Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          xJnKeapDWe+6zYUY2EdDgrs6CgVe6OR+F1TO7L/x+tw=
Subject key identifier:   A6:2D:01:5D:78:25:32:D7:1A:72:A8:7F:8B:0E:45:0D:E7:1A:88:ED
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5D625D37FB80934DCC620A1E067CA4EC4820DDEB
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa
Signing time:             Wed 28 Feb 2024 20:28:42 +0000
ROA not before:           Wed 28 Feb 2024 20:23:42 +0000
ROA not after:            Wed 26 Feb 2025 20:28:42 +0000
asID:                     397423
IP address blocks:        2602:fed2:7116::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:62:5d:37:fb:80:93:4d:cc:62:0a:1e:06:7c:a4:ec:48:20:dd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Feb 28 20:23:42 2024 GMT
            Not After : Feb 26 20:28:42 2025 GMT
        Subject: CN=A62D015D782532D71A72A87F8B0E450DE71A88ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:d6:c7:ff:c0:90:4f:55:f7:91:8a:5e:d5:
                    51:dd:94:aa:8e:b1:73:8d:97:87:b2:b8:61:d2:d5:
                    e3:d6:e3:2b:82:61:28:24:db:32:f8:c1:77:39:79:
                    f3:be:9c:d4:4d:18:90:07:32:f9:1b:d2:75:da:37:
                    a8:c4:32:48:f7:4a:ad:40:32:07:29:40:54:10:96:
                    c7:b1:af:d7:f6:58:2e:30:61:e5:05:94:43:75:a6:
                    32:28:da:04:08:00:00:60:ff:69:37:55:ea:2a:50:
                    16:25:93:ea:86:0a:26:88:26:bb:a4:3e:39:b9:e8:
                    4b:39:ac:ae:2b:9d:31:c0:2a:79:cc:11:ae:77:8c:
                    a6:30:0c:e5:69:02:6c:2f:42:5b:74:dd:a8:bb:9f:
                    cb:42:05:8c:22:6e:3c:df:30:9b:29:16:b2:72:1d:
                    5a:7b:b5:2d:f8:c7:b4:32:d2:cc:90:5e:33:9b:f3:
                    10:6d:a9:79:25:1f:52:8b:f7:b7:ef:ab:2b:94:f7:
                    5b:1d:a7:cd:f4:d0:93:18:50:b3:c8:53:7b:d5:ca:
                    cf:70:d5:38:01:16:86:76:e3:15:58:a2:11:50:00:
                    69:e3:fb:23:15:5c:70:8b:a3:3a:9a:7d:a1:82:28:
                    e1:fb:8a:4a:c1:a3:4e:b2:e5:b8:df:21:2b:4d:1a:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2D:01:5D:78:25:32:D7:1A:72:A8:7F:8B:0E:45:0D:E7:1A:88:ED
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7116::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:67:35:b0:24:1c:bd:9a:1c:e6:d0:09:4e:fc:fd:0c:bb:06:
         af:d7:e3:6c:cc:e7:36:51:43:d5:aa:00:b5:fd:83:e2:98:7e:
         da:17:2a:1c:48:47:2d:0a:f6:d0:3d:91:01:a8:04:b5:b0:17:
         63:2e:ae:57:0e:51:ff:b5:13:d2:43:b6:eb:e0:65:59:57:3d:
         3b:9d:99:dd:89:a9:74:48:6d:d5:6c:75:93:fd:c9:95:46:90:
         66:23:42:55:37:85:23:bc:78:f5:53:b0:a9:e2:7b:d6:a2:99:
         5b:73:e3:18:4e:2c:f5:0b:09:e6:9c:05:27:0b:5a:2d:af:2c:
         bf:6b:fc:06:d9:a8:c4:77:f2:ba:4a:5b:57:30:4f:f5:79:2a:
         89:f6:9f:ed:a0:8a:c7:43:e2:6d:2d:a4:69:8b:e0:fd:2e:d0:
         24:3e:51:71:44:b5:2e:99:bf:b0:00:98:c6:82:00:ec:74:ab:
         fd:e3:49:f9:9c:45:32:a7:55:66:fd:be:97:c9:2f:bb:61:03:
         9f:c4:41:6e:31:6d:f7:ff:e9:5e:77:3d:2a:4e:d7:57:6a:4b:
         7f:1a:7e:dd:83:80:de:78:84:54:ab:fe:6c:2d:7b:6e:99:9b:
         68:a1:a0:3e:36:34:72:b4:cd:9f:2e:34:80:b6:4e:55:65:76:
         bf:41:67:e0
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUXWJdN/uAk03MYgoeBnyk7Egg3eswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwMjI4MjAyMzQyWhcNMjUwMjI2MjAyODQy
WjAzMTEwLwYDVQQDEyhBNjJEMDE1RDc4MjUzMkQ3MUE3MkE4N0Y4QjBFNDUwREU3
MUE4OEVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1jWx//AkE9V
95GKXtVR3ZSqjrFzjZeHsrhh0tXj1uMrgmEoJNsy+MF3OXnzvpzUTRiQBzL5G9J1
2jeoxDJI90qtQDIHKUBUEJbHsa/X9lguMGHlBZRDdaYyKNoECAAAYP9pN1XqKlAW
JZPqhgomiCa7pD45uehLOayuK50xwCp5zBGud4ymMAzlaQJsL0JbdN2ou5/LQgWM
Im483zCbKRaych1ae7Ut+Me0MtLMkF4zm/MQbal5JR9Si/e376srlPdbHafN9NCT
GFCzyFN71crPcNU4ARaGduMVWKIRUABp4/sjFVxwi6M6mn2hgijh+4pKwaNOsuW4
3yErTRp8WwIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFKYtAV14JTLXGnKof4sORQ3n
GojtMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzOTc0MjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScRYwDQYJKoZI
hvcNAQELBQADggEBAExnNbAkHL2aHObQCU78/Qy7Bq/X42zM5zZRQ9WqALX9g+KY
ftoXKhxIRy0K9tA9kQGoBLWwF2MurlcOUf+1E9JDtuvgZVlXPTudmd2JqXRIbdVs
dZP9yZVGkGYjQlU3hSO8ePVTsKnie9aimVtz4xhOLPULCeacBScLWi2vLL9r/AbZ
qMR38rpKW1cwT/V5Kon2n+2gisdD4m0tpGmL4P0u0CQ+UXFEtS6Zv7AAmMaCAOx0
q/3jSfmcRTKnVWb9vpfJL7thA5/EQW4xbff/6V53PSpO11dqS38aft2DgN54hFSr
/mwte26Zm2ihoD42NHK0zZ8uNIC2TlVldr9BZ+A=
-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org