Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS38179.roa
File:                     AS38179.roa (raw, json)
Hash identifier:          eAd9rAgNmZgR2aShXkOtpvx6aTi4nvflxWMmwt1ODQQ=
Subject key identifier:   D9:81:0F:02:C3:A6:5F:6B:84:5B:53:16:70:F4:EE:82:59:12:E0:8E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       049A7F87C7750D50B3CA3B57E1EF78B7656370BC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS38179.roa
Signing time:             Tue 16 Jul 2024 02:42:28 +0000
ROA not before:           Tue 16 Jul 2024 02:37:28 +0000
ROA not after:            Tue 15 Jul 2025 02:42:28 +0000
asID:                     38179
IP address blocks:        2602:fed2:7700::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9a:7f:87:c7:75:0d:50:b3:ca:3b:57:e1:ef:78:b7:65:63:70:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:28 2024 GMT
            Not After : Jul 15 02:42:28 2025 GMT
        Subject: CN=D9810F02C3A65F6B845B531670F4EE825912E08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:31:85:f2:ce:ea:3f:25:2f:d4:b8:7d:65:
                    91:fe:f3:f3:6f:7b:a3:1f:18:96:bb:29:d8:8d:d4:
                    53:00:d2:57:32:88:9e:62:da:b4:c9:1d:92:48:a4:
                    4a:26:c2:fc:90:31:e3:9f:55:ad:86:d7:c4:fb:9c:
                    0a:57:82:bb:b6:07:b0:2f:53:0a:5d:c7:4f:57:75:
                    6a:67:da:83:0f:83:19:7d:7e:c3:49:f1:3c:0d:3c:
                    73:96:67:ba:91:4c:6a:c9:78:d9:07:85:ed:26:95:
                    14:ea:78:ad:96:84:f6:e5:e1:7d:76:ed:6d:fa:9b:
                    2c:68:ca:61:df:fc:43:01:1b:3b:a4:b0:b9:16:6f:
                    3e:95:83:77:1e:79:45:af:62:13:96:14:97:5b:d3:
                    04:16:ae:43:26:75:f5:2a:be:e8:e4:ab:e4:c6:3d:
                    b2:29:c6:21:91:88:a9:fd:f1:4b:6a:ec:2c:39:79:
                    f2:d5:3a:de:9a:03:41:a2:cd:77:d1:2a:f4:5e:8b:
                    e3:9f:5c:4c:2e:16:dc:3e:a2:a6:0f:19:bf:bd:ec:
                    3d:cc:01:09:f5:48:08:b1:b4:dc:a7:55:86:e5:d4:
                    de:91:c7:b2:f1:a6:cb:3f:18:21:1f:58:d2:29:71:
                    90:7a:d1:5c:cb:31:b7:ab:ce:1a:3e:60:83:f4:8f:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:81:0F:02:C3:A6:5F:6B:84:5B:53:16:70:F4:EE:82:59:12:E0:8E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS38179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7700::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:8b:38:dc:36:d3:f1:03:dd:23:49:af:99:10:49:89:f8:d6:
         76:3b:f9:6c:c3:34:c0:42:38:7b:76:dc:a4:78:41:91:26:33:
         0e:56:58:5e:4e:85:30:de:e3:b5:ca:76:55:d8:8b:79:73:7e:
         bf:d9:a6:17:6d:a4:3b:ba:e8:1c:2b:2f:79:ea:d5:95:81:24:
         89:1d:d5:0f:99:9f:b6:7f:68:3e:7e:88:0e:c6:be:24:2f:4d:
         95:55:24:4b:12:9f:16:d5:e8:f1:57:7f:cf:40:60:49:30:1e:
         a0:9f:6f:11:50:12:31:f2:79:5e:0a:0c:bd:f1:82:82:c6:17:
         74:84:0e:df:df:21:7f:f3:37:da:c0:e9:de:34:5b:7a:08:9b:
         1b:f0:3a:2c:12:c4:b4:42:a1:23:f7:30:17:45:8d:a8:7c:26:
         58:b8:d4:c1:72:4d:79:ab:1e:5c:6f:ac:64:b8:39:0b:3d:c5:
         02:c7:c2:0c:7c:6f:6a:00:5d:b6:a5:eb:58:8d:43:2d:df:ce:
         9f:23:61:72:87:f3:da:e7:6e:da:41:04:ae:77:01:1b:1f:ef:
         8f:ce:ee:bf:60:a3:10:d2:53:92:15:97:8e:37:42:a9:e2:a9:
         b0:72:b1:59:e3:1d:5b:19:bd:00:26:fe:f2:56:2f:c0:c3:37:
         68:20:22:e0
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUBJp/h8d1DVCzyjtX4e94t2VjcLwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwNzE2MDIzNzI4WhcNMjUwNzE1MDI0MjI4
WjAzMTEwLwYDVQQDEyhEOTgxMEYwMkMzQTY1RjZCODQ1QjUzMTY3MEY0RUU4MjU5
MTJFMDhFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MIxhfLO6j8l
L9S4fWWR/vPzb3ujHxiWuynYjdRTANJXMoieYtq0yR2SSKRKJsL8kDHjn1WthtfE
+5wKV4K7tgewL1MKXcdPV3VqZ9qDD4MZfX7DSfE8DTxzlme6kUxqyXjZB4XtJpUU
6nitloT25eF9du1t+pssaMph3/xDARs7pLC5Fm8+lYN3HnlFr2ITlhSXW9MEFq5D
JnX1Kr7o5Kvkxj2yKcYhkYip/fFLauwsOXny1TremgNBos130Sr0Xovjn1xMLhbc
PqKmDxm/vew9zAEJ9UgIsbTcp1WG5dTekcey8abLPxghH1jSKXGQetFcyzG3q84a
PmCD9I+jZwIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFNmBDwLDpl9rhFtTFnD07oJZ
EuCOMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzODE3OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJ3ADANBgkqhkiG
9w0BAQsFAAOCAQEARIs43DbT8QPdI0mvmRBJifjWdjv5bMM0wEI4e3bcpHhBkSYz
DlZYXk6FMN7jtcp2VdiLeXN+v9mmF22kO7roHCsveerVlYEkiR3VD5mftn9oPn6I
Dsa+JC9NlVUkSxKfFtXo8Vd/z0BgSTAeoJ9vEVASMfJ5XgoMvfGCgsYXdIQO398h
f/M32sDp3jRbegibG/A6LBLEtEKhI/cwF0WNqHwmWLjUwXJNeaseXG+sZLg5Cz3F
AsfCDHxvagBdtqXrWI1DLd/OnyNhcofz2udu2kEErncBGx/vj87uv2CjENJTkhWX
jjdCqeKpsHKxWeMdWxm9ACb+8lYvwMM3aCAi4A==
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:17 2024 by rpki-client on console-ams.rpki-client.org