Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS62997.roa
File:                     AS62997.roa (raw, json)
Hash identifier:          H3WWxcaZDZpm4mWMyjk3DPSV2N1iK30+2oLTzAMeyZc=
Subject key identifier:   08:AD:20:82:B1:67:7D:1C:90:B4:DC:25:CD:EA:84:F1:5A:07:07:A8
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0FC36E5FA3C8AD0A09048728B1983419A31B03B4
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS62997.roa
Signing time:             Tue 05 Mar 2024 18:30:25 +0000
ROA not before:           Tue 05 Mar 2024 18:25:25 +0000
ROA not after:            Tue 04 Mar 2025 18:30:25 +0000
asID:                     62997
IP address blocks:        167.88.49.0/24 maxlen: 24
                          2602:fed2:7030::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c3:6e:5f:a3:c8:ad:0a:09:04:87:28:b1:98:34:19:a3:1b:03:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Mar  5 18:25:25 2024 GMT
            Not After : Mar  4 18:30:25 2025 GMT
        Subject: CN=08AD2082B1677D1C90B4DC25CDEA84F15A0707A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:94:eb:4f:2a:f5:af:a2:a1:19:4c:0b:b8:ee:
                    f0:e9:8b:3c:ab:73:98:b7:b0:21:83:35:9d:69:2f:
                    95:2e:65:c4:c8:d8:d8:3d:c7:c8:77:f6:3f:30:c1:
                    b6:52:1c:68:3e:66:c4:e7:1e:f4:b1:5d:d5:3a:55:
                    f5:57:1b:2d:51:2f:26:55:d7:3a:95:12:a8:b7:f8:
                    02:cd:49:25:89:f7:bd:7f:31:b5:18:34:b3:f1:c4:
                    5e:7d:69:e6:7f:83:2d:ee:9e:53:7f:15:3f:0c:52:
                    fa:b8:75:f1:d2:aa:cc:ac:85:70:43:6f:56:9b:3d:
                    c9:3f:b2:c4:15:cb:35:7a:35:ca:ce:69:1e:ca:66:
                    0b:f8:04:da:83:57:11:d0:59:8b:06:1d:60:2f:56:
                    e2:8a:8c:4d:5b:2a:ec:6e:fa:f4:46:25:c9:92:20:
                    2c:5a:f0:e6:0f:a1:a5:71:d3:8c:f2:26:8a:f6:8b:
                    b0:42:d1:22:6b:06:98:df:d7:d2:47:6d:4c:20:35:
                    b6:f9:9a:02:ba:95:ad:2f:de:34:f3:40:3b:bf:83:
                    a9:92:d4:fb:45:11:a2:71:ab:19:55:a2:87:88:e0:
                    6a:da:4c:b0:82:47:06:19:3f:c2:fd:8f:02:9c:c3:
                    78:26:d3:33:cf:6a:62:1e:a8:c2:3f:74:a5:cf:36:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AD:20:82:B1:67:7D:1C:90:B4:DC:25:CD:EA:84:F1:5A:07:07:A8
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS62997.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.49.0/24
                IPv6:
                  2602:fed2:7030::/44

    Signature Algorithm: sha256WithRSAEncryption
         bc:92:63:4a:10:e3:b9:52:d7:ab:a1:71:5d:a6:2d:8e:3c:04:
         9d:55:4c:fd:cd:3d:b0:f2:73:9c:9f:bb:00:be:21:4e:43:83:
         79:c4:cb:c6:da:ff:8b:f5:9a:27:e7:47:94:f8:b3:bc:fa:92:
         39:3e:3a:e7:68:f3:85:21:f9:31:03:b0:c2:1d:e2:44:8d:53:
         d2:c3:0e:d9:bb:d8:cf:a1:96:c5:ee:4c:88:e1:8d:09:c6:6f:
         7e:c7:d1:e9:fb:e8:74:34:5b:85:39:75:59:fc:bf:21:6c:f8:
         59:92:60:49:ea:0c:ae:19:3f:0a:36:cd:25:00:91:c9:34:04:
         56:c4:d4:1d:9d:ff:fb:98:f0:f5:e7:74:58:93:65:14:70:50:
         a4:86:fa:8c:b8:8e:3e:0b:72:9b:e5:08:73:da:23:80:8a:8d:
         4f:12:1c:54:7b:e7:ff:d9:c1:4d:7a:a6:96:9f:6f:27:bd:9b:
         b9:0b:9a:86:6c:0d:b8:c7:b3:49:59:5c:f9:ce:2b:aa:b6:25:
         a6:11:43:c0:b5:bd:40:fc:05:a1:2c:97:58:f7:c9:d1:e4:14:
         f0:1d:e8:d3:7d:34:cb:a6:3f:41:5c:c0:b7:9f:92:10:a3:1d:
         28:7f:eb:32:d4:2e:0f:7a:ce:e1:9e:af:a7:8a:41:9d:f0:66:
         d9:f5:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:17 2024 by rpki-client on console-ams.rpki-client.org