Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa
File:                     AS36318.roa (raw, json)
Hash identifier:          1VDAzChziUFntYmTsJmah812WEc245+YhmzQTH3cHX0=
Subject key identifier:   20:14:A0:79:B5:49:1E:B9:76:E4:65:D2:2B:27:23:A4:97:1E:EA:0E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       036DA7A080AE5311646C68117739E9381AA8F941
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa
Signing time:             Thu 03 Aug 2023 13:10:14 +0000
ROA not before:           Thu 03 Aug 2023 13:05:14 +0000
ROA not after:            Thu 01 Aug 2024 13:10:14 +0000
asID:                     36318
IP address blocks:        2602:fed2:7085::/48 maxlen: 48
                          2602:fed2:718f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6d:a7:a0:80:ae:53:11:64:6c:68:11:77:39:e9:38:1a:a8:f9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug  3 13:05:14 2023 GMT
            Not After : Aug  1 13:10:14 2024 GMT
        Subject: CN=2014A079B5491EB976E465D22B2723A4971EEA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:14:5b:8d:af:b2:88:ba:f6:de:6f:3d:1e:
                    f3:3b:92:2a:b7:fb:ce:89:39:48:67:a9:79:90:c9:
                    3f:c0:d1:60:11:2a:55:af:9f:a0:a3:a5:23:2e:c0:
                    f4:71:e4:84:79:df:fd:55:66:f6:db:07:82:45:c6:
                    6e:4d:42:11:73:5b:5b:af:ce:73:46:69:26:17:eb:
                    77:00:ba:ca:19:81:7b:7b:e7:8a:fa:5d:83:c7:d0:
                    ac:02:c1:f1:d5:10:dc:54:e5:d0:06:3a:1a:89:92:
                    5e:96:a4:53:b4:c3:bf:f3:5f:0a:3c:c4:6a:fc:d2:
                    2e:66:6f:cb:1b:3c:f0:df:e3:ad:c9:c6:d9:61:b4:
                    2a:ff:ef:4c:36:c9:df:35:3e:80:f6:14:2c:97:83:
                    05:df:e5:28:d1:43:1d:92:ad:6a:47:71:fe:c5:8a:
                    ef:2d:e1:a8:52:44:c2:1b:48:91:b7:32:a7:08:5e:
                    68:5d:98:95:b5:d0:7a:ea:77:1a:7a:d6:be:25:ce:
                    1f:88:d4:ec:a6:8c:32:bd:96:73:85:3c:ab:e2:27:
                    d6:06:44:e7:af:82:a6:70:09:bd:e6:f8:17:41:23:
                    05:a0:4a:cb:7f:4c:b2:6c:46:57:6d:8b:cb:8b:de:
                    e6:aa:80:f0:7e:85:af:c8:df:24:9a:c5:6d:60:69:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:14:A0:79:B5:49:1E:B9:76:E4:65:D2:2B:27:23:A4:97:1E:EA:0E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7085::/48
                  2602:fed2:718f::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:bd:10:87:3b:6e:63:c7:a7:af:41:60:88:71:b1:97:0e:60:
         40:92:c7:74:aa:b9:68:2a:aa:63:96:63:21:1a:56:01:c8:cb:
         34:61:7a:10:4d:e5:ac:14:4e:af:8a:f9:00:de:a0:28:0f:5c:
         f3:68:71:7e:d9:16:5b:78:fe:a2:0a:95:65:0e:16:64:f1:fb:
         b4:b6:cc:f5:df:9c:e7:55:b9:42:bf:ee:cb:cf:44:d6:e8:d0:
         24:b8:07:2f:0e:49:28:73:cd:09:73:49:b2:b5:05:43:a6:5e:
         b4:c1:e7:1f:6c:32:e5:35:e1:ab:8e:1d:20:0d:72:00:4a:dd:
         c8:7c:ce:fe:16:7e:16:33:a3:4e:38:11:1e:23:3a:14:0b:12:
         25:a3:b1:9c:8c:ba:99:52:13:66:59:01:d7:13:ff:4a:59:0c:
         ea:cc:3e:6f:68:cb:93:ae:29:eb:f6:47:7b:99:99:6b:5d:29:
         94:38:fe:d9:01:44:65:3e:86:6f:07:2a:f3:02:5b:b2:6c:82:
         99:11:49:8a:98:eb:5e:c2:52:65:0a:d7:8c:8f:84:cb:43:4e:
         35:7a:7d:e1:87:b6:4e:3a:f5:40:44:28:6d:d0:a4:63:54:62:
         b4:b6:09:d3:1f:2f:89:28:50:d1:43:13:b1:b3:3e:c8:b2:5a:
         6f:4d:0e:04
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUA22noICuUxFkbGgRdznpOBqo+UEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjMwODAzMTMwNTE0WhcNMjQwODAxMTMxMDE0
WjAzMTEwLwYDVQQDEygyMDE0QTA3OUI1NDkxRUI5NzZFNDY1RDIyQjI3MjNBNDk3
MUVFQTBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EIUW42vsoi6
9t5vPR7zO5Iqt/vOiTlIZ6l5kMk/wNFgESpVr5+go6UjLsD0ceSEed/9VWb22weC
RcZuTUIRc1tbr85zRmkmF+t3ALrKGYF7e+eK+l2Dx9CsAsHx1RDcVOXQBjoaiZJe
lqRTtMO/818KPMRq/NIuZm/LGzzw3+OtycbZYbQq/+9MNsnfNT6A9hQsl4MF3+Uo
0UMdkq1qR3H+xYrvLeGoUkTCG0iRtzKnCF5oXZiVtdB66ncaeta+Jc4fiNTspowy
vZZzhTyr4ifWBkTnr4KmcAm95vgXQSMFoErLf0yybEZXbYvLi97mqoDwfoWvyN8k
msVtYGlaewIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFCAUoHm1SR65duRl0isnI6SX
HuoOMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzNjMxOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACYC/tJwhQMHACYC/tJx
jzANBgkqhkiG9w0BAQsFAAOCAQEAvL0QhztuY8enr0FgiHGxlw5gQJLHdKq5aCqq
Y5ZjIRpWAcjLNGF6EE3lrBROr4r5AN6gKA9c82hxftkWW3j+ogqVZQ4WZPH7tLbM
9d+c51W5Qr/uy89E1ujQJLgHLw5JKHPNCXNJsrUFQ6ZetMHnH2wy5TXhq44dIA1y
AErdyHzO/hZ+FjOjTjgRHiM6FAsSJaOxnIy6mVITZlkB1xP/SlkM6sw+b2jLk64p
6/ZHe5mZa10plDj+2QFEZT6Gbwcq8wJbsmyCmRFJipjrXsJSZQrXjI+Ey0NONXp9
4Ye2Tjr1QEQobdCkY1RitLYJ0x8viShQ0UMTsbM+yLJab00OBA==
-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org