Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS57257.roa
File:                     AS57257.roa (raw, json)
Hash identifier:          oBSd8X6DYVAV8Zns9z3sn5JPCkHEGBHmcHgZUWwY1qU=
Subject key identifier:   D0:AE:DA:3F:87:AB:63:F0:87:5B:F2:D2:97:4F:C4:CF:CE:50:DB:BF
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0D4F25D66EDFC67F269874D32CEE7EA608CC3A74
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS57257.roa
Signing time:             Tue 15 Aug 2023 02:00:28 +0000
ROA not before:           Tue 15 Aug 2023 01:55:28 +0000
ROA not after:            Tue 13 Aug 2024 02:00:28 +0000
asID:                     57257
IP address blocks:        2602:fed2:7117::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4f:25:d6:6e:df:c6:7f:26:98:74:d3:2c:ee:7e:a6:08:cc:3a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:28 2023 GMT
            Not After : Aug 13 02:00:28 2024 GMT
        Subject: CN=D0AEDA3F87AB63F0875BF2D2974FC4CFCE50DBBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:96:c8:c5:96:76:d2:f5:46:2d:2c:d1:bf:
                    02:c1:70:ee:74:21:fb:c2:f3:97:13:de:23:c0:bb:
                    08:75:da:fe:e6:44:b9:98:d1:c5:6e:37:02:83:0b:
                    fd:e6:cd:f2:ea:5f:87:3a:2a:f5:76:a5:02:8c:09:
                    ca:2a:e5:a8:ef:22:84:02:36:3a:c8:d1:f3:7b:71:
                    e2:83:40:a5:7d:25:52:77:b7:32:c4:f5:f6:a2:0a:
                    f9:6b:d1:d3:6f:76:94:ee:d5:03:2a:4c:ac:d7:86:
                    ce:e6:57:7c:fd:58:1e:a3:2a:55:69:cc:d5:ee:5f:
                    f4:bc:f2:e4:74:c7:6e:1b:45:7e:9f:54:2c:b2:ee:
                    5b:ec:5f:53:cf:1b:2e:e5:93:71:e2:d1:93:d5:6d:
                    18:45:99:31:68:59:a2:62:6d:47:90:28:a1:33:c1:
                    a3:94:09:75:81:9a:93:9c:84:b2:1c:38:c7:3c:01:
                    7e:e5:2b:a8:b6:c5:e7:dc:fd:81:0d:a9:81:f9:42:
                    cf:e9:a9:5b:a7:06:7b:7a:57:bd:4d:aa:2e:51:88:
                    c4:22:e4:19:a5:4a:7e:f3:da:3b:5e:70:89:ae:e7:
                    0f:39:9b:36:c2:b2:80:da:a5:56:0d:54:79:ad:93:
                    5d:1c:72:eb:1b:4d:fd:01:37:e1:31:61:01:92:a8:
                    b1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AE:DA:3F:87:AB:63:F0:87:5B:F2:D2:97:4F:C4:CF:CE:50:DB:BF
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS57257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7117::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:ba:71:4d:32:85:fc:5f:31:22:18:4b:2b:6c:13:6c:c8:
         eb:77:6e:f5:77:28:85:49:34:f0:41:96:c9:76:f9:d4:c4:b6:
         c0:db:5f:f9:6c:8d:f1:93:fd:2b:f4:a6:c1:0c:10:38:37:59:
         83:6f:d2:d0:cb:aa:55:aa:12:e5:61:b0:bf:cd:d6:a4:7f:66:
         1d:65:ce:bd:2b:ab:26:8f:4a:12:f2:b7:dc:f4:1d:eb:c6:32:
         96:a4:60:cd:aa:ef:3a:96:66:a5:e7:e2:f7:8c:43:72:ad:77:
         e4:89:d1:38:fd:3f:82:4e:bc:92:69:8d:32:09:f4:a9:c7:c6:
         11:e6:7a:68:7a:7b:a3:c9:7d:26:92:07:8b:d1:87:2e:37:ab:
         a0:c1:00:69:5c:82:29:6c:b8:5c:03:03:bd:47:77:3a:a5:2d:
         dd:a7:41:c1:22:45:e0:cf:70:c8:4c:97:0e:7d:96:f2:f7:9c:
         cc:b6:cb:e3:e1:ca:84:77:32:9c:65:e9:42:76:36:f1:90:55:
         0f:2f:30:8e:ea:7a:a8:37:04:8a:b0:72:16:fd:d1:8b:78:6b:
         30:ec:fc:e9:2b:ee:fb:95:f3:5a:25:80:10:2a:83:e0:bc:e8:
         9c:00:c0:ab:60:b0:9d:43:58:be:2d:a9:a4:8c:ba:44:14:11:
         d9:8c:97:78
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUDU8l1m7fxn8mmHTTLO5+pgjMOnQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjMwODE1MDE1NTI4WhcNMjQwODEzMDIwMDI4
WjAzMTEwLwYDVQQDEyhEMEFFREEzRjg3QUI2M0YwODc1QkYyRDI5NzRGQzRDRkNF
NTBEQkJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBOWyMWWdtL1
Ri0s0b8CwXDudCH7wvOXE94jwLsIddr+5kS5mNHFbjcCgwv95s3y6l+HOir1dqUC
jAnKKuWo7yKEAjY6yNHze3Hig0ClfSVSd7cyxPX2ogr5a9HTb3aU7tUDKkys14bO
5ld8/VgeoypVaczV7l/0vPLkdMduG0V+n1Qssu5b7F9Tzxsu5ZNx4tGT1W0YRZkx
aFmiYm1HkCihM8GjlAl1gZqTnISyHDjHPAF+5SuotsXn3P2BDamB+ULP6albpwZ7
ele9TaouUYjEIuQZpUp+89o7XnCJrucPOZs2wrKA2qVWDVR5rZNdHHLrG039ATfh
MWEBkqixiwIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFNCu2j+Hq2Pwh1vy0pdPxM/O
UNu/MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVM1NzI1Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJxFzANBgkqhkiG
9w0BAQsFAAOCAQEAal66cU0yhfxfMSIYSytsE2zI63du9XcohUk08EGWyXb51MS2
wNtf+WyN8ZP9K/SmwQwQODdZg2/S0MuqVaoS5WGwv83WpH9mHWXOvSurJo9KEvK3
3PQd68YylqRgzarvOpZmpefi94xDcq135InROP0/gk68kmmNMgn0qcfGEeZ6aHp7
o8l9JpIHi9GHLjeroMEAaVyCKWy4XAMDvUd3OqUt3adBwSJF4M9wyEyXDn2W8vec
zLbL4+HKhHcynGXpQnY28ZBVDy8wjup6qDcEirByFv3Ri3hrMOz86Svu+5XzWiWA
ECqD4LzonADAq2CwnUNYvi2ppIy6RBQR2YyXeA==
-----END CERTIFICATE-----
Generated at Thu May 2 17:17:55 2024 by rpki-client on console-ams.rpki-client.org