Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa
File:                     AS36318.roa (raw, json)
Hash identifier:          z/9szPXCDnIadvMTWRNJTIjfcSJ9Bz4ZpffkzaK/07s=
Subject key identifier:   03:05:C3:40:DA:F9:32:DF:1E:E5:A2:63:A6:B8:7E:AE:6B:CD:C3:71
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       380759B30EF9D228B477B1F5BBA8D35CF32F979C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa
Signing time:             Thu 04 Jul 2024 13:37:38 +0000
ROA not before:           Thu 04 Jul 2024 13:32:38 +0000
ROA not after:            Thu 03 Jul 2025 13:37:38 +0000
asID:                     36318
IP address blocks:        2602:fed2:7085::/48 maxlen: 48
                          2602:fed2:718f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 16:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:07:59:b3:0e:f9:d2:28:b4:77:b1:f5:bb:a8:d3:5c:f3:2f:97:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul  4 13:32:38 2024 GMT
            Not After : Jul  3 13:37:38 2025 GMT
        Subject: CN=0305C340DAF932DF1EE5A263A6B87EAE6BCDC371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:bd:9e:b5:82:68:51:a1:7d:82:c8:c7:fb:
                    2f:58:1c:ee:f1:09:3e:56:0f:06:ca:1e:a4:cc:73:
                    fc:02:36:a0:c4:d1:ca:38:8c:74:8a:32:f8:96:9e:
                    56:8a:37:f2:e0:4b:7b:a9:53:cb:04:54:5e:98:b1:
                    02:35:f3:04:78:a6:11:08:8c:13:8f:53:12:bb:9d:
                    5a:6f:0b:44:88:bf:1b:6e:86:02:27:c9:03:f9:92:
                    92:ff:d1:d4:57:ac:1c:24:7a:3b:7a:52:ad:b6:d1:
                    2b:b1:d4:a7:70:cd:1d:fe:7a:43:ef:b4:f3:c5:39:
                    5d:dc:8b:f2:68:ab:2c:d4:13:2d:ef:1b:a0:f6:ee:
                    06:06:04:58:b3:46:ab:e6:9d:f2:91:52:15:8b:d4:
                    73:c7:c1:54:6e:8a:1e:62:32:40:6b:89:28:94:7b:
                    19:2c:a3:a0:70:e1:4c:87:20:d3:c0:3c:cf:00:76:
                    d2:6d:55:2d:c4:c0:a8:9d:8e:84:8d:fb:41:83:fb:
                    ab:43:8d:32:54:ca:a3:2d:8f:25:76:96:89:56:30:
                    3c:43:47:91:59:ff:0f:f3:52:85:f9:64:39:39:3f:
                    29:d0:fe:6c:f3:42:ae:1b:f6:c8:78:0a:5d:3c:5d:
                    eb:22:8f:46:c0:fe:87:f5:4e:77:42:73:45:81:69:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:C3:40:DA:F9:32:DF:1E:E5:A2:63:A6:B8:7E:AE:6B:CD:C3:71
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7085::/48
                  2602:fed2:718f::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:be:f1:2b:4a:a9:76:e4:64:f9:02:11:68:31:ff:55:90:85:
         fe:00:1c:7f:22:76:ed:19:a1:ac:c9:5e:57:e2:0f:50:33:14:
         41:84:fa:80:86:99:e7:49:b5:62:78:58:21:57:95:15:37:49:
         08:65:7f:07:c6:de:c7:46:45:9b:ba:1e:06:73:35:60:ae:6f:
         87:4d:86:90:b2:50:54:74:a9:7b:cf:7d:28:d2:8e:92:b5:67:
         6b:6c:c9:d2:b1:39:64:54:38:46:6f:c7:b8:9f:f2:5e:ac:b3:
         44:fc:7a:43:9a:83:c8:cb:50:bf:4e:fd:ca:0e:76:8f:e9:b7:
         fa:59:73:79:be:1a:1a:0e:cc:db:f7:0b:e9:9a:2c:1b:5e:d8:
         7c:c3:c1:d3:6e:a3:de:1d:f7:7d:fd:19:26:ce:06:b5:37:ba:
         3e:af:67:a0:42:aa:55:56:6c:02:ef:83:f8:f3:d8:2c:da:f6:
         ce:12:30:33:7d:2f:05:13:47:de:41:4c:f2:a2:c0:99:e2:4a:
         cc:7b:a2:aa:f5:7d:e7:6c:8a:67:6e:41:8b:5a:c0:dc:29:32:
         a7:7d:e6:9a:74:50:7a:24:7b:8c:a1:3d:49:7a:59:9c:28:6d:
         05:ac:59:3e:db:c8:0b:b2:7f:89:2e:8b:61:ad:6e:b8:f8:17:
         59:ca:9a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:55 2025 by rpki-client