Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398325.roa
File:                     AS398325.roa (download)
Hash identifier:          hrEVOm5ouuLrxdEnAtwAvRlkaW6oNvazfS7hIxegfpU=
Subject key identifier:   7F:A4:DD:73:F8:B7:4B:6A:06:53:32:D1:66:D1:E2:03:30:4C:32:E8
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5528C65842509620D65305A4F9512EB66B616FE6
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398325.roa
ROA valid until:          Sep 12 01:20:18 2023 GMT
asID:                     398325
IP address blocks:
    1: 2602:fed2:7126::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:28:c6:58:42:50:96:20:d6:53:05:a4:f9:51:2e:b6:6b:61:6f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 13 01:15:18 2022 GMT
            Not After : Sep 12 01:20:18 2023 GMT
        Subject: CN=7FA4DD73F8B74B6A065332D166D1E203304C32E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:fe:4b:7f:fc:79:e4:35:fb:e6:99:ec:a9:
                    b2:c6:85:bf:65:1f:43:5e:f2:89:b4:5a:76:a1:35:
                    d0:0d:0a:ec:1c:d2:c3:d6:70:c5:65:87:e7:21:26:
                    52:24:8b:25:59:03:4d:82:10:7b:21:b8:62:eb:fd:
                    b7:ff:2e:80:70:d1:92:e0:20:62:e8:a6:84:91:6a:
                    55:76:1e:4d:c5:e4:6a:f6:02:3f:18:19:03:13:37:
                    08:83:f8:70:f9:70:16:63:f1:4d:2a:29:17:21:44:
                    d9:c5:c6:22:d4:78:db:22:b2:2a:8f:ee:06:66:43:
                    b7:06:16:25:89:48:62:7a:ea:ad:eb:ac:9e:aa:aa:
                    a7:3a:db:4a:96:d0:5d:ec:c9:11:3a:6d:9e:0f:6d:
                    90:90:8f:16:ff:34:16:30:57:60:d7:26:3c:ec:28:
                    9a:69:81:be:de:bd:fa:de:ba:ba:62:7b:fc:ac:6d:
                    64:53:ea:15:e6:ec:1f:84:05:07:88:3f:84:41:0c:
                    0e:f4:97:19:6a:55:3a:55:86:92:7f:d9:eb:48:59:
                    b0:2c:77:0e:57:21:9b:d5:fd:60:37:f6:54:8d:6e:
                    e9:7b:6b:fb:7f:cd:fc:87:f9:9b:a5:75:41:cc:e7:
                    65:13:af:e2:4f:4b:dc:d7:ea:88:46:ec:46:ee:4d:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:A4:DD:73:F8:B7:4B:6A:06:53:32:D1:66:D1:E2:03:30:4C:32:E8
            X509v3 Authority Key Identifier: 
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398325.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7126::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:26:d9:1e:66:25:b9:0b:05:2b:5e:83:f5:f0:cf:5a:b9:
         c0:1a:44:e6:bf:1e:87:7a:25:6d:cf:aa:1c:91:05:30:2e:6f:
         92:42:46:16:74:d3:8f:3b:29:f4:9c:3c:3d:7e:2c:c8:fa:3d:
         11:16:d3:95:c8:1b:17:80:40:b3:7b:df:4f:9a:a7:a9:32:b6:
         46:fb:5f:4c:b6:5e:4d:bc:3e:6b:e8:9d:15:04:b2:87:09:a0:
         e3:5e:74:ae:8f:54:8b:c7:c8:d1:f8:64:c6:7a:50:57:97:dc:
         51:c2:e5:a4:52:9a:60:db:cc:08:cb:99:c9:5d:58:a5:be:c7:
         c5:de:a6:e1:fe:75:ce:e2:38:2b:bf:b5:24:6d:02:20:f0:4d:
         d5:d6:57:47:4b:28:93:eb:c5:e8:b9:ca:8d:35:07:7d:68:bf:
         a7:88:18:9d:e9:4d:e2:a0:3d:17:28:a3:d8:dd:38:48:fa:4c:
         d3:c1:c0:0e:8a:e0:61:d5:c0:f6:c5:eb:50:6a:1b:02:d2:02:
         0d:2a:4b:ca:9a:58:e2:88:49:0d:a8:5c:56:1d:f5:31:17:ec:
         9e:5b:58:d9:37:93:4e:b3:2c:47:80:11:b9:54:90:dc:96:98:
         db:b0:48:81:c5:8d:2b:de:6b:50:fe:ed:10:7d:91:96:e5:2e:
         c9:04:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 15:04:59 2022 by rpki-client.