Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa
File:                     AS39753.roa (raw, json)
Hash identifier:          SHG+Fz8m2H6GF32aCFvx6dv39Jl5mSESHbVKu8qM0R0=
Subject key identifier:   35:E6:55:9F:F4:3D:D0:B4:45:05:B5:BD:E2:BD:F9:2A:7F:F6:AC:DA
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       05012D4C16EE141316709D242F3E32940F7615A0
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa
Signing time:             Tue 16 Jul 2024 02:42:27 +0000
ROA not before:           Tue 16 Jul 2024 02:37:27 +0000
ROA not after:            Tue 15 Jul 2025 02:42:27 +0000
asID:                     39753
IP address blocks:        2602:fed2:7020::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:01:2d:4c:16:ee:14:13:16:70:9d:24:2f:3e:32:94:0f:76:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:27 2024 GMT
            Not After : Jul 15 02:42:27 2025 GMT
        Subject: CN=35E6559FF43DD0B44505B5BDE2BDF92A7FF6ACDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:a5:ef:04:a4:0d:54:3c:6a:a7:e3:0c:cf:
                    69:2e:06:53:87:bf:41:ed:32:a0:05:1e:a8:d2:b6:
                    89:50:a3:f8:b0:8d:94:34:83:96:61:a6:99:21:3a:
                    0f:24:e3:34:01:6b:c9:60:77:08:64:d5:53:ba:46:
                    20:75:9e:fb:b9:9a:0e:c2:9c:6d:13:be:94:21:3c:
                    3c:8c:55:bb:af:d3:29:c6:ad:73:1d:c7:57:42:54:
                    29:d1:e9:0b:d4:db:e4:d0:06:84:68:1b:81:f1:86:
                    84:ef:53:46:5e:f5:c5:d7:fe:00:67:17:4f:ec:9d:
                    bb:92:1a:a7:2a:fd:fd:1d:5c:8b:c4:f0:07:c0:10:
                    d7:43:25:09:d2:15:b4:bb:5b:07:ff:3d:48:33:01:
                    fc:f3:5a:ce:ba:e3:e2:5c:71:7c:fd:22:3b:bb:5f:
                    0c:32:27:28:36:6e:e3:65:eb:93:c6:7d:67:73:35:
                    06:cf:29:0f:84:08:15:93:ac:a5:78:77:87:10:0b:
                    f2:23:54:eb:72:9f:bd:d7:d1:83:64:1a:86:c9:35:
                    a1:4f:76:2f:55:ea:3a:e0:31:b3:fd:29:d0:8e:da:
                    4c:ac:65:0b:47:22:eb:3d:a2:82:8b:c0:f3:03:3e:
                    7d:ef:50:71:23:6f:56:8a:bb:71:4c:6b:87:13:d6:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:55:9F:F4:3D:D0:B4:45:05:B5:BD:E2:BD:F9:2A:7F:F6:AC:DA
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:50:d6:25:8a:a9:4c:af:6c:74:9b:7a:00:c2:29:b9:a3:da:
         cd:b5:48:e2:34:7f:4e:4b:1c:1e:b5:80:5d:b5:88:3d:1d:da:
         aa:26:28:78:0b:8e:9b:72:59:b8:13:83:17:be:a0:8f:c5:2d:
         9d:7f:01:c0:d9:20:bd:02:43:38:92:80:ab:62:80:6b:5b:5d:
         a9:37:d5:be:2e:6f:15:d1:1c:fc:d6:f5:22:01:45:ea:a0:74:
         d5:a0:24:f9:69:86:86:25:82:88:f6:8c:73:01:6d:43:2e:1e:
         91:7e:69:39:9a:10:d3:ea:3f:b4:8d:cd:9e:61:6e:2f:fb:7a:
         08:1b:32:90:95:7f:74:89:88:aa:d4:df:fa:71:96:bb:2b:48:
         5e:df:d0:ef:1c:cf:4d:69:32:13:95:35:d6:78:6c:93:96:99:
         18:34:db:71:4c:5c:3a:fd:9a:ea:57:c3:aa:91:17:0a:c6:34:
         e8:d9:1c:36:8e:07:52:f5:cf:5a:ca:cb:29:05:b2:9b:5d:86:
         82:90:f6:82:27:87:d9:42:49:5d:c0:94:98:ab:c7:8f:37:12:
         d7:10:48:e5:37:2c:75:4e:7d:d4:0a:ff:64:28:08:43:82:a8:
         0c:b9:f1:4d:ff:dc:19:f7:f3:09:73:29:10:14:f6:5f:a0:53:
         01:7e:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org