Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          1n4qJOKOYzjBijtu38qulC9OLh8QnCKNsGUjBjfC8i8=
Subject key identifier:   F5:50:61:6E:F3:7C:64:B3:6C:39:BC:E0:ED:A6:A2:F8:D5:3A:06:00
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       60E719AD4940E50CAAF3E7F59C34A46395080A09
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
Signing time:             Mon 15 May 2023 13:38:03 +0000
ROA not before:           Mon 15 May 2023 13:33:03 +0000
ROA not after:            Mon 13 May 2024 13:38:03 +0000
asID:                     33696
IP address blocks:        2602:fed2:7195::/48 maxlen: 48
                          2602:fed2:7307::/48 maxlen: 48
                          2602:fed2:770a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jul 2023 11:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:19:ad:49:40:e5:0c:aa:f3:e7:f5:9c:34:a4:63:95:08:0a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May 15 13:33:03 2023 GMT
            Not After : May 13 13:38:03 2024 GMT
        Subject: CN=F550616EF37C64B36C39BCE0EDA6A2F8D53A0600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:5c:33:eb:3d:ea:51:9d:eb:e2:e9:dc:10:
                    4b:37:98:13:07:7c:5e:3b:59:7f:bc:47:da:03:bf:
                    b6:7a:11:4a:68:66:71:70:24:38:76:9e:60:55:25:
                    c7:15:59:55:99:da:e9:e0:8b:50:e2:81:89:ee:b2:
                    4f:98:61:30:5a:cf:84:22:5e:94:c3:40:68:44:18:
                    e1:6d:b0:3a:3b:34:b4:94:5d:5a:61:85:3e:96:64:
                    8a:86:6c:74:a1:b8:23:38:93:57:49:9c:96:c5:a6:
                    8f:63:38:6c:54:3e:3e:36:b7:79:df:4a:4b:65:96:
                    e5:62:f3:f5:5c:c2:bb:28:14:b2:f9:3c:dc:7b:eb:
                    fb:ee:5c:c6:a6:d6:f5:0b:b1:4c:78:d0:c4:d9:89:
                    ae:18:82:d7:61:6b:f8:d5:ae:c4:7a:da:68:fa:9c:
                    44:c8:e7:9d:29:8e:f5:6d:44:8c:a8:5e:21:ce:bb:
                    c2:7d:a0:9c:8c:85:91:3f:4f:0d:87:c3:0e:9e:30:
                    37:2a:92:ac:06:94:70:6c:51:80:c6:7c:4e:67:e8:
                    3c:1f:72:ee:c6:f9:5c:0c:51:f1:cd:9a:23:4f:50:
                    d6:34:7e:c8:7c:c2:aa:94:21:40:09:94:2f:9d:cb:
                    1e:78:48:ea:a9:17:13:70:48:7d:bc:cc:3b:e5:d6:
                    3c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:50:61:6E:F3:7C:64:B3:6C:39:BC:E0:ED:A6:A2:F8:D5:3A:06:00
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7195::/48
                  2602:fed2:7307::/48
                  2602:fed2:770a::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:a7:7d:a2:39:20:b9:05:08:d1:5f:49:a7:80:70:ed:ad:
         62:6e:01:ca:31:e9:f9:7b:7e:c5:06:80:6e:62:2c:f8:49:ac:
         e8:f2:9a:f9:54:df:25:9f:f0:43:bb:43:da:5a:c0:bd:27:06:
         37:44:a1:45:49:79:25:ff:2a:c5:a4:ee:24:b0:0a:18:5c:05:
         8b:c2:b0:8b:a0:db:27:64:f0:ae:c8:a3:90:8a:2a:3c:b4:02:
         b5:39:c4:fa:5c:08:84:cb:cc:64:64:1b:2e:1d:01:7a:ab:01:
         fa:8c:cd:fc:aa:c1:b6:27:02:33:75:dd:a0:fa:70:74:6f:10:
         4d:11:01:e8:22:e2:61:1f:d9:dd:e6:17:d1:02:fe:85:9c:46:
         4c:f4:37:a1:d2:7c:ec:e5:89:50:90:e4:40:e8:d3:de:b7:5c:
         18:cd:af:ad:f6:c0:a4:ea:93:3e:63:b3:45:0a:0d:90:e0:61:
         c0:af:dc:28:aa:a8:62:42:da:12:6d:b6:5f:63:56:05:7f:46:
         78:bd:3d:42:6e:7e:72:31:5b:bd:a5:97:96:1c:81:20:0a:46:
         1a:bc:e0:ad:57:77:f3:a9:d6:db:a4:26:01:d8:56:ec:30:34:
         71:d3:42:e1:81:6e:96:ed:77:86:cf:6e:8f:e2:de:87:6d:be:
         01:0d:06:0a
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIUYOcZrUlA5Qyq8+f1nDSkY5UICgkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjMwNTE1MTMzMzAzWhcNMjQwNTEzMTMzODAz
WjAzMTEwLwYDVQQDEyhGNTUwNjE2RUYzN0M2NEIzNkMzOUJDRTBFREE2QTJGOEQ1
M0EwNjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulVcM+s96lGd
6+Lp3BBLN5gTB3xeO1l/vEfaA7+2ehFKaGZxcCQ4dp5gVSXHFVlVmdrp4ItQ4oGJ
7rJPmGEwWs+EIl6Uw0BoRBjhbbA6OzS0lF1aYYU+lmSKhmx0obgjOJNXSZyWxaaP
YzhsVD4+Nrd530pLZZblYvP1XMK7KBSy+Tzce+v77lzGptb1C7FMeNDE2YmuGILX
YWv41a7Eetpo+pxEyOedKY71bUSMqF4hzrvCfaCcjIWRP08Nh8MOnjA3KpKsBpRw
bFGAxnxOZ+g8H3LuxvlcDFHxzZojT1DWNH7IfMKqlCFACZQvncseeEjqqRcTcEh9
vMw75dY8NQIDAQABo4ICajCCAmYwHQYDVR0OBBYEFPVQYW7zfGSzbDm84O2movjV
OgYAMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzMzY5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACYC/tJxlQMHACYC/tJz
BwMHACYC/tJ3CjANBgkqhkiG9w0BAQsFAAOCAQEATI6nfaI5ILkFCNFfSaeAcO2t
Ym4ByjHp+Xt+xQaAbmIs+Ems6PKa+VTfJZ/wQ7tD2lrAvScGN0ShRUl5Jf8qxaTu
JLAKGFwFi8Kwi6DbJ2TwrsijkIoqPLQCtTnE+lwIhMvMZGQbLh0BeqsB+ozN/KrB
ticCM3XdoPpwdG8QTREB6CLiYR/Z3eYX0QL+hZxGTPQ3odJ87OWJUJDkQOjT3rdc
GM2vrfbApOqTPmOzRQoNkOBhwK/cKKqoYkLaEm22X2NWBX9GeL09Qm5+cjFbvaWX
lhyBIApGGrzgrVd386nW26QmAdhW7DA0cdNC4YFulu13hs9uj+Leh22+AQ0GCg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 22:32:37 2023 by rpki-client on console-fra.rpki-client.org