Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54548.roa
File:                     AS54548.roa (raw, json)
Hash identifier:          RIjSSJ9xsLXX/YVBB9gwSfYiDDXPJeTDNnFY49Bwdm0=
Subject key identifier:   42:2A:25:57:11:32:69:1A:C9:0A:45:A0:EE:D6:E3:3F:64:42:CB:94
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       376E30C625E0FD158FB20EF6DF0BFD50C3CF748B
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54548.roa
Signing time:             Mon 04 Mar 2024 06:15:36 +0000
ROA not before:           Mon 04 Mar 2024 06:10:36 +0000
ROA not after:            Mon 03 Mar 2025 06:15:36 +0000
asID:                     54548
IP address blocks:        2602:fed2:7313::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6e:30:c6:25:e0:fd:15:8f:b2:0e:f6:df:0b:fd:50:c3:cf:74:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Mar  4 06:10:36 2024 GMT
            Not After : Mar  3 06:15:36 2025 GMT
        Subject: CN=422A25571132691AC90A45A0EED6E33F6442CB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:c5:1b:9a:a1:55:59:72:f8:33:bc:c4:5d:
                    5c:49:55:2f:e7:b7:b8:c1:46:a2:ba:ad:95:e7:69:
                    6c:09:ff:34:75:d8:81:8e:b2:dd:3c:0d:ef:18:53:
                    f0:1c:ca:48:34:1d:4c:9b:d2:42:b6:57:e6:73:f7:
                    68:94:10:1e:7f:f2:55:de:a2:a3:c8:e0:cc:1a:9b:
                    8f:e3:a0:b8:25:0f:4a:18:d0:30:bf:c3:33:ee:09:
                    27:84:08:65:b0:e4:10:c2:dc:f8:f1:f6:26:be:06:
                    ed:95:23:2c:84:8d:5e:66:6f:70:3b:ca:9e:e6:69:
                    7c:51:ec:85:ce:ad:0a:f7:10:22:53:b5:a5:60:ac:
                    96:23:be:4f:d0:43:07:6d:31:f1:e2:ec:e2:14:76:
                    ce:92:f2:0a:ae:a3:5a:11:5d:66:c5:6d:ed:3d:26:
                    0b:1b:3d:f2:f7:7e:e5:39:2e:e6:61:18:99:95:bc:
                    fa:f8:a5:ca:8a:b8:75:26:16:cc:98:35:3f:b4:a4:
                    bb:cd:2e:78:50:e7:87:84:a7:6d:8f:ea:f2:f0:84:
                    3f:82:0c:85:4d:24:94:e6:42:4a:aa:5b:07:b4:a0:
                    70:60:f1:be:11:fa:d3:8b:1c:d3:9f:23:07:a6:c9:
                    8b:f5:d1:cf:60:e2:82:23:30:e2:fc:bd:c0:a7:f7:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:25:57:11:32:69:1A:C9:0A:45:A0:EE:D6:E3:3F:64:42:CB:94
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7313::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:47:7d:1d:55:bd:f7:cc:0b:10:a1:1b:02:d0:eb:7a:2e:94:
         ef:74:71:41:de:c4:a6:d2:bd:2e:5e:9f:5f:bc:e3:4d:4e:9e:
         a8:3e:0c:0f:d3:f2:9c:39:7b:b5:98:fe:6e:a1:a2:c5:49:81:
         d4:cd:46:22:f0:49:c0:4a:7f:65:f0:c5:f7:67:44:a9:0f:c3:
         8a:5d:82:39:5d:aa:8f:42:d2:c8:c3:7b:fb:42:b5:b2:75:96:
         5b:01:2d:18:92:e0:5c:03:e3:7e:ca:1d:c5:3e:ee:4b:65:5e:
         bc:00:40:b7:ab:45:1b:cb:82:95:6e:58:20:6a:7e:a0:57:67:
         d0:59:02:96:f9:73:c1:ed:6a:6b:93:e0:ae:7d:e9:85:be:54:
         b0:80:11:6b:89:f2:eb:18:59:c1:dd:12:98:ac:9a:dc:b8:80:
         c9:36:1a:ef:5c:4e:45:23:93:5e:a8:af:e6:2a:aa:67:d8:bd:
         e4:a5:96:da:7d:db:95:40:2f:18:15:7c:99:47:a0:eb:53:44:
         f5:cf:fd:1b:e3:26:6c:33:06:40:62:4e:43:85:0d:0c:ea:61:
         4e:ad:dc:c3:fb:1e:54:e3:37:12:90:6b:16:69:ef:8e:50:1f:
         7b:26:db:ae:8c:21:21:6b:33:5e:86:77:b9:6b:47:9e:ca:18:
         48:08:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:56:44 2024 by rpki-client on console-fra.rpki-client.org