Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8772.roa
File:                     AS8772.roa (raw, json)
Hash identifier:          jWb/XGsxMgIJswNHVfQToAzoriju8XSXUwAv14s0ppQ=
Subject key identifier:   84:A5:D9:80:45:91:0A:D2:89:85:65:B7:82:87:02:26:94:AD:CA:8C
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       656C0AAD162E22F435F4E79A6AEBAC16DF30A903
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8772.roa
Signing time:             Mon 18 Dec 2023 17:29:06 +0000
ROA not before:           Mon 18 Dec 2023 17:24:06 +0000
ROA not after:            Mon 16 Dec 2024 17:29:06 +0000
asID:                     8772
IP address blocks:        2602:fed2:7090::/44 maxlen: 44
                          2602:fed2:7910::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6c:0a:ad:16:2e:22:f4:35:f4:e7:9a:6a:eb:ac:16:df:30:a9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 18 17:24:06 2023 GMT
            Not After : Dec 16 17:29:06 2024 GMT
        Subject: CN=84A5D98045910AD2898565B78287022694ADCA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:b2:c5:89:0d:8b:7e:2f:3f:93:ef:e8:d7:
                    d0:20:73:5e:04:fa:75:71:a1:15:94:8a:f6:5e:6d:
                    83:71:8c:3b:23:8d:fd:20:f5:21:9f:3f:b8:02:4b:
                    7d:a5:2a:a5:d8:0c:86:77:13:d6:c3:a7:94:75:38:
                    c6:b7:86:4b:5d:0d:1e:39:da:f4:73:50:e0:ea:fa:
                    a1:e5:8f:47:d2:81:8a:fd:8e:bc:7b:b5:3a:2e:25:
                    74:30:d7:bf:a0:3a:99:4f:21:9d:fa:7b:6b:f9:60:
                    c1:08:10:70:4a:e6:e2:ce:80:87:64:6e:bf:f9:76:
                    e2:ab:2b:da:fc:a0:e7:26:3c:bd:45:36:59:b6:7f:
                    fa:5f:ad:59:81:69:df:d7:6c:ad:bf:80:ac:a1:b7:
                    a2:d5:09:c0:01:dd:e8:96:2b:64:a8:79:b9:48:48:
                    cf:e8:0f:81:ad:97:b8:3f:b6:ec:6d:84:36:7d:39:
                    64:5d:7a:5e:72:13:9a:77:b4:ea:58:42:46:95:10:
                    18:82:77:37:ad:1d:1f:ec:d4:af:12:0f:e6:2a:1f:
                    c3:63:4f:74:c1:56:73:68:a2:63:fd:3f:e4:03:4f:
                    ad:8d:85:ba:0b:80:58:02:f1:d6:f4:de:56:64:05:
                    0a:ff:f5:9e:76:f9:bc:60:8d:84:a0:80:cd:40:1d:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A5:D9:80:45:91:0A:D2:89:85:65:B7:82:87:02:26:94:AD:CA:8C
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8772.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7090::/44
                  2602:fed2:7910::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:48:82:3c:70:ab:d9:88:26:88:88:e2:04:e6:88:ee:2a:b2:
         9e:b3:56:bc:fa:2b:5d:3d:d2:a9:6a:be:19:54:d2:f6:6e:25:
         36:00:11:4d:f6:90:68:6d:a4:00:1a:77:1a:f8:83:06:8c:3a:
         78:53:f2:c9:2c:80:85:d3:6d:44:8b:aa:de:71:6c:f7:de:5b:
         56:09:79:48:31:96:fd:74:7b:72:99:08:43:ff:00:4a:a9:6c:
         fa:48:6e:6e:aa:bd:e1:4e:3f:4c:84:2c:84:2a:62:ba:9c:0d:
         a5:21:f5:ed:0f:c2:08:63:72:b1:2c:46:86:64:46:ea:44:dd:
         20:81:20:dd:fe:40:56:ba:dd:90:b0:8f:ab:e5:53:55:e1:d2:
         ca:d5:dd:3b:52:9f:92:b7:86:73:d1:0c:46:60:41:9a:f2:b8:
         6c:e9:72:21:17:f7:68:f0:01:88:ba:04:af:f9:51:0c:19:f2:
         20:f1:42:70:df:5e:d8:75:b9:80:5b:07:ec:ca:bb:f6:45:5e:
         ef:a2:5e:c1:ff:ec:29:6c:97:b2:e1:30:c6:00:3f:5d:3c:4c:
         cc:5d:bf:7e:2f:e3:8f:ef:28:20:e8:83:ae:c4:82:7f:ae:05:
         d4:7d:f9:40:54:21:d7:cb:07:97:e8:3b:b1:9d:97:5e:59:c1:
         fa:f2:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:55 2024 by rpki-client on console-ams.rpki-client.org