Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS399748.roa
File:                     AS399748.roa (raw, json)
Hash identifier:          zZzH2oZ/ZrIDPxgosL7HcCQBIQz8AnUt/loFpwFZdho=
Subject key identifier:   94:75:22:A8:03:51:0D:32:11:BF:5B:4C:69:01:77:FC:C2:AE:0E:E3
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3DE6AF201A2EDE34A9F02568C0E8429B1D59825C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS399748.roa
Signing time:             Tue 15 Aug 2023 02:00:28 +0000
ROA not before:           Tue 15 Aug 2023 01:55:28 +0000
ROA not after:            Tue 13 Aug 2024 02:00:28 +0000
asID:                     399748
IP address blocks:        2602:fed2:7031::/48 maxlen: 48
                          2602:fed2:7032::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 10:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e6:af:20:1a:2e:de:34:a9:f0:25:68:c0:e8:42:9b:1d:59:82:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:28 2023 GMT
            Not After : Aug 13 02:00:28 2024 GMT
        Subject: CN=947522A803510D3211BF5B4C690177FCC2AE0EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:32:71:96:75:40:c6:98:6f:e7:0d:1a:cd:
                    85:22:60:d6:b7:03:bf:ae:f0:23:92:cb:93:b9:73:
                    ec:de:88:c4:24:dc:6d:09:3d:92:40:5b:02:3f:2a:
                    68:3d:db:25:9a:c4:b1:ae:1a:97:ab:49:82:09:c5:
                    cf:a2:bf:95:48:c4:aa:01:b2:93:1c:b1:d6:09:24:
                    a5:0c:1a:23:a4:94:40:17:77:ac:36:e4:f7:0c:81:
                    20:7e:cb:96:41:f8:ea:a3:fe:e8:13:07:ba:bf:20:
                    e8:d0:14:d6:29:2e:50:f1:8f:1b:35:3c:63:6b:f8:
                    90:86:ac:57:7c:55:a3:b3:65:f9:f6:e7:0e:df:45:
                    bb:6c:70:04:49:b3:31:aa:50:0d:db:31:4d:bf:e6:
                    cf:2d:78:16:8f:01:02:75:55:af:4e:37:dd:c1:fc:
                    2f:08:5a:d3:1a:9b:34:61:0d:95:d0:03:78:65:13:
                    bd:5f:49:41:4d:c7:62:be:7c:8b:2f:a3:a4:f7:61:
                    6e:48:d5:6e:14:b6:de:5b:b4:02:9d:26:d1:87:83:
                    a9:c7:99:14:4e:63:15:d6:40:21:e5:95:2b:20:7b:
                    b9:dc:69:fa:b7:4f:db:07:7c:eb:31:41:ab:df:51:
                    85:d0:4f:ae:cb:6f:4f:2f:d0:f9:db:92:89:b8:fd:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:75:22:A8:03:51:0D:32:11:BF:5B:4C:69:01:77:FC:C2:AE:0E:E3
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS399748.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7031::-2602:fed2:7032:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         44:09:05:cc:cc:12:73:76:4f:7e:42:25:13:1a:e1:ef:7c:a2:
         d6:4d:8d:58:46:2f:af:3b:bd:73:51:0c:7e:27:21:46:5c:3d:
         cf:97:88:14:c5:c2:c8:6c:bc:93:d8:db:bf:28:fb:5e:14:9f:
         cd:d8:3e:c6:fb:12:6b:7b:90:56:e4:15:e0:4f:0c:14:e6:3b:
         1d:3e:4a:17:09:b7:aa:18:d7:e7:8d:10:e8:7f:14:e1:2a:86:
         73:07:72:f5:09:4d:a4:19:d4:fb:c2:fa:35:21:84:96:30:18:
         19:e6:50:2e:40:3b:50:e4:37:27:2d:22:38:25:a5:96:b2:a8:
         8a:57:0d:ec:44:af:bf:73:57:92:a8:45:f1:fc:f1:be:60:34:
         35:77:37:05:71:c6:00:db:b6:f8:eb:81:84:47:90:05:95:82:
         ad:d1:56:4f:61:6a:80:c1:09:05:58:d8:4b:27:68:10:b2:7c:
         79:c9:07:6d:4a:5e:87:34:59:d9:8e:43:80:25:17:b8:da:a6:
         2b:d7:83:d7:d9:a3:21:d9:de:4f:6a:92:d5:44:13:f6:44:eb:
         8d:f2:60:b6:7f:22:88:17:24:9a:96:49:08:87:fe:b3:17:f0:
         a1:1f:6b:51:cd:b7:46:87:3a:77:dd:57:40:ad:4f:c8:ba:67:
         f6:3d:81:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:05 2024 by rpki-client on console-ams.rpki-client.org