Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          wsax1qwmfD39em2F3mySmCJy8ccS3pWEm3xiao/s1kM=
Subject key identifier:   E4:BF:D9:C3:98:50:7D:6F:51:85:FA:84:D6:BB:28:8F:4B:A2:BA:F8
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3802C856D790E310463707800EFE1985834F81E1
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
Signing time:             Thu 19 Sep 2024 17:10:11 +0000
ROA not before:           Thu 19 Sep 2024 17:05:11 +0000
ROA not after:            Thu 18 Sep 2025 17:10:11 +0000
asID:                     33696
IP address blocks:        2602:fed2:7195::/48 maxlen: 48
                          2602:fed2:7307::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:02:c8:56:d7:90:e3:10:46:37:07:80:0e:fe:19:85:83:4f:81:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 19 17:05:11 2024 GMT
            Not After : Sep 18 17:10:11 2025 GMT
        Subject: CN=E4BFD9C398507D6F5185FA84D6BB288F4BA2BAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:d1:78:97:68:9b:2c:06:ff:d5:cc:51:cb:
                    ab:f3:c7:86:03:c3:65:6c:84:95:b3:85:c9:f4:ee:
                    ac:d0:75:01:08:d1:03:de:60:6f:44:49:90:a0:26:
                    ca:63:9b:39:a2:55:40:9e:41:83:cb:3e:12:1d:cb:
                    55:b3:9e:01:6f:a3:8c:40:6a:6c:32:a3:9e:28:b8:
                    73:08:cb:c4:a2:1e:33:2c:88:24:d4:a5:51:3d:da:
                    94:d3:ac:ba:4c:42:98:36:9f:af:3b:24:5b:48:97:
                    0b:3a:ff:3a:04:2c:e4:f5:a9:c9:cb:b0:7f:af:be:
                    65:bc:20:34:d6:ab:2a:80:dc:24:b7:25:4f:c3:18:
                    ee:69:1e:ba:9e:f2:cf:5c:d3:72:35:ab:f3:7d:f2:
                    04:b3:30:bb:21:8c:a2:4a:7c:e2:c9:a8:1e:4c:61:
                    73:14:de:97:72:0f:82:72:73:6d:03:11:5c:81:3f:
                    34:9e:04:c0:7c:19:02:ca:b1:1f:fa:b5:aa:a8:f2:
                    85:af:11:8f:93:f1:70:ea:4c:9e:f1:bf:d4:70:cd:
                    04:dc:1a:68:af:c0:52:cb:4b:e6:bf:55:8c:88:06:
                    7a:1a:a8:48:aa:bc:25:2d:ee:1b:90:81:83:b5:4a:
                    40:a1:06:8d:79:b3:63:a8:77:7a:9a:4c:96:d0:d2:
                    cc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BF:D9:C3:98:50:7D:6F:51:85:FA:84:D6:BB:28:8F:4B:A2:BA:F8
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7195::/48
                  2602:fed2:7307::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:61:27:b9:c8:ae:ce:fe:c9:5a:48:d3:65:1e:20:95:c4:ac:
         f2:42:bd:c6:be:8d:0b:aa:c2:5c:d7:f6:b8:65:5c:76:a2:00:
         9b:97:25:27:fb:53:da:ab:7b:e1:61:94:c3:09:21:05:fc:5a:
         33:de:84:4f:72:ae:d3:16:2c:ac:68:7b:c4:34:5d:3f:e5:55:
         50:6a:3a:55:fa:30:a4:2f:34:bb:59:a2:3f:66:b5:9d:2b:bf:
         59:0b:42:5f:40:ac:0f:c8:47:69:60:15:52:dc:fc:27:17:4d:
         c2:31:68:30:58:b2:f7:e7:ba:d4:6e:79:d3:56:b4:c7:e2:3b:
         58:dd:2e:91:27:2a:2a:ca:2d:ec:1b:29:4e:fd:e4:09:a3:de:
         a6:e1:1a:ec:47:bb:2b:26:0c:3c:2e:34:b4:c7:b5:35:07:66:
         a2:81:d9:6c:62:1d:51:cb:00:49:a4:ca:02:26:7a:c1:47:0d:
         5b:d3:64:aa:30:7c:ba:6a:77:8c:ca:0f:0f:41:98:8d:65:3b:
         f8:34:0c:b7:c1:cd:c1:9b:53:59:59:01:72:01:e2:3e:ab:7a:
         6f:22:6a:34:a6:16:b1:1e:b0:1b:18:cb:85:7f:ff:be:ae:9d:
         e9:13:08:e3:ae:ca:ce:dc:75:76:ff:7f:9a:49:2d:49:89:b5:
         6d:78:b0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org