Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa
File:                     AS400298.roa (raw, json)
Hash identifier:          6Tm5gKsPZuxxZSNRHiP11WLAMuG3x9TaFGQAw32kgz8=
Subject key identifier:   20:15:98:E1:56:77:FD:B9:B6:CA:19:D6:34:A4:4B:E3:48:78:49:75
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1E1FEA2A135EC916497C2B62B314FD694826E444
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa
Signing time:             Tue 09 Jan 2024 00:07:05 +0000
ROA not before:           Tue 09 Jan 2024 00:02:05 +0000
ROA not after:            Tue 07 Jan 2025 00:07:05 +0000
asID:                     400298
IP address blocks:        2602:fed2:7189::/48 maxlen: 48
                          2602:fed2:730e::/48 maxlen: 48
                          2602:fed2:7317::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1f:ea:2a:13:5e:c9:16:49:7c:2b:62:b3:14:fd:69:48:26:e4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan  9 00:02:05 2024 GMT
            Not After : Jan  7 00:07:05 2025 GMT
        Subject: CN=201598E15677FDB9B6CA19D634A44BE348784975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:ae:ec:4c:0f:5e:27:9f:ad:46:a5:b3:52:
                    ba:72:c9:cd:de:59:78:f5:c5:d9:d5:a2:2f:f9:b5:
                    15:06:4c:38:31:10:2f:3c:f3:0b:19:d6:30:c9:a7:
                    b8:be:4c:b2:d2:b4:1a:dd:3b:9d:49:9a:bc:89:90:
                    07:f0:c2:02:f1:bf:23:32:65:d2:5b:af:d6:56:8c:
                    8e:89:e4:6c:8c:25:d5:a3:16:44:83:01:d5:a5:78:
                    a6:1a:5f:11:42:a1:e4:4f:69:e2:8e:31:94:54:d8:
                    ce:7a:3c:c6:63:76:39:58:b2:ac:88:3a:36:65:59:
                    bf:f0:50:f9:b5:13:c4:29:9a:41:a2:9a:96:00:11:
                    32:72:84:fa:7c:5e:da:99:ad:a3:11:81:fc:23:c4:
                    9a:db:c2:28:f1:0c:9e:43:78:d1:a1:0d:80:f6:12:
                    82:a9:fb:c7:83:54:14:39:df:71:22:0d:a5:83:15:
                    60:b4:8f:77:a2:8f:19:68:fb:f2:94:a8:4f:66:fc:
                    17:b8:18:fd:ef:a3:11:15:ab:db:4b:cf:76:1e:f4:
                    c1:da:88:1b:0f:bd:1f:1a:4d:3b:74:78:67:89:18:
                    08:c2:75:b1:ea:39:5d:ce:3d:8b:3a:74:65:27:11:
                    01:71:a7:ad:06:f9:67:5b:30:b0:80:3e:10:1b:46:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:15:98:E1:56:77:FD:B9:B6:CA:19:D6:34:A4:4B:E3:48:78:49:75
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7189::/48
                  2602:fed2:730e::/48
                  2602:fed2:7317::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:56:63:ab:72:7e:5d:d4:14:12:dd:62:2d:3c:a1:c1:b3:55:
         48:97:a0:b1:21:ad:68:13:e2:b8:1d:bd:93:69:30:2f:ec:93:
         94:96:29:20:58:8e:7b:e7:c2:dc:b1:22:71:8c:50:70:20:e6:
         fa:b9:04:41:3f:39:56:25:de:30:2f:1b:07:f1:4e:06:fd:a1:
         d4:13:95:06:7e:ae:21:37:ca:d0:bb:b2:2d:75:83:5f:39:ed:
         f9:98:eb:5d:36:3c:1f:72:94:80:a0:8d:e6:1b:3a:96:23:53:
         34:80:68:be:f5:04:85:79:c8:d2:41:46:5a:75:fe:4d:7a:44:
         f9:40:c0:f1:72:24:47:54:a4:5f:a6:95:8a:28:37:36:f3:f3:
         35:dd:64:b5:88:16:c4:95:69:76:32:e9:6d:e5:03:ee:8b:82:
         42:1e:12:3f:95:d2:17:ac:07:5a:4f:cb:44:21:d4:56:f6:a3:
         c8:09:2f:e6:d4:46:10:cf:ad:66:71:f2:2e:5b:53:2b:aa:9f:
         03:51:3c:47:a7:7e:36:89:0e:cb:40:26:33:1c:32:2e:b3:37:
         a5:79:e2:11:89:bd:6c:36:bf:e3:f2:b3:1f:41:90:83:5b:76:
         73:97:e6:ea:f5:ad:18:5d:32:1a:a3:d4:e5:4c:c4:03:58:22:
         7a:35:7a:3c
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUHh/qKhNeyRZJfCtisxT9aUgm5EQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwMTA5MDAwMjA1WhcNMjUwMTA3MDAwNzA1
WjAzMTEwLwYDVQQDEygyMDE1OThFMTU2NzdGREI5QjZDQTE5RDYzNEE0NEJFMzQ4
Nzg0OTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PCu7EwPXief
rUals1K6csnN3ll49cXZ1aIv+bUVBkw4MRAvPPMLGdYwyae4vkyy0rQa3TudSZq8
iZAH8MIC8b8jMmXSW6/WVoyOieRsjCXVoxZEgwHVpXimGl8RQqHkT2nijjGUVNjO
ejzGY3Y5WLKsiDo2ZVm/8FD5tRPEKZpBopqWABEycoT6fF7ama2jEYH8I8Sa28Io
8QyeQ3jRoQ2A9hKCqfvHg1QUOd9xIg2lgxVgtI93oo8ZaPvylKhPZvwXuBj976MR
FavbS892HvTB2ogbD70fGk07dHhniRgIwnWx6jldzj2LOnRlJxEBcaetBvlnWzCw
gD4QG0aw4wIDAQABo4ICazCCAmcwHQYDVR0OBBYEFCAVmOFWd/25tsoZ1jSkS+NI
eEl1MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVM0MDAyOTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMCEEAgACMBsDBwAmAv7ScYkDBwAmAv7S
cw4DBwAmAv7ScxcwDQYJKoZIhvcNAQELBQADggEBAEFWY6tyfl3UFBLdYi08ocGz
VUiXoLEhrWgT4rgdvZNpMC/sk5SWKSBYjnvnwtyxInGMUHAg5vq5BEE/OVYl3jAv
GwfxTgb9odQTlQZ+riE3ytC7si11g1857fmY6102PB9ylICgjeYbOpYjUzSAaL71
BIV5yNJBRlp1/k16RPlAwPFyJEdUpF+mlYooNzbz8zXdZLWIFsSVaXYy6W3lA+6L
gkIeEj+V0hesB1pPy0Qh1Fb2o8gJL+bURhDPrWZx8i5bUyuqnwNRPEenfjaJDstA
JjMcMi6zN6V54hGJvWw2v+Pysx9BkINbdnOX5ur1rRhdMhqj1OVMxANYIno1ejw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org