Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400307.roa
File:                     AS400307.roa (raw, json)
Hash identifier:          zAw7tUUw6np/bSOUtdE2GlxGmkleVPmPKFfFUK74YGw=
Subject key identifier:   CC:20:F0:5E:5F:92:4F:D7:3E:6A:9F:04:81:F0:AC:BD:2C:AA:84:4B
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       42C62C29795B0F9C9E9030654E53EE832CE76FC9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400307.roa
Signing time:             Tue 15 Aug 2023 02:00:27 +0000
ROA not before:           Tue 15 Aug 2023 01:55:27 +0000
ROA not after:            Tue 13 Aug 2024 02:00:27 +0000
asID:                     400307
IP address blocks:        2602:fed2:7183::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 05:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c6:2c:29:79:5b:0f:9c:9e:90:30:65:4e:53:ee:83:2c:e7:6f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:27 2023 GMT
            Not After : Aug 13 02:00:27 2024 GMT
        Subject: CN=CC20F05E5F924FD73E6A9F0481F0ACBD2CAA844B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:5e:f8:9b:3f:34:cf:8f:9f:d6:46:cd:5e:
                    63:b6:e1:a1:bd:ad:5f:ce:0a:f8:0a:f2:95:3a:64:
                    21:b9:20:6d:66:0b:73:63:35:cd:9f:3d:69:db:fb:
                    2c:9e:fc:a5:26:be:e2:ed:fb:c0:7f:fb:c5:82:56:
                    39:30:5d:e8:8e:1f:10:11:f7:74:d0:21:9c:dd:96:
                    df:c6:67:94:7d:fb:51:2a:c7:3e:55:67:29:b7:bc:
                    6c:3c:de:cd:07:da:8b:82:49:32:44:6e:73:4a:28:
                    c5:8b:9c:af:86:85:d7:e5:15:6c:87:8c:12:bc:df:
                    5e:f7:4d:e4:8a:89:3d:23:d1:a7:57:03:0e:ac:46:
                    6e:1b:63:a9:b3:89:40:20:9b:96:3d:06:66:6e:50:
                    5e:75:76:61:80:1f:d4:51:c4:e4:ec:8b:00:54:7a:
                    f0:be:72:55:18:e6:a9:5d:be:d2:87:4a:a7:31:08:
                    5e:8b:3c:ac:2d:fd:ad:5b:cf:f8:3c:72:5c:87:bd:
                    f1:2a:7a:40:e9:53:38:4b:ab:61:05:70:bf:29:1f:
                    58:c2:d8:db:29:9f:66:97:3f:c6:a6:82:01:12:6a:
                    17:38:59:7b:a7:46:bc:12:02:d3:68:f6:2b:e4:66:
                    f0:cf:6f:97:37:67:3f:09:b4:6e:db:84:4b:ef:35:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:20:F0:5E:5F:92:4F:D7:3E:6A:9F:04:81:F0:AC:BD:2C:AA:84:4B
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400307.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7183::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:63:05:4c:f5:7d:1a:5c:f2:69:14:6b:7e:21:53:69:5c:
         73:41:6f:4d:2e:0f:9f:51:4f:61:f3:22:c7:f7:0a:2a:65:86:
         89:df:4b:19:a7:7c:90:fc:ae:e9:cb:21:87:62:ed:ab:3f:33:
         3b:5c:8e:b2:73:8f:50:b7:cb:69:89:bc:ca:78:b8:9a:f0:54:
         8e:9b:e2:9f:af:ce:e5:d1:8b:63:b4:79:6a:7e:ac:52:e9:1e:
         d5:4d:7f:00:1f:12:c7:ca:cf:ea:8d:10:59:67:b7:0e:f0:a2:
         e5:48:3a:bd:43:23:eb:12:7b:56:70:2f:fb:ff:c9:31:ea:1a:
         3e:82:65:82:a8:f0:0e:bc:24:59:e0:90:7e:a7:42:c2:08:9a:
         e2:d6:5c:3b:33:c5:5e:23:4e:9f:68:7a:a1:8e:a4:d8:33:e0:
         81:60:c5:0e:e4:82:6c:17:30:49:95:f8:f1:14:0e:69:5d:bd:
         d4:d9:4d:08:2e:eb:c2:8d:59:d3:36:b1:37:02:8c:1b:d0:1a:
         92:69:2e:17:0f:42:f2:61:22:5a:19:02:6f:34:fe:fe:2b:f7:
         17:73:73:01:bd:83:0b:04:ef:ff:5d:9d:bd:23:07:e3:9b:e5:
         c4:54:38:0a:3a:56:a8:07:80:78:4a:5e:e5:2a:f5:38:a0:6e:
         38:f3:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 04:08:54 2024 by rpki-client on console-ams.rpki-client.org