Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          vHNEDOXYXHi9JdbdyGl2aWuHXpXoD/fTp61Te8wc5qM=
Subject key identifier:   CD:AF:39:7B:8E:BD:BC:9A:64:22:D3:3F:79:48:2D:2F:FB:FF:1E:CA
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       258592D1C969DC85B4EFD05214F0938310FA1D11
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8100.roa
Signing time:             Tue 13 Aug 2024 19:59:38 +0000
ROA not before:           Tue 13 Aug 2024 19:54:38 +0000
ROA not after:            Tue 12 Aug 2025 19:59:38 +0000
asID:                     8100
IP address blocks:        2602:fed2:708d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:85:92:d1:c9:69:dc:85:b4:ef:d0:52:14:f0:93:83:10:fa:1d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 13 19:54:38 2024 GMT
            Not After : Aug 12 19:59:38 2025 GMT
        Subject: CN=CDAF397B8EBDBC9A6422D33F79482D2FFBFF1ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:00:72:c2:d2:1f:af:a1:54:90:a5:b8:7b:
                    e6:bd:08:0e:fa:ab:42:5d:d4:08:0d:2f:80:b7:3e:
                    e3:ef:42:07:31:f6:50:fc:0c:97:af:5f:df:84:ec:
                    90:f8:1e:78:17:8e:a6:2b:eb:17:31:77:fd:58:e6:
                    aa:db:55:7d:0d:22:dc:b4:fc:d6:4c:23:ac:7e:ad:
                    c6:e5:53:11:42:73:69:e1:d3:fd:8a:6c:39:e0:f6:
                    0f:cc:2d:9d:6c:66:93:74:ad:ce:53:02:c3:5e:0b:
                    6d:65:22:bb:54:06:f7:ea:32:7d:56:a7:93:c5:d1:
                    37:ae:a8:8d:e5:ef:95:9d:62:29:1d:ea:2a:6b:45:
                    ba:0a:4a:fb:96:67:5d:d9:5b:49:e5:88:23:ae:b3:
                    49:fb:bd:9d:c8:96:fc:1d:13:19:5d:25:39:65:61:
                    bd:0e:d2:bf:2c:d6:2c:e0:06:33:0f:6c:2b:29:da:
                    0a:a9:c7:b9:b7:ea:0a:97:3f:22:87:b0:1f:0f:49:
                    06:84:7a:ce:cc:6c:df:32:98:6a:5b:cf:11:7a:c8:
                    04:8b:59:16:50:78:78:4f:b0:f9:c2:9b:31:f7:29:
                    4a:9f:0c:8a:72:cf:eb:66:90:b2:d1:82:e0:38:0c:
                    64:2c:7a:34:74:82:16:ed:54:e1:21:c9:d7:6d:d6:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:39:7B:8E:BD:BC:9A:64:22:D3:3F:79:48:2D:2F:FB:FF:1E:CA
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:708d::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:22:f7:0e:7b:c2:5f:c9:2c:67:37:3c:1e:01:9c:1f:e9:
         fa:8a:33:27:d9:24:ea:c8:3c:da:fb:73:fb:ed:19:7a:da:7a:
         70:13:e0:72:0c:2c:4b:04:a1:74:d8:a9:44:a4:63:c7:e9:a8:
         2b:e7:cf:9f:82:33:d1:2c:e2:0b:53:23:53:0e:f8:69:22:5c:
         ce:e4:52:fe:07:4e:55:c0:d3:9d:ed:c8:c0:b6:17:38:b3:8f:
         73:9e:b7:c7:23:4d:f1:e5:7a:11:f5:c0:2e:12:5d:d5:40:e1:
         fe:66:1d:01:91:eb:22:c9:86:8a:64:5c:fe:70:b4:94:6b:5f:
         68:a3:fd:3b:a5:88:94:d2:49:03:90:47:8f:48:1a:2f:bf:e1:
         e7:b6:d9:70:78:c4:07:c6:2c:7f:81:22:61:63:00:2f:b9:9f:
         88:d3:70:42:3e:ce:11:50:de:51:6e:66:6c:56:4d:65:28:14:
         b2:a5:88:a0:31:ed:49:f0:ce:c0:81:a9:ef:37:fc:3f:4d:e1:
         64:1a:e3:f7:b8:19:fa:9d:32:66:4b:8d:ed:61:5f:2c:0b:ef:
         b4:23:90:14:b9:e6:94:20:0b:00:dc:fe:ac:bb:eb:c2:9f:f4:
         53:ae:98:63:94:b2:87:ea:f6:0c:f9:78:32:8a:9e:4d:6a:68:
         d7:5c:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org