Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398325.roa
File:                     AS398325.roa (raw, json)
Hash identifier:          4KxS5crv7Hc68uV0cgcVW+TmcEGfbEFrTJ9VncIKo80=
Subject key identifier:   F3:DF:E8:8C:01:4F:08:5B:6A:E1:FE:43:B1:FA:FE:26:DE:4A:63:2B
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6AA91C9DA30D769B10128222457C9D478671D7EC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398325.roa
Signing time:             Tue 15 Aug 2023 02:00:29 +0000
ROA not before:           Tue 15 Aug 2023 01:55:29 +0000
ROA not after:            Tue 13 Aug 2024 02:00:29 +0000
asID:                     398325
IP address blocks:        2602:fed2:7126::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a9:1c:9d:a3:0d:76:9b:10:12:82:22:45:7c:9d:47:86:71:d7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:29 2023 GMT
            Not After : Aug 13 02:00:29 2024 GMT
        Subject: CN=F3DFE88C014F085B6AE1FE43B1FAFE26DE4A632B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:d7:74:75:fc:8b:55:26:a2:62:49:5e:be:
                    48:65:36:d3:a5:53:62:c9:83:0f:ec:3b:cd:08:95:
                    4f:8e:13:8e:a3:11:bc:0b:3a:71:c4:95:f1:ea:12:
                    d1:de:10:0e:60:82:fd:58:53:d4:99:d0:e0:76:45:
                    62:42:11:44:86:d4:ec:25:8c:ce:ec:95:cb:99:15:
                    32:d9:00:69:c4:79:f4:e2:e2:bb:6b:f4:b1:94:3f:
                    5c:f5:4a:3a:86:97:2c:e4:ab:78:c2:ea:66:9f:1e:
                    e5:fa:80:59:35:46:92:12:2a:ec:ec:31:c1:1c:d1:
                    29:3f:8a:22:b1:1d:c0:d8:3f:45:a2:21:34:38:32:
                    7a:c2:8b:0e:b0:05:a6:5d:c1:9a:fb:25:41:22:6e:
                    d6:1c:ec:6e:a0:7b:57:a7:ad:5c:85:a5:23:68:11:
                    d9:e4:cd:a0:29:84:31:49:b2:8d:52:7c:bc:0b:b4:
                    31:a0:0e:18:8e:98:82:28:b3:43:33:62:d5:f4:75:
                    b9:10:d9:a0:eb:98:cc:a0:92:48:1d:4c:6e:b0:5d:
                    57:ae:32:4c:ac:e5:a4:e9:50:c2:93:e8:b0:88:08:
                    98:3f:5a:41:5a:4c:d1:65:11:64:2e:cb:bf:08:1f:
                    4a:97:9d:59:32:54:d2:aa:dd:77:e3:76:0a:46:2b:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DF:E8:8C:01:4F:08:5B:6A:E1:FE:43:B1:FA:FE:26:DE:4A:63:2B
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398325.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7126::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:5a:16:0b:53:c7:a6:52:86:b9:3b:fd:d0:b1:46:f5:b5:3f:
         5f:4c:91:c9:fe:c3:24:f6:a6:ab:4f:af:ff:0d:2b:ff:e0:f9:
         d3:e9:b6:2d:c9:a5:f0:25:b8:69:90:0a:fb:b3:86:70:39:2e:
         fc:d9:0a:ad:d5:b1:0b:71:fe:67:40:1b:dc:12:d5:1e:8b:be:
         9a:20:fe:6e:ef:19:4c:8b:24:41:53:f9:2d:b8:6e:b6:c4:5c:
         10:90:c7:79:ef:f9:2b:7e:42:77:53:c8:d0:b0:10:a3:48:53:
         94:9d:f2:b4:35:65:85:6f:e9:57:e3:ee:3f:31:53:76:bf:eb:
         2e:ac:6a:50:59:17:40:dd:67:62:f9:d4:70:92:2b:7a:54:0c:
         54:f4:48:3d:ba:51:32:df:8a:5b:c4:c5:2d:2c:e7:7c:d8:c1:
         ec:58:71:9a:63:03:2c:95:93:ee:22:9e:c2:b6:1d:6c:cf:21:
         59:25:62:ff:81:00:1b:fd:b9:30:30:1e:03:80:d5:fa:20:09:
         74:83:2d:15:c2:91:cc:24:0b:28:5d:e2:95:17:1c:e1:49:f3:
         4b:8f:c0:52:3a:9c:9a:29:d9:28:c1:c9:e9:41:36:16:ab:69:
         b2:43:74:db:bc:8d:a6:f9:72:3f:49:0f:4b:8d:d9:97:41:00:
         af:8f:9f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:23:56 2024 by rpki-client on console-fra.rpki-client.org