Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS31786.roa
File:                     AS31786.roa (raw, json)
Hash identifier:          uQTHgjUBMDw04geopkn7xzx2K6huTX5li49zLpE7F7I=
Subject key identifier:   38:36:D9:37:33:23:E6:9E:BC:C5:27:AB:86:08:26:97:5E:55:BF:A0
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       527892061B710D364DFDACA2D677E939ACAD4BC8
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS31786.roa
Signing time:             Tue 15 Aug 2023 02:00:28 +0000
ROA not before:           Tue 15 Aug 2023 01:55:28 +0000
ROA not after:            Tue 13 Aug 2024 02:00:28 +0000
asID:                     31786
IP address blocks:        2602:fed2:7130::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:78:92:06:1b:71:0d:36:4d:fd:ac:a2:d6:77:e9:39:ac:ad:4b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:28 2023 GMT
            Not After : Aug 13 02:00:28 2024 GMT
        Subject: CN=3836D9373323E69EBCC527AB860826975E55BFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:cc:41:5d:0c:9a:18:6e:2d:df:0a:77:53:
                    48:51:4d:80:cf:e1:09:e5:81:66:a4:af:ad:66:ed:
                    79:50:cc:20:4f:85:0a:a9:83:b8:14:09:92:47:bd:
                    86:25:6e:22:b1:ef:9c:4d:43:c1:ba:9a:93:d5:82:
                    91:73:21:46:58:7a:b2:e1:ea:31:d5:63:93:cf:41:
                    9e:8a:f2:52:2d:94:22:75:b8:6d:0a:0d:b0:2d:80:
                    63:80:aa:e3:ae:2f:19:b1:cf:ba:5a:4c:45:2e:94:
                    87:18:a7:b2:d6:4b:e4:7e:e0:ce:a5:b8:69:fe:9d:
                    52:26:fd:1e:90:cb:f7:0c:28:78:9e:f0:9e:c7:ba:
                    a8:c0:5e:4c:c9:34:1a:d7:57:d4:6b:61:89:8b:12:
                    3a:24:45:6a:fe:9a:fb:14:dc:51:e6:e7:b2:47:0e:
                    96:4b:a8:76:c8:44:c5:94:1f:43:f9:89:c3:60:66:
                    54:df:59:d7:43:30:00:25:5a:d7:13:f8:80:d6:e6:
                    2b:e7:2a:a3:e4:74:37:e1:4a:d1:44:49:44:9a:1e:
                    5d:20:9f:80:41:89:33:b7:67:fd:3e:f6:78:df:69:
                    ed:0b:a0:9d:f3:cb:69:05:a7:be:9c:21:7a:98:05:
                    3d:a4:05:44:aa:89:9f:fa:df:2f:ba:95:5b:d0:09:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:36:D9:37:33:23:E6:9E:BC:C5:27:AB:86:08:26:97:5E:55:BF:A0
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS31786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7130::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:d6:5a:46:d0:d8:6a:d4:cb:7c:f9:9b:83:44:a9:27:7a:66:
         54:a6:51:dc:2f:40:6b:1c:65:a5:b6:76:e1:0f:23:61:a4:35:
         3a:46:9f:b0:a9:d2:59:39:a7:22:03:62:31:0e:bc:63:fa:ad:
         17:71:f9:8f:6e:a7:63:3d:f3:42:03:03:76:ff:60:6e:26:54:
         14:d7:d5:b4:36:30:0a:ca:e3:e6:f8:73:71:96:0e:95:74:be:
         a0:94:bc:14:59:9a:22:00:2b:b3:39:18:ad:b1:f7:31:0f:e0:
         1f:fc:b2:66:e4:cb:0b:ab:07:af:c9:c6:e3:a7:6d:fe:db:5b:
         97:92:95:43:36:0d:76:6f:c9:77:ff:b9:e5:97:48:3b:41:10:
         fa:e7:32:e5:44:d2:77:eb:96:c6:0c:b2:e3:fc:af:00:9b:2a:
         52:de:85:3c:2b:96:fc:10:e4:f2:c9:1b:11:41:72:51:d9:81:
         a7:a0:6a:1e:a8:e0:52:2a:84:82:06:e1:89:b2:8e:86:75:75:
         b0:a0:3b:33:af:ab:c8:41:ff:d1:90:7b:47:6d:40:1e:e5:5f:
         32:09:7a:74:f3:6a:ba:17:3c:30:25:8e:e7:42:0e:f5:5e:5c:
         ce:0a:df:40:26:d4:43:7b:ff:46:c8:48:c6:d5:a4:f6:8c:33:
         88:af:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:55 2024 by rpki-client on console-ams.rpki-client.org