Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36436.roa
File:                     AS36436.roa (raw, json)
Hash identifier:          b2ORYGAKsS3GxZyJmOo91rtYYfx5IYqeko7fqDu3/K8=
Subject key identifier:   92:45:93:89:CA:FF:F2:13:A7:8C:F8:84:3B:B7:9D:BD:49:7A:DF:00
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       53167B805C030A44D573FC47194D0E70CF99E069
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36436.roa
Signing time:             Tue 15 Aug 2023 02:00:29 +0000
ROA not before:           Tue 15 Aug 2023 01:55:29 +0000
ROA not after:            Tue 13 Aug 2024 02:00:29 +0000
asID:                     36436
IP address blocks:        2602:fed2:7111::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:16:7b:80:5c:03:0a:44:d5:73:fc:47:19:4d:0e:70:cf:99:e0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:29 2023 GMT
            Not After : Aug 13 02:00:29 2024 GMT
        Subject: CN=92459389CAFFF213A78CF8843BB79DBD497ADF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:f3:df:0e:30:1c:09:ca:bb:27:70:5a:7f:
                    da:f1:81:45:03:18:79:f5:db:4e:f8:86:1b:0a:78:
                    12:b1:56:4a:e5:f9:ed:27:ac:94:ed:c0:04:0c:db:
                    24:e3:ab:1a:3c:c4:30:38:b6:75:e8:fb:39:3a:b0:
                    d2:fb:7a:3d:f7:df:ac:6e:57:b5:36:d7:62:6b:d0:
                    70:16:69:de:b9:1e:b9:4d:d4:78:f5:7f:76:f6:0d:
                    8c:bf:0b:cf:14:44:fa:93:2f:d8:59:6c:73:49:bd:
                    0c:66:46:fc:b5:4b:33:23:03:dd:78:16:5c:93:b4:
                    c6:5f:39:83:89:07:f8:99:e4:89:d4:40:da:4b:59:
                    76:3a:f0:b6:ea:3e:63:ff:57:f3:a0:ae:2c:10:dd:
                    3a:7d:a5:b6:e3:44:07:b8:2b:cc:6a:0f:9e:d3:a9:
                    01:3e:c9:be:e2:e5:e7:c6:5a:bf:86:29:89:93:2a:
                    cb:06:36:17:52:6d:5e:e3:92:8f:a0:ea:66:cf:ea:
                    bc:bd:b1:94:78:0f:11:6b:36:21:46:47:18:7a:d3:
                    2e:97:bb:a3:db:70:36:67:83:50:5a:e5:86:5b:81:
                    5a:a6:10:b2:a4:0e:d8:eb:1b:12:c0:5b:e4:e3:d7:
                    06:d8:85:0e:ed:6c:d4:7f:b5:cb:0a:04:56:22:8e:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:45:93:89:CA:FF:F2:13:A7:8C:F8:84:3B:B7:9D:BD:49:7A:DF:00
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7111::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:ee:73:fa:3a:6a:b8:82:20:9d:d9:13:4e:79:1d:c8:9d:04:
         84:55:b3:b8:05:66:86:41:76:46:3a:14:e9:10:c7:6c:c8:4d:
         90:c8:6d:36:13:38:50:68:0d:38:3b:8f:d4:f5:1d:ec:36:5a:
         fc:53:41:5b:40:90:4f:cb:18:01:46:e3:c1:0e:c7:02:72:a1:
         0f:6d:c7:b2:39:7c:a5:61:3f:f4:64:12:68:31:02:ff:a5:94:
         6c:07:8e:3f:93:7d:dd:de:34:d8:63:b4:ab:f1:3a:64:3f:c5:
         2b:ec:21:45:a3:f6:87:34:83:a2:b2:81:2a:34:f4:c0:16:47:
         37:af:d1:d2:f1:df:d4:91:8b:ba:2b:c0:ba:fe:9f:e4:91:6b:
         b2:25:b9:df:a0:5c:97:09:89:e5:d3:2c:05:0e:a6:b2:f4:66:
         32:37:8d:52:c8:c8:cc:99:1c:b8:42:3b:a0:38:2e:79:27:df:
         da:11:f7:44:25:6c:ea:aa:40:16:d3:50:75:61:35:ba:00:76:
         02:26:a6:d3:23:a1:53:b2:da:70:ae:8a:da:79:ed:93:24:44:
         2c:74:cf:b7:3c:34:57:22:08:5d:46:41:6c:97:2b:b9:66:d0:
         22:de:19:d1:75:b7:1f:9b:54:71:b8:57:67:40:f3:60:8e:53:
         f5:7c:86:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org