Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54133.roa
File:                     AS54133.roa (raw, json)
Hash identifier:          FPuxlSDZ0gm338O42iMhd48EyaTZYgXlZ48Jz7l85tQ=
Subject key identifier:   CA:5E:03:FC:5B:75:70:55:D6:C3:EF:C1:C6:95:B1:45:61:F6:F3:BB
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       300C16AFB5105B3DD5A552AF8A3BF5E48AE7063A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54133.roa
Signing time:             Fri 01 Mar 2024 17:48:13 +0000
ROA not before:           Fri 01 Mar 2024 17:43:13 +0000
ROA not after:            Fri 28 Feb 2025 17:48:13 +0000
asID:                     54133
IP address blocks:        161.129.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0c:16:af:b5:10:5b:3d:d5:a5:52:af:8a:3b:f5:e4:8a:e7:06:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Mar  1 17:43:13 2024 GMT
            Not After : Feb 28 17:48:13 2025 GMT
        Subject: CN=CA5E03FC5B757055D6C3EFC1C695B14561F6F3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:68:a9:cc:18:66:5b:3c:3c:91:a0:40:9c:
                    42:ff:00:e8:12:2d:c6:aa:db:4b:62:cd:f0:40:57:
                    04:e7:33:0b:f1:a3:46:97:51:7e:a3:b7:3a:3f:25:
                    05:bb:89:ff:31:a0:41:3d:19:16:a0:d0:75:e9:9d:
                    e3:0c:0f:0c:6d:12:b8:dc:bd:00:75:db:11:b6:a1:
                    17:39:7c:97:88:fc:95:9e:b6:32:dc:36:b5:5b:68:
                    27:a9:e9:05:de:17:91:1d:ee:33:fc:26:34:f8:36:
                    72:6c:41:87:a2:72:25:f7:64:3d:fe:cb:b0:e0:6b:
                    a3:c8:4c:01:cd:8c:5a:e2:04:50:bf:47:97:18:32:
                    1b:b8:0a:13:05:a4:84:85:a4:cc:ac:ec:33:0e:eb:
                    1a:9c:c8:e7:49:86:a9:74:66:76:ce:54:7f:6e:90:
                    0f:d0:b0:fc:64:46:d7:29:e3:68:29:62:8d:cf:21:
                    1d:6b:7b:da:f2:c7:64:74:d1:37:d7:d4:64:29:36:
                    c4:03:cc:a8:4b:e7:e9:13:da:86:3e:5a:ab:9d:56:
                    56:c0:1d:d8:d8:2d:18:00:45:94:a4:21:5a:6b:29:
                    28:bb:8a:fe:62:e1:4f:e3:ff:a9:9c:dd:7a:ad:6f:
                    e2:54:bc:d2:b1:64:99:62:89:54:e8:57:ff:eb:a3:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5E:03:FC:5B:75:70:55:D6:C3:EF:C1:C6:95:B1:45:61:F6:F3:BB
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:7a:bf:44:96:4a:a7:fb:0a:a5:f2:6e:33:23:9f:af:c9:8e:
         2e:4a:a9:de:01:df:3c:86:08:db:ad:ea:41:b1:cf:8f:1a:11:
         c4:1e:b9:09:95:b4:b0:c9:f5:b2:2e:d2:bb:6a:20:2d:85:12:
         10:90:1d:d7:85:75:ae:4c:dc:0f:a7:56:68:92:03:26:9c:96:
         d4:e5:59:45:bb:de:78:f3:28:22:a3:a3:fe:4b:54:8b:3a:bc:
         7e:f7:b2:fd:a0:7d:1f:47:c5:8d:19:00:1d:95:09:90:fe:6a:
         e5:36:0b:cb:03:91:80:37:3f:e1:48:04:78:ef:67:b7:a0:0b:
         1a:c6:4f:ac:98:7d:6d:54:03:06:0a:e9:a7:26:da:9d:74:06:
         91:97:ee:3a:ef:17:54:da:cb:34:9d:8b:aa:e3:a9:c4:9f:83:
         f9:55:71:ae:d6:e4:f5:c2:cd:35:60:23:2e:42:54:0b:08:73:
         70:cb:38:56:a6:34:99:8d:b3:3c:44:03:68:76:d6:09:2b:e0:
         92:35:ff:4a:40:59:2b:21:bf:c3:bd:2d:cc:05:b9:fd:9b:81:
         56:05:84:61:06:6e:bd:96:0b:d4:b1:5a:97:13:25:b2:3a:e9:
         d6:ad:1b:2e:b0:92:bc:38:d3:bb:59:12:c5:54:ac:59:43:f9:
         a9:31:1c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org