Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS60246.roa
File:                     AS60246.roa (raw, json)
Hash identifier:          Qq9qaoCoS83Q8z8jt4EBPIUWOvezM3D9lrHUzoh0pYE=
Subject key identifier:   4A:CB:EB:3B:36:E9:82:52:5B:0F:66:C2:F2:B4:12:F0:13:7C:A2:04
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       238E185419A16BFA687151216207E78C566BC944
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS60246.roa
Signing time:             Tue 16 Jul 2024 02:42:27 +0000
ROA not before:           Tue 16 Jul 2024 02:37:27 +0000
ROA not after:            Tue 15 Jul 2025 02:42:27 +0000
asID:                     60246
IP address blocks:        2602:fed2:711a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8e:18:54:19:a1:6b:fa:68:71:51:21:62:07:e7:8c:56:6b:c9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:27 2024 GMT
            Not After : Jul 15 02:42:27 2025 GMT
        Subject: CN=4ACBEB3B36E982525B0F66C2F2B412F0137CA204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dd:42:7b:e0:4c:50:c0:07:f7:70:16:2f:5e:
                    38:c1:da:23:70:a5:f9:b3:00:47:0b:a2:97:1a:db:
                    7b:74:c4:c4:6a:b4:46:a4:0f:dd:3f:3c:56:ef:66:
                    3c:7f:f6:5c:34:6d:6f:13:02:91:b1:44:db:a4:d8:
                    59:68:30:18:a1:b8:a3:b3:94:47:8b:c6:77:cb:a9:
                    68:ce:82:f3:7c:ef:a6:a0:26:ae:cb:7f:d7:fb:15:
                    51:93:bf:16:59:ae:2b:3b:8f:ca:e4:f1:a7:2c:3c:
                    bf:5e:51:4e:c8:a7:28:d2:d6:77:55:95:0d:07:61:
                    80:fa:28:8e:46:81:bb:92:69:b1:77:7e:ed:70:fc:
                    f3:0d:f1:74:f4:da:94:52:41:3d:c8:ac:06:38:bb:
                    9c:0b:e4:62:e7:9d:4e:38:3a:2a:1f:70:08:83:37:
                    9c:84:ce:29:da:7a:74:06:d6:4e:91:78:1b:86:f7:
                    0b:6e:ad:c1:66:d9:8a:87:7a:1e:a7:6c:25:ae:fb:
                    49:b2:55:1a:56:7d:21:4a:31:d2:aa:3f:68:55:d1:
                    22:61:2a:38:e3:ba:73:7d:4b:de:28:df:6f:43:c0:
                    2c:9a:24:9a:ee:89:31:fb:94:ea:3a:84:8b:d7:0e:
                    a4:bd:4f:be:de:f6:c2:d8:b0:99:a2:79:06:0a:b6:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CB:EB:3B:36:E9:82:52:5B:0F:66:C2:F2:B4:12:F0:13:7C:A2:04
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS60246.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:b8:20:40:b5:9b:00:b4:26:1d:cd:a9:dc:5f:90:94:ce:
         bf:f6:48:27:a4:44:91:92:2c:e5:52:61:eb:6d:1d:49:91:cc:
         38:1c:21:25:49:02:cd:10:1e:48:eb:d6:9f:d3:90:5b:c7:16:
         1c:e1:e8:b1:9b:9e:95:e8:de:d8:a2:5f:3b:8f:9d:e8:b2:ce:
         62:e3:d1:2c:36:48:d0:83:f1:c6:fe:99:92:c4:e0:5c:39:2e:
         7e:a6:7b:6f:9a:e1:44:6c:8a:2a:26:70:7c:dc:08:75:45:f8:
         a1:58:26:1d:4e:5d:9a:c2:10:f4:aa:81:d6:e7:eb:2e:f5:b7:
         24:2a:0c:f5:ae:be:d5:18:c4:f6:9b:6e:d9:7d:9d:f4:e6:7b:
         81:2f:25:7a:b1:f0:9f:2d:49:1e:1e:1a:27:4e:e9:f5:a6:e8:
         c4:d6:bb:cd:e8:d8:62:65:f8:3e:4a:dc:9d:cb:76:19:bc:21:
         6d:0f:37:d2:62:9a:94:86:5c:31:bd:bb:2a:ca:c5:cf:c9:f9:
         cf:39:33:e1:93:bf:51:94:d1:e2:43:c3:ad:9d:e9:de:5b:f5:
         d6:19:1d:9b:0d:f7:fa:7e:ad:59:61:06:f9:60:e3:d2:88:d8:
         00:4b:2c:13:55:90:a1:3d:ba:42:f2:14:83:58:09:18:0f:ce:
         9b:5e:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org