Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          aVxM8uBE3xa1JcFvy4UPEkjc76LMCOfPvnccLet9/RQ=
Subject key identifier:   EE:54:5D:CB:9C:8C:5A:87:E5:D1:68:3A:FE:DE:CE:26:69:36:7E:02
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1A152E0D16187CC228C0053A06FEA418C1C18ED7
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
Signing time:             Tue 13 Sep 2022 01:20:20 +0000
ROA not before:           Tue 13 Sep 2022 01:15:20 +0000
ROA not after:            Tue 12 Sep 2023 01:20:20 +0000
asID:                     33696
IP address blocks:        2602:fed2:7195::/48 maxlen: 48
                          2602:fed2:7307::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 05:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:15:2e:0d:16:18:7c:c2:28:c0:05:3a:06:fe:a4:18:c1:c1:8e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 13 01:15:20 2022 GMT
            Not After : Sep 12 01:20:20 2023 GMT
        Subject: CN=EE545DCB9C8C5A87E5D1683AFEDECE2669367E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1c:02:4a:0d:5b:a1:7f:f8:82:34:66:96:ce:
                    03:3a:ef:6a:04:6c:17:a2:49:db:a6:a7:d5:c9:42:
                    b4:35:bf:c7:86:34:8a:b4:6d:39:63:d1:4c:49:1c:
                    69:5e:dc:c7:4a:23:61:9b:3a:cf:13:2a:94:5f:91:
                    69:5a:5d:b3:1c:99:4f:b5:d8:99:1b:51:8f:58:61:
                    e7:f8:f5:42:d7:7c:75:26:f4:bb:1d:dd:05:59:6e:
                    30:24:62:66:7b:63:79:89:58:e0:2e:b1:57:24:bd:
                    a7:ad:04:f5:f3:7d:b4:07:bf:1d:bb:5d:dc:f7:0d:
                    ff:cb:6c:b7:7c:e0:80:9d:4a:13:f4:ee:a0:c1:e1:
                    c5:a7:d5:af:c6:12:32:bf:2c:ec:51:ab:9a:e5:2d:
                    93:c5:03:ac:01:d9:d6:c7:22:f4:24:d5:4b:57:8c:
                    36:7e:6f:40:c7:bf:8e:94:1b:1c:39:e7:91:cf:4d:
                    1d:18:d3:fe:e1:2b:aa:b2:fd:2b:e0:af:48:55:54:
                    ee:08:e5:9b:8e:0a:cd:7b:51:fe:30:16:f2:85:6d:
                    1a:ad:f6:61:10:0d:38:10:32:10:3e:88:69:1e:9c:
                    ac:2e:53:fd:cc:5d:c8:6a:b9:99:cd:a9:78:d6:95:
                    28:29:ac:a1:36:6d:63:d0:4c:11:b6:56:eb:50:58:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EE:54:5D:CB:9C:8C:5A:87:E5:D1:68:3A:FE:DE:CE:26:69:36:7E:02
            X509v3 Authority Key Identifier: 
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7195::/48
                  2602:fed2:7307::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:83:50:1b:95:d0:55:1c:ff:8d:0b:8f:1f:c2:a6:94:64:dd:
         e6:27:ea:5d:4e:3e:fb:c6:b1:16:e9:b5:a3:a4:87:8f:63:c0:
         cd:e5:2e:ff:c6:72:8f:b8:70:1d:8a:a0:50:8e:32:50:fe:60:
         bd:07:69:7a:31:cf:d4:90:e3:20:a1:fe:cd:d5:59:a2:7c:23:
         6a:66:9f:95:2c:93:4a:be:a5:f1:56:99:22:57:e8:78:f5:64:
         96:da:b9:60:40:f4:be:e4:b9:91:e2:da:85:3b:a1:1e:57:90:
         5d:36:6a:69:af:fa:fc:44:6f:93:74:9e:c7:ff:56:14:94:2a:
         a4:f9:cc:1e:e6:74:94:58:ef:fe:fe:fd:a5:0b:df:1b:b2:d6:
         ce:a2:1a:92:9a:bc:2e:22:5f:67:48:a5:23:56:66:ec:44:58:
         e4:91:8a:3e:8d:ff:4c:0f:f1:db:4a:0b:21:2f:17:e1:7a:51:
         98:88:e7:a0:c6:86:f0:bd:e6:43:9c:d0:46:6d:1f:c0:da:ff:
         8b:cf:cf:e4:ee:95:2c:5f:09:b0:4d:58:97:d7:5b:7a:59:06:
         b7:e5:1f:ff:79:15:51:28:e8:a5:24:ad:4e:16:3f:d9:1a:99:
         d8:53:88:85:db:fe:4f:f4:45:15:26:f8:6f:d1:c0:30:11:ae:
         a1:32:1a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:52:53 2023 by rpki-client on console-fra.rpki-client.org