Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34924.roa
File:                     AS34924.roa (raw, json)
Hash identifier:          Z7ZOcFAvvDAhUucow1J0G1BVcyoL/KbuFjemDpCuydo=
Subject key identifier:   91:4F:3B:A1:9A:23:46:05:BC:A3:06:71:E5:E1:84:66:21:86:1B:38
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5B21C91662CA867FF811F93BB3347EB68D070279
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34924.roa
Signing time:             Tue 16 Jul 2024 02:42:26 +0000
ROA not before:           Tue 16 Jul 2024 02:37:26 +0000
ROA not after:            Tue 15 Jul 2025 02:42:26 +0000
asID:                     34924
IP address blocks:        2602:fed2:770b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:21:c9:16:62:ca:86:7f:f8:11:f9:3b:b3:34:7e:b6:8d:07:02:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:26 2024 GMT
            Not After : Jul 15 02:42:26 2025 GMT
        Subject: CN=914F3BA19A234605BCA30671E5E1846621861B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:f7:89:11:c6:fb:42:29:d2:d0:3d:d6:45:
                    3e:87:dd:f1:dd:e1:b6:66:0e:d4:35:eb:eb:7d:1d:
                    09:c2:71:33:25:1f:82:d0:42:58:19:69:a8:bb:14:
                    1a:b6:35:df:61:c3:20:0a:70:1a:0e:11:63:e8:da:
                    36:3c:e7:b2:b4:be:fb:ba:a6:27:d5:c3:18:13:d4:
                    fe:f4:67:87:bd:89:01:3d:5e:9b:e9:5a:62:cb:85:
                    1a:0f:16:51:e0:7f:46:0f:39:af:c7:4c:a5:0d:1c:
                    6e:d3:6e:22:b7:70:46:22:2b:de:f6:c8:ef:e6:f1:
                    94:c5:f4:17:a0:1d:07:a2:75:85:b6:15:a3:90:3e:
                    c2:5b:d1:b0:4e:5c:cd:ef:3f:5d:0b:37:d1:81:d6:
                    85:b6:3f:aa:4e:b1:3f:d5:26:0e:3a:86:2d:aa:87:
                    c7:57:20:23:4f:95:13:1b:98:30:65:4e:8b:65:04:
                    37:7f:cc:24:a7:ef:12:13:22:4d:fc:b5:66:2c:ed:
                    a4:a5:4d:93:62:1c:6d:52:1e:dd:c0:12:c0:01:ab:
                    7a:12:90:54:38:f3:ea:84:ad:9b:38:67:9d:7f:de:
                    60:6b:61:cc:ab:64:d4:3f:f9:9a:7d:3c:81:c8:66:
                    75:89:04:cb:7a:01:3a:e2:00:b7:b2:87:6c:83:79:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4F:3B:A1:9A:23:46:05:BC:A3:06:71:E5:E1:84:66:21:86:1B:38
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34924.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:770b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:16:6c:95:99:34:92:9b:53:86:0d:0b:c7:1a:b2:a1:dc:32:
         c1:a3:c5:db:58:62:35:9e:fc:b0:dd:58:05:a0:47:69:e7:82:
         2b:a7:4c:a3:ee:39:11:e9:42:1a:82:c3:89:0f:a8:62:d5:05:
         01:c6:d1:c0:70:37:63:5a:e9:a7:de:05:34:f4:c3:d2:bc:a4:
         b3:cf:92:c4:54:5a:a7:28:30:8e:94:3f:e5:c4:ee:e1:04:7a:
         4a:71:d9:56:e0:0a:c6:c9:bc:58:1f:28:7c:f4:55:6b:5d:46:
         4f:5c:68:f5:03:a1:df:bb:ce:c0:1b:3f:a4:0b:04:fc:f4:ff:
         bd:a4:fa:30:79:fa:ee:6c:c6:b8:35:07:f4:8a:d6:0e:0d:e8:
         7f:4e:8b:6f:ec:57:a9:2f:45:cd:6d:b3:2d:4e:b2:3d:2f:cb:
         1b:6d:be:3f:45:82:7d:b4:cd:eb:56:d9:bd:ab:e4:c0:64:fb:
         05:5f:1f:e2:c7:1f:8c:b5:b8:a3:c7:8f:92:c4:ec:08:6a:81:
         a3:86:02:32:5a:49:6e:99:3d:ec:7d:1a:99:0c:35:09:98:3e:
         69:e8:36:d9:20:fd:72:73:36:fc:de:77:cc:39:3c:a7:2d:f9:
         d1:4a:1b:38:69:8e:b3:79:28:e9:dc:4b:7a:dd:fb:fe:77:0c:
         a4:cf:82:19
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUWyHJFmLKhn/4Efk7szR+to0HAnkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwNzE2MDIzNzI2WhcNMjUwNzE1MDI0MjI2
WjAzMTEwLwYDVQQDEyg5MTRGM0JBMTlBMjM0NjA1QkNBMzA2NzFFNUUxODQ2NjIx
ODYxQjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTn3iRHG+0Ip
0tA91kU+h93x3eG2Zg7UNevrfR0JwnEzJR+C0EJYGWmouxQatjXfYcMgCnAaDhFj
6No2POeytL77uqYn1cMYE9T+9GeHvYkBPV6b6Vpiy4UaDxZR4H9GDzmvx0ylDRxu
024it3BGIive9sjv5vGUxfQXoB0HonWFthWjkD7CW9GwTlzN7z9dCzfRgdaFtj+q
TrE/1SYOOoYtqofHVyAjT5UTG5gwZU6LZQQ3f8wkp+8SEyJN/LVmLO2kpU2TYhxt
Uh7dwBLAAat6EpBUOPPqhK2bOGedf95ga2HMq2TUP/mafTyByGZ1iQTLegE64gC3
sodsg3nucQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFJFPO6GaI0YFvKMGceXhhGYh
hhs4MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzNDkyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJ3CzANBgkqhkiG
9w0BAQsFAAOCAQEAuBZslZk0kptThg0LxxqyodwywaPF21hiNZ78sN1YBaBHaeeC
K6dMo+45EelCGoLDiQ+oYtUFAcbRwHA3Y1rpp94FNPTD0ryks8+SxFRapygwjpQ/
5cTu4QR6SnHZVuAKxsm8WB8ofPRVa11GT1xo9QOh37vOwBs/pAsE/PT/vaT6MHn6
7mzGuDUH9IrWDg3of06Lb+xXqS9FzW2zLU6yPS/LG22+P0WCfbTN61bZvavkwGT7
BV8f4scfjLW4o8ePksTsCGqBo4YCMlpJbpk97H0amQw1CZg+aeg22SD9cnM2/N53
zDk8py350UobOGmOs3ko6dxLet37/ncMpM+CGQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org