Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34927.roa
File:                     AS34927.roa (raw, json)
Hash identifier:          CnlJrRovN9eZjja2vBxU8Gya5HKv7JKqu7RrQg2TEd8=
Subject key identifier:   6C:9E:A2:D1:CB:33:A6:A6:D4:60:B8:22:A8:D1:E6:EB:22:A8:C8:FC
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       7AAAE9B0DBB342EFF29D98784EE0D8AEA11ADF47
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34927.roa
Signing time:             Tue 16 Jul 2024 02:42:26 +0000
ROA not before:           Tue 16 Jul 2024 02:37:26 +0000
ROA not after:            Tue 15 Jul 2025 02:42:26 +0000
asID:                     34927
IP address blocks:        2602:fed2:711e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:aa:e9:b0:db:b3:42:ef:f2:9d:98:78:4e:e0:d8:ae:a1:1a:df:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:26 2024 GMT
            Not After : Jul 15 02:42:26 2025 GMT
        Subject: CN=6C9EA2D1CB33A6A6D460B822A8D1E6EB22A8C8FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:12:be:b1:ac:46:25:22:ab:4d:6f:b5:59:ca:
                    06:9c:e3:f6:de:9f:6a:57:65:7b:5d:fb:26:d8:fb:
                    92:d2:30:45:24:72:d5:45:fc:2f:f1:f8:d8:5b:4a:
                    f9:f4:12:07:62:a8:ec:c0:8a:1d:d3:be:d2:41:3d:
                    5b:1b:8b:3f:64:3d:e4:d2:c9:8c:eb:72:35:fe:9d:
                    2b:cb:df:7e:3a:8e:2e:3d:65:71:1a:81:77:96:d1:
                    d5:96:82:a3:43:cc:f6:be:b0:b0:c4:d0:b9:6b:62:
                    94:eb:9d:f5:e7:37:5d:38:46:1f:a2:12:b0:39:9b:
                    df:d9:73:60:87:fa:ca:09:40:f1:13:65:e7:66:5c:
                    a9:28:30:70:dc:74:41:3b:84:83:da:56:43:d4:2b:
                    81:8d:a1:34:e4:01:f1:39:3e:26:c6:61:1a:f2:6d:
                    d9:5c:72:c3:07:dc:29:68:03:cc:85:a6:63:8a:f5:
                    9e:83:9a:e3:19:7a:52:2c:5e:b5:bc:5e:79:30:28:
                    f0:6e:5a:3e:b6:ba:16:44:17:5f:4e:ee:06:0e:1e:
                    c8:f3:14:ff:b9:61:15:a5:ab:80:0b:e7:68:95:ad:
                    62:64:b4:34:af:eb:8f:1b:60:d9:14:18:a8:23:a7:
                    0b:19:97:89:60:f7:d7:66:f8:2a:a8:ee:3d:b6:f7:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9E:A2:D1:CB:33:A6:A6:D4:60:B8:22:A8:D1:E6:EB:22:A8:C8:FC
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34927.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711e::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:da:a6:3c:4f:bf:36:9c:83:58:10:c6:c4:4b:b9:bd:3a:
         98:9a:7b:65:e1:be:73:00:47:bc:7e:c1:34:e1:db:9f:87:68:
         a8:25:e6:8b:c5:54:2f:f5:1e:fe:ef:b1:59:ee:9d:03:26:21:
         fe:96:c4:bb:44:54:24:f7:6e:11:31:67:b3:01:b6:55:9e:26:
         90:a7:52:68:6b:15:0e:c9:64:b7:3e:84:cd:ba:59:10:18:c0:
         9d:4e:40:c8:b8:df:7c:09:9c:1c:9d:26:65:cc:c0:d6:ec:66:
         ad:de:ff:c4:cf:c7:cf:31:16:48:99:d2:b7:53:b7:28:3e:f7:
         35:51:ae:e0:41:87:ca:41:2a:99:87:66:96:00:ac:f1:16:46:
         ed:be:c8:35:8f:e4:0e:eb:d7:b5:42:fc:63:57:7c:6b:d3:83:
         83:97:86:59:52:e4:d6:43:fc:1c:9f:b7:11:75:a9:27:21:bb:
         7a:a4:45:e9:21:03:1f:af:04:d3:51:95:31:be:1e:92:04:0a:
         cc:ac:9a:84:9e:ed:bb:73:52:d8:63:f6:b8:db:ac:c0:47:e2:
         ba:d1:8c:d0:ca:33:f4:e1:7b:1e:81:7a:1c:61:69:ea:43:6f:
         a9:66:c1:81:69:5b:9c:f0:cd:bf:da:14:06:98:e3:68:48:07:
         6e:08:8a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:42 2024 by rpki-client on console-fra.rpki-client.org