Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS60246.roa
File:                     AS60246.roa (raw, json)
Hash identifier:          xv9arHWSVHBdfj3vzj7UU6sqxdf4U00RST6dR+uuywI=
Subject key identifier:   BF:13:AD:9B:DE:EC:2F:7A:24:4A:D8:E5:1C:39:F1:7A:73:C4:59:B3
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5D6DCA93CF61A4C812121D3C74C5FA316DC8A98C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS60246.roa
Signing time:             Tue 15 Aug 2023 02:00:29 +0000
ROA not before:           Tue 15 Aug 2023 01:55:29 +0000
ROA not after:            Tue 13 Aug 2024 02:00:29 +0000
asID:                     60246
IP address blocks:        2602:fed2:711a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6d:ca:93:cf:61:a4:c8:12:12:1d:3c:74:c5:fa:31:6d:c8:a9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:29 2023 GMT
            Not After : Aug 13 02:00:29 2024 GMT
        Subject: CN=BF13AD9BDEEC2F7A244AD8E51C39F17A73C459B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:77:67:36:98:2e:a7:fb:80:09:21:94:75:
                    b7:6f:a8:d5:68:e2:06:2b:eb:49:55:b7:a2:ef:37:
                    34:0b:c9:e0:a1:b3:ee:32:83:87:ff:f1:99:11:b1:
                    5f:47:8f:05:67:ca:93:5f:d1:2d:1f:18:5f:aa:98:
                    ab:e6:cc:6b:f0:55:a6:05:60:2c:cf:77:10:9f:c3:
                    a9:16:19:45:2f:b9:7e:de:b0:cf:15:67:2e:ad:e9:
                    d3:23:bd:68:0b:15:01:60:27:93:40:be:5e:3e:51:
                    8b:e8:38:92:ed:2c:06:d6:b6:16:3a:a8:e0:27:2e:
                    39:2c:e6:82:d1:24:ca:53:55:cf:bf:19:44:e9:af:
                    5a:aa:7d:96:de:78:c4:16:6b:88:19:8c:ba:a3:99:
                    77:f9:a9:fd:f2:dd:50:9c:81:35:5a:62:5d:32:00:
                    3f:32:cf:d4:37:42:8e:46:a7:98:df:1d:03:b1:5b:
                    8f:1b:e6:cb:51:bd:64:e9:b2:80:39:bc:ea:46:a0:
                    b8:3a:45:a4:f5:b0:34:ac:6b:44:5a:a2:83:ec:2b:
                    1f:8c:f1:95:44:ef:3f:bf:e8:68:3e:16:5a:f5:94:
                    de:ad:93:33:b3:47:0c:5d:6b:34:76:88:8f:38:64:
                    96:d3:1a:df:9b:a0:b9:8c:5d:df:d7:4a:60:ea:a3:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:13:AD:9B:DE:EC:2F:7A:24:4A:D8:E5:1C:39:F1:7A:73:C4:59:B3
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS60246.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:e9:78:c4:40:96:22:c5:c8:61:81:03:78:20:48:a5:41:3e:
         f1:27:11:69:d3:52:76:bd:3a:1d:64:9a:82:47:09:1b:a6:5d:
         64:5a:21:d4:f5:05:f4:9f:b6:bd:1e:32:52:22:7c:07:13:39:
         97:f2:a8:d3:2b:ef:80:c6:cf:e6:1e:73:9c:5f:93:d4:9b:0e:
         1a:70:97:c6:2d:1b:33:4a:ec:da:51:39:01:0f:0f:21:6d:65:
         27:80:7d:5f:48:25:f4:8b:aa:90:6d:88:b2:cc:bd:58:7f:d7:
         33:b9:b2:33:17:ca:cd:88:69:98:1c:5e:34:43:47:7c:b8:bc:
         46:f2:26:a2:b1:13:04:dd:e7:51:23:34:eb:d1:c3:a1:ed:70:
         1c:bb:ad:4e:5f:3c:53:af:bd:f4:75:ec:de:b0:77:2d:1b:55:
         09:d8:da:3f:9a:4f:cd:82:59:88:1e:b7:e7:f5:e3:21:0f:06:
         06:81:75:93:cb:b2:7d:ba:d1:35:d6:05:01:2e:c7:37:14:a4:
         91:97:e7:7d:49:e9:d8:82:35:f3:01:01:d2:2e:a0:e4:60:8d:
         6d:39:ad:d5:33:31:de:b8:a5:51:14:24:05:8c:b6:a4:d3:3a:
         34:c3:23:ea:43:81:66:a5:56:65:c0:03:e9:d1:d2:a5:ab:0f:
         7b:6e:f0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:55 2024 by rpki-client on console-ams.rpki-client.org