Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS394352.roa
File:                     AS394352.roa (raw, json)
Hash identifier:          Yu9BxKrUd3HC1UqIEwWdJzyLDIukG7KUB1kWcV9kKf4=
Subject key identifier:   C9:48:18:94:A8:89:01:E8:7D:30:0D:F5:96:83:F5:97:DB:F5:34:11
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0B0D1201D3D60D2EB122438CE72EF3A3B0E53D3E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS394352.roa
Signing time:             Tue 09 Jan 2024 19:21:28 +0000
ROA not before:           Tue 09 Jan 2024 19:16:28 +0000
ROA not after:            Tue 07 Jan 2025 19:21:28 +0000
asID:                     394352
IP address blocks:        23.133.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0d:12:01:d3:d6:0d:2e:b1:22:43:8c:e7:2e:f3:a3:b0:e5:3d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan  9 19:16:28 2024 GMT
            Not After : Jan  7 19:21:28 2025 GMT
        Subject: CN=C9481894A88901E87D300DF59683F597DBF53411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:e2:5a:8b:06:9a:9b:d9:83:02:cc:d1:48:
                    0e:09:dc:4a:47:c5:80:7b:b4:03:64:b3:b3:54:1c:
                    36:95:8e:85:2c:6d:e4:26:e3:40:75:88:21:c2:82:
                    1a:fa:8e:f8:2b:2e:c1:cf:f0:07:9f:29:cc:e8:c4:
                    b6:ec:d1:9a:ed:8f:9f:c6:ad:61:53:b3:32:7d:0a:
                    35:8a:25:45:b9:bc:47:10:4c:e6:a4:9d:0c:61:79:
                    aa:60:0c:0b:2f:fa:92:41:bf:0f:e9:53:f8:d6:e3:
                    51:44:26:c1:bf:00:88:81:20:7a:29:05:c3:dc:7a:
                    fe:28:4a:55:2c:b3:ce:1c:21:c8:d1:6a:37:cf:10:
                    b2:a8:c8:1a:23:ac:98:12:be:98:50:54:47:d5:28:
                    18:81:25:87:cd:84:83:96:b8:12:a2:2b:ea:22:17:
                    be:b9:b9:57:e3:d3:2d:18:01:bf:e9:fe:2f:3a:e1:
                    8c:e6:04:14:29:46:8c:31:b9:e7:50:d7:d9:60:c1:
                    97:00:43:df:c0:e0:24:51:17:a1:f9:b7:86:e9:ae:
                    ce:3c:07:c5:ed:e5:20:d0:f5:4d:ee:19:5c:15:96:
                    cf:8d:74:23:53:3f:1c:58:3b:72:bc:11:8a:d4:dd:
                    f0:87:86:c4:dd:1f:3d:0c:0e:08:9d:49:74:0a:48:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:48:18:94:A8:89:01:E8:7D:30:0D:F5:96:83:F5:97:DB:F5:34:11
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS394352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:ea:da:ae:ac:5a:0e:d8:d5:d1:ed:99:6b:8a:d1:63:f5:d4:
         c6:9a:75:51:d2:09:95:0e:d2:0b:9d:12:7f:12:d8:83:fe:a3:
         61:b4:c2:ff:c6:2b:5e:76:80:6f:0e:bd:d7:5f:57:bc:09:b9:
         dd:6e:b5:35:27:be:6b:65:5d:66:15:84:dd:24:dd:ad:02:0a:
         68:cf:04:79:cb:72:3d:6a:0c:41:31:55:2a:64:ae:b6:66:da:
         47:5b:9b:6c:9a:e8:86:3e:ec:c0:7f:9d:32:9d:a8:29:c0:8d:
         bf:1d:e2:35:62:7a:84:78:ae:2a:9c:69:1c:0f:59:7b:66:06:
         35:88:81:95:98:d4:9a:a9:a1:fb:9e:55:4a:1d:30:ec:8d:93:
         5f:da:20:86:06:6a:43:f1:3a:9c:28:11:b7:de:bb:87:2e:cb:
         1b:e0:d6:c8:39:75:6b:bc:c4:1c:9a:5d:c3:6d:ec:96:a6:8f:
         61:6d:91:51:81:93:be:21:6b:06:44:78:64:b9:6a:9d:8d:74:
         1d:61:5f:b8:4d:95:a5:b9:4e:5f:96:10:53:02:f2:5e:82:b8:
         37:3a:d6:03:16:73:80:83:9c:bc:a2:52:cd:23:77:8b:f2:6f:
         64:93:fa:0a:a7:30:ba:dc:58:0f:2e:ad:28:a0:be:82:cb:d6:
         d1:71:04:fc
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUCw0SAdPWDS6xIkOM5y7zo7DlPT4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwMTA5MTkxNjI4WhcNMjUwMTA3MTkyMTI4
WjAzMTEwLwYDVQQDEyhDOTQ4MTg5NEE4ODkwMUU4N0QzMDBERjU5NjgzRjU5N0RC
RjUzNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVziWosGmpvZ
gwLM0UgOCdxKR8WAe7QDZLOzVBw2lY6FLG3kJuNAdYghwoIa+o74Ky7Bz/AHnynM
6MS27NGa7Y+fxq1hU7MyfQo1iiVFubxHEEzmpJ0MYXmqYAwLL/qSQb8P6VP41uNR
RCbBvwCIgSB6KQXD3Hr+KEpVLLPOHCHI0Wo3zxCyqMgaI6yYEr6YUFRH1SgYgSWH
zYSDlrgSoivqIhe+ublX49MtGAG/6f4vOuGM5gQUKUaMMbnnUNfZYMGXAEPfwOAk
UReh+beG6a7OPAfF7eUg0PVN7hlcFZbPjXQjUz8cWDtyvBGK1N3wh4bE3R89DA4I
nUl0Ckj6oQIDAQABo4ICVjCCAlIwHQYDVR0OBBYEFMlIGJSoiQHofTAN9ZaD9Zfb
9TQRMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzOTQzNTIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXhUAwDQYJKoZIhvcN
AQELBQADggEBAL/q2q6sWg7Y1dHtmWuK0WP11MaadVHSCZUO0gudEn8S2IP+o2G0
wv/GK152gG8OvddfV7wJud1utTUnvmtlXWYVhN0k3a0CCmjPBHnLcj1qDEExVSpk
rrZm2kdbm2ya6IY+7MB/nTKdqCnAjb8d4jVieoR4riqcaRwPWXtmBjWIgZWY1Jqp
ofueVUodMOyNk1/aIIYGakPxOpwoEbfeu4cuyxvg1sg5dWu8xByaXcNt7Jamj2Ft
kVGBk74hawZEeGS5ap2NdB1hX7hNlaW5Tl+WEFMC8l6CuDc61gMWc4CDnLyiUs0j
d4vyb2ST+gqnMLrcWA8urSigvoLL1tFxBPw=
-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org