Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          unmgFoS8BAssrs1CBgMjWYKSfZuhOA5aQ1L+UY9oIAw=
Subject key identifier:   3E:A4:66:8C:2A:56:12:2D:0D:68:63:C4:69:DE:A7:02:90:5B:D4:39
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       30314AE3FF7832152DA3FADF573258BDF2C8AC5A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS40676.roa
Signing time:             Sat 13 Apr 2024 07:08:28 +0000
ROA not before:           Sat 13 Apr 2024 07:03:28 +0000
ROA not after:            Sat 12 Apr 2025 07:08:28 +0000
asID:                     40676
IP address blocks:        2602:fed2:7316::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:31:4a:e3:ff:78:32:15:2d:a3:fa:df:57:32:58:bd:f2:c8:ac:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Apr 13 07:03:28 2024 GMT
            Not After : Apr 12 07:08:28 2025 GMT
        Subject: CN=3EA4668C2A56122D0D6863C469DEA702905BD439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:d0:73:ff:30:b0:28:9b:0e:f3:b5:df:29:
                    0b:bf:f3:f0:80:d6:10:59:24:6c:34:e2:12:a0:3a:
                    4c:da:ae:79:37:24:82:ff:8e:6d:a9:41:5e:e7:cb:
                    d3:f3:10:a6:78:7c:31:6c:01:55:87:b0:52:c3:57:
                    f1:31:d9:b9:b4:9b:81:eb:67:06:2b:db:05:2d:df:
                    9e:4c:ff:70:68:fc:c4:95:c6:d3:e8:58:2b:7f:36:
                    13:e1:93:62:a9:29:22:36:36:86:c3:00:96:78:db:
                    13:e3:4e:e5:7a:2f:fc:e1:59:96:48:98:47:db:86:
                    a2:47:6f:89:45:29:c7:23:85:67:17:49:d6:3b:0b:
                    c6:e5:1c:01:5d:9e:37:b5:ec:2c:13:b4:8f:bf:46:
                    ca:e6:5c:d7:86:05:19:43:18:4e:af:16:cc:a4:89:
                    a7:ea:2c:23:d0:e1:76:e2:2c:ac:c0:2f:31:4b:81:
                    9e:01:e8:be:69:1e:81:57:3f:e6:dd:34:4e:a5:3f:
                    b9:da:10:de:42:55:a5:49:e5:73:fc:19:3a:12:21:
                    31:bc:95:66:23:16:8c:58:42:4f:15:69:8c:21:5b:
                    5b:43:d2:95:20:be:f0:d4:cc:5a:ae:01:47:57:e6:
                    12:6c:86:0a:11:d7:22:66:9e:75:6f:20:04:ae:6f:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A4:66:8C:2A:56:12:2D:0D:68:63:C4:69:DE:A7:02:90:5B:D4:39
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7316::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:5f:4b:39:db:e5:ae:d0:5d:93:25:4b:3c:70:64:8d:62:9b:
         be:26:13:ea:73:7e:b4:44:06:3b:69:78:fc:07:c8:24:ed:bd:
         6f:e2:0b:1a:59:f1:d8:c6:d6:cc:d1:8f:43:60:b8:81:2a:44:
         09:0a:74:78:d3:5a:e8:2c:a2:c3:6a:d7:57:32:58:b4:59:76:
         44:14:82:de:01:9c:dd:8a:62:45:d6:0e:27:8d:99:b1:90:60:
         ed:9c:58:2e:e6:63:fc:cf:26:d3:96:72:c0:97:a2:f2:d8:5a:
         63:43:da:ae:de:0e:04:be:85:76:8c:bf:ed:8b:45:00:e0:5b:
         78:2c:c9:a7:fe:d8:12:34:a2:ae:90:09:9b:19:94:a3:3b:56:
         46:cc:78:6c:18:3d:7e:ab:0d:1b:1c:32:4b:b1:20:ae:2b:27:
         78:6f:dc:80:f5:00:4c:b2:1b:b0:9e:a8:cf:54:4b:e2:ab:f6:
         27:cf:e0:53:b6:0f:5a:7b:5f:be:17:90:7c:de:19:2b:6d:7c:
         cf:5d:81:d7:86:72:9d:18:2d:28:0b:ab:b9:64:b8:eb:a6:bf:
         6f:6d:e6:c9:48:ce:d8:55:cd:81:ea:a6:70:47:4b:ec:22:69:
         ee:93:7b:05:f0:55:92:15:dc:38:dc:6a:bc:01:1a:c1:d2:d9:
         94:dd:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org