elgFa6fKO1G7r
IHbKh2LBZhOFnATnNMGdf1SaEWzUlh+MO2nsxnXoJxNXF3L5lor1CQ63xSG8FohI
hCEOw/yXnI00eBJ7uD7u0CWnoYRIlzeS9+9nz6OIPhOBu4KcJbIS4KqFL+zYJslV
YkILlE3E1QIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFLvw4KKSltS7vYE1XBYy4qgw
+WYBMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyODA0NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJxmDANBgkqhkiG
9w0BAQsFAAOCAQEACniF9/fDOG8tABq2OV9uvGedvmEcuowHP9ekslaQY050zVJI
PJk/0RbTo6PkgVy3xLd20Xb9dK94f6hNUe6irZ7rpbkpGaxsAGqtZG2gGgwONDJy
/0geT+41sG+5DtbYeE6PKbFnnDbdzAlyjCgT/FTRXti2TPIwj5VQNaNDtyWYg8/N
BvCXSFqMhGXvAkxRGqF2b+83ccBPcnGD2Ro6l221MOVZhKKsMU2ZEblhse+/GQz4
XWsJNOU1/2ZnySxHHdiDaTYfXQN8/fx2R38NlJEw+afR7ZLNQ1+gqXbUE3Z7cCOG
TpdEu0/NdtT9er49odLQoOih/vvFuv5EGrvo0Q==
-----END CERTIFICATE-----
Generated at Fri May 3 11:56:44 2024 by rpki-client on console-fra.rpki-client.org