Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS57974.roa
File:                     AS57974.roa (raw, json)
Hash identifier:          A76JDrMXqVp88pRN7hgRlvZ1U+QdCj1vd9pbTctG0/0=
Subject key identifier:   9D:4A:55:E5:5B:F9:1B:23:21:4F:7F:9E:E4:5F:82:88:69:CB:AF:37
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       038B4D2F33BC01F72EAF41BBD5BF5C421F7E1BAB
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS57974.roa
Signing time:             Tue 19 Sep 2023 17:02:20 +0000
ROA not before:           Tue 19 Sep 2023 16:57:20 +0000
ROA not after:            Tue 17 Sep 2024 17:02:20 +0000
asID:                     57974
IP address blocks:        2602:fed2:7300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8b:4d:2f:33:bc:01:f7:2e:af:41:bb:d5:bf:5c:42:1f:7e:1b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 19 16:57:20 2023 GMT
            Not After : Sep 17 17:02:20 2024 GMT
        Subject: CN=9D4A55E55BF91B23214F7F9EE45F828869CBAF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:f3:2f:61:1a:63:82:0d:d2:b2:45:07:ff:
                    0a:b3:33:bc:e5:b6:4d:07:f6:80:6a:41:67:39:ce:
                    c8:7c:e8:99:f1:68:bd:7c:ec:42:8b:cd:a8:03:78:
                    46:c2:5e:51:78:f1:33:ad:ca:7b:12:14:50:91:1a:
                    08:41:1e:7e:82:18:d4:bf:68:8c:46:79:26:f8:a4:
                    5a:7e:f5:a8:d1:b1:e6:4e:b6:c1:1a:89:0e:9e:50:
                    1f:9d:ac:a2:2d:22:34:74:ed:e2:86:1d:1d:d1:01:
                    06:bf:d8:5d:c5:98:b9:bb:5c:75:8b:e3:86:91:9d:
                    f6:bb:35:d7:11:ce:10:ef:97:d9:60:1a:03:69:e2:
                    7f:dc:68:03:db:9d:4b:e7:ba:0b:b4:f7:d6:d2:65:
                    fd:18:e9:b6:69:67:21:fc:ba:a1:75:67:26:55:1e:
                    4d:32:15:d6:ab:e2:f8:ee:21:c7:25:4e:ab:c0:e0:
                    50:b9:8c:13:c5:1b:0b:39:db:6b:e2:3e:d0:c0:03:
                    9f:17:f5:aa:3e:8f:78:8a:c2:d7:8e:62:8e:29:a7:
                    39:ce:37:f0:87:72:04:14:89:0d:d6:1b:8a:71:2d:
                    ff:9c:96:37:2b:da:00:ca:3e:13:40:04:f9:a0:43:
                    ab:6d:f8:8e:bc:61:77:52:22:b2:42:c5:06:d6:b7:
                    f4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:55:E5:5B:F9:1B:23:21:4F:7F:9E:E4:5F:82:88:69:CB:AF:37
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS57974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7300::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:88:74:ef:1f:ce:38:b6:a6:2b:52:63:90:a9:e9:42:bb:6c:
         f2:f1:1c:fc:91:d4:2a:bc:01:df:7c:d7:ca:1b:69:98:f8:89:
         c3:ad:32:04:66:c5:dd:ca:00:c8:2c:53:32:1a:e7:f9:60:40:
         73:2d:4c:ad:01:5d:02:50:97:8f:6c:98:a8:7c:b6:bc:8a:03:
         b5:31:33:bf:08:27:0d:63:dc:4b:07:9b:88:05:0a:da:67:14:
         83:b2:69:c6:7d:12:83:95:18:80:0d:64:5a:c9:c9:2a:cd:10:
         36:e9:3b:f0:81:4c:03:81:ad:71:4b:50:20:d2:cb:ee:73:c9:
         af:cd:0a:0e:04:6a:db:ca:73:22:ea:41:49:48:b6:0a:f7:8f:
         6c:c5:83:f2:7c:01:d2:b1:d1:c9:d9:39:7b:30:f3:86:ae:59:
         ea:d0:03:4f:31:09:92:f0:13:ad:04:36:08:2a:87:a5:52:3a:
         aa:3e:73:3e:40:c6:6b:04:b1:83:86:8d:fe:a4:1e:bc:41:ea:
         a4:af:e2:1e:f4:51:5c:50:83:85:f5:25:3c:c0:7b:15:e2:37:
         4f:fd:e5:29:a7:9d:a8:b7:f6:24:d1:9d:32:8b:e2:1b:e5:37:
         b2:e3:eb:28:d3:08:b2:fc:64:3d:0a:33:e1:36:a6:06:ba:ec:
         de:aa:0d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org