Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS6141.roa
File:                     AS6141.roa (raw, json)
Hash identifier:          JBtNiFBkkPmBibBdaHu7aPftlm6iH20Nqd4P9AIXwV4=
Subject key identifier:   E3:2A:D2:B6:19:39:43:C2:CA:3B:3B:8C:8F:DA:12:B7:98:66:0C:BE
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       22A1B445D5DB223BFE997F09A0AA0F3500054D6B
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS6141.roa
Signing time:             Mon 03 Jun 2024 13:54:34 +0000
ROA not before:           Mon 03 Jun 2024 13:49:34 +0000
ROA not after:            Mon 02 Jun 2025 13:54:34 +0000
asID:                     6141
IP address blocks:        2602:fed2:7127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 16:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a1:b4:45:d5:db:22:3b:fe:99:7f:09:a0:aa:0f:35:00:05:4d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun  3 13:49:34 2024 GMT
            Not After : Jun  2 13:54:34 2025 GMT
        Subject: CN=E32AD2B6193943C2CA3B3B8C8FDA12B798660CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:cf:fd:65:49:9b:7d:6b:3a:63:20:e9:69:
                    a4:d9:07:fd:1a:21:16:e2:45:52:69:23:a4:5e:7e:
                    cb:06:3e:a1:af:66:97:25:45:62:4f:83:9d:e8:b7:
                    13:72:84:3c:99:55:95:8c:a8:8f:97:b0:2d:d0:e2:
                    f0:c4:f0:d0:c7:01:87:95:e3:cf:db:30:14:b4:42:
                    e1:1d:8f:7d:19:5d:a5:3e:9f:dd:aa:cd:58:85:c4:
                    c1:07:47:3a:bd:dd:05:31:c0:03:0c:43:7f:de:0e:
                    03:63:f8:37:06:06:42:45:f7:d6:ef:83:8a:9c:de:
                    00:da:f7:cb:f2:f2:e0:93:62:c8:50:8f:f5:f9:08:
                    6f:0d:04:61:a8:e3:98:f4:46:8e:a4:93:84:9d:66:
                    27:98:fc:cd:03:fb:80:73:5d:e7:08:75:cc:29:3f:
                    f1:ee:3e:be:6d:a7:bf:7a:77:da:88:0b:a9:30:db:
                    ca:1b:d4:33:6d:bf:65:91:28:79:22:45:6f:84:27:
                    89:a5:a1:a2:98:c5:53:ec:35:6d:26:06:8d:9d:c1:
                    fb:ef:ed:06:fe:39:7a:ef:aa:ee:a3:e6:b6:d9:d6:
                    69:0f:15:f4:53:9a:a7:70:a6:8d:84:25:29:5e:ab:
                    ce:40:4f:73:95:4d:f1:5d:91:55:fb:a3:4e:24:f0:
                    5c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2A:D2:B6:19:39:43:C2:CA:3B:3B:8C:8F:DA:12:B7:98:66:0C:BE
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS6141.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7127::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:21:dc:59:49:ab:f0:24:b4:aa:b7:66:aa:1a:6e:ab:69:
         a1:72:74:98:2a:ea:9e:4c:98:91:74:73:da:78:29:e5:07:de:
         44:ef:52:48:69:87:47:59:d0:22:92:75:1e:60:e0:2d:0e:e1:
         12:1d:5c:10:d3:b1:f2:8d:ed:84:5c:ec:83:2b:7b:70:70:a6:
         df:9f:5b:a6:84:5a:2b:c5:9a:8f:0e:5d:f3:70:71:fe:38:2e:
         b3:5b:2c:b0:b6:2e:60:53:48:9b:68:c2:2f:0e:9d:17:93:1a:
         39:1b:db:08:32:26:a6:8c:c4:94:d5:19:32:64:42:ed:6a:96:
         0f:50:29:13:2f:f9:49:fc:51:c3:29:32:8d:7f:06:e5:37:61:
         a4:ad:f4:84:60:a8:e1:3e:e4:f0:0f:c3:21:ea:17:13:27:54:
         00:84:bc:b3:99:6a:5e:60:b7:47:3e:f8:c4:77:3e:7e:e0:2d:
         4f:7d:0b:37:5c:3e:b9:e8:ed:2a:74:83:c0:27:b7:7d:70:82:
         1a:5e:6f:63:96:5e:b2:b5:f9:4c:80:8b:22:3e:2b:e5:4e:ee:
         a3:1f:b6:72:86:f0:5a:8c:96:1a:83:b1:0f:85:39:05:8a:6b:
         62:8e:2f:61:81:98:ba:0c:c0:ac:f5:e7:1f:77:7c:52:1a:86:
         0d:7c:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:41 2025 by rpki-client