Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49459.roa
File:                     AS49459.roa (raw, json)
Hash identifier:          uPdq8VC9sfyiRnDAnakg78+imdcPZUO40Zkqx5JGQPU=
Subject key identifier:   7B:05:0D:F8:84:B0:46:16:50:0C:BC:B4:D7:DC:C0:3B:19:27:97:39
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       410EC7E4B713ADC3E5E2EA11638B8C864111909F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49459.roa
Signing time:             Tue 16 Jul 2024 02:42:27 +0000
ROA not before:           Tue 16 Jul 2024 02:37:27 +0000
ROA not after:            Tue 15 Jul 2025 02:42:27 +0000
asID:                     49459
IP address blocks:        2602:fed2:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 16:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0e:c7:e4:b7:13:ad:c3:e5:e2:ea:11:63:8b:8c:86:41:11:90:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:27 2024 GMT
            Not After : Jul 15 02:42:27 2025 GMT
        Subject: CN=7B050DF884B04616500CBCB4D7DCC03B19279739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:a1:44:41:c4:b6:5e:2c:a1:8a:39:a6:f7:
                    96:42:34:4d:45:74:65:fd:6a:37:9f:d8:2d:18:65:
                    d1:6a:f3:fa:ed:84:bb:2c:f0:eb:84:66:76:c3:f4:
                    37:5f:c8:3f:4e:c9:3f:97:fc:d6:e7:76:c8:df:16:
                    9f:33:47:1f:fe:74:8c:f2:3f:14:a4:b1:21:3a:fc:
                    b3:fc:de:34:87:82:37:4c:fb:b2:60:be:52:64:c5:
                    57:b8:78:8b:1f:2b:19:4b:b8:8c:47:83:1a:09:e4:
                    84:40:e5:9c:57:8c:5d:3f:2b:46:fc:74:73:ee:75:
                    c3:62:10:df:6f:f0:f5:da:8c:b4:73:16:66:71:6a:
                    e7:ba:d4:9c:4e:6e:b4:d5:45:f2:46:00:30:71:f5:
                    a7:41:ec:39:0a:6e:99:cf:ac:89:18:1d:6b:ef:81:
                    18:e4:8a:c9:dd:91:13:51:cc:8e:82:19:e6:e9:41:
                    49:c9:26:76:89:d2:4b:0f:35:45:da:b0:c2:3f:a6:
                    44:d0:77:8b:dd:77:cc:81:30:f7:91:a4:75:b3:c2:
                    5e:ab:c7:6d:4b:41:c2:d3:d9:ea:a7:5a:a5:98:73:
                    48:0c:7e:1a:cb:a3:cc:c1:0a:77:83:d4:f6:6c:17:
                    8d:4e:59:c5:fe:db:c2:d3:b5:2f:be:9a:73:37:6d:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:05:0D:F8:84:B0:46:16:50:0C:BC:B4:D7:DC:C0:3B:19:27:97:39
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:ba:a3:15:17:ea:ba:b6:02:bf:70:bc:a3:c4:6f:18:6a:
         c6:a0:66:bf:26:a9:c3:33:83:4f:b2:52:c0:5c:c9:78:73:bb:
         a2:af:1f:ee:90:79:3d:73:a7:8e:6f:6a:b6:55:dc:40:bf:9d:
         e1:53:41:89:85:7b:42:60:af:30:6f:3a:a6:01:bf:80:42:0d:
         5b:18:51:ce:c1:6d:1a:04:a3:79:fa:95:8f:be:7c:5e:41:51:
         9b:92:bb:46:68:bc:f2:66:f5:07:2f:4e:79:ec:18:23:6a:0f:
         d9:57:99:16:00:50:62:07:c7:3c:65:d9:ac:6a:7e:8b:43:50:
         e3:c2:cd:7d:b7:12:68:60:e6:57:00:db:2a:e8:0d:d5:b7:10:
         ae:f4:3d:f9:c2:57:ef:f9:30:0d:66:20:d3:fe:26:fa:90:59:
         31:87:b2:34:71:b0:7d:d1:a9:eb:5a:d3:cd:2a:2c:20:57:21:
         67:e7:e4:37:af:18:07:7e:cd:ae:ce:dc:b6:95:01:ec:f1:5f:
         2d:0b:27:13:a0:30:1d:c9:56:08:91:83:96:2b:ab:60:46:84:
         6a:15:30:3b:2e:b0:3e:62:1d:a7:86:2d:03:cf:74:70:b1:35:
         6a:c6:5f:d7:10:7a:a4:7a:de:5a:de:f4:39:a2:7c:dc:7c:fe:
         bd:43:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:57 2025 by rpki-client