Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/3230362e38332e382e302f32342d3234203d3e20313339363836.roa
File:                     3230362e38332e382e302f32342d3234203d3e20313339363836.roa (raw, json)
Hash identifier:          3NuWOHJMDrvHjwm1YwEJQGHE4Pn8c3NEO2vYbeazji4=
Subject key identifier:   6F:25:D1:7F:D3:5E:D7:D2:E9:BC:8B:5C:42:90:26:E8:14:B0:EA:75
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       7F4301B527FA6EEEC109E052B367AE48E8EB9679
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/3230362e38332e382e302f32342d3234203d3e20313339363836.roa
Signing time:             Tue 16 Jul 2024 02:42:28 +0000
ROA not before:           Tue 16 Jul 2024 02:37:28 +0000
ROA not after:            Tue 15 Jul 2025 02:42:28 +0000
asID:                     139686
IP address blocks:        206.83.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:43:01:b5:27:fa:6e:ee:c1:09:e0:52:b3:67:ae:48:e8:eb:96:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jul 16 02:37:28 2024 GMT
            Not After : Jul 15 02:42:28 2025 GMT
        Subject: CN=6F25D17FD35ED7D2E9BC8B5C429026E814B0EA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:3d:a1:ba:0b:ae:20:51:4b:e5:92:8b:9b:
                    0c:5a:9f:55:ab:1a:b8:bf:f4:bf:db:7c:0e:58:0c:
                    b7:a5:30:60:79:6a:b5:f1:c3:c8:a9:5a:6a:7b:59:
                    2e:9d:95:07:1f:1e:4f:1e:36:3b:9a:e2:fb:f0:a9:
                    29:3a:ef:34:72:88:8e:63:b9:5c:52:2e:2d:80:87:
                    ce:c3:7d:c2:ca:97:8b:bc:d0:23:e7:ca:02:5c:37:
                    f3:f2:59:29:88:e7:1a:f1:fd:67:95:b7:0e:d8:fb:
                    b8:6b:1b:0d:15:bf:ea:10:52:f6:f2:26:b4:a8:03:
                    05:4c:68:ad:f9:61:50:1a:d3:89:f4:08:ad:5a:06:
                    41:4f:58:69:d4:43:9c:8f:e3:c9:13:a4:c7:4e:cc:
                    ee:0e:92:b3:90:2c:e4:76:79:3c:25:85:37:8e:99:
                    c1:04:63:26:dd:d0:db:6d:ec:2d:55:a0:34:e4:ff:
                    a2:72:c4:72:64:a6:2a:b3:84:cc:65:08:4e:28:2f:
                    5c:6b:1a:8f:b8:ee:4b:8e:4c:5a:71:2c:2f:48:24:
                    f6:22:69:a3:ff:45:55:7b:ad:cd:66:ab:a4:25:06:
                    ea:d5:d0:7d:aa:98:bf:f4:a4:89:4a:79:01:80:a5:
                    69:b5:58:7f:43:af:26:d3:ff:1f:83:52:d1:14:c6:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:D1:7F:D3:5E:D7:D2:E9:BC:8B:5C:42:90:26:E8:14:B0:EA:75
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/3230362e38332e382e302f32342d3234203d3e20313339363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:f2:34:98:14:f3:4e:89:e1:e5:5f:c8:f5:fd:29:d3:e4:5f:
         44:11:56:ac:e7:a9:7e:6b:bf:f6:54:84:db:85:4b:9b:b2:07:
         50:88:56:6f:d7:a8:6e:f5:ab:3d:32:b2:d6:29:db:29:ae:aa:
         61:d0:65:c6:46:ed:ff:ea:1c:74:c3:c0:c5:c7:f1:69:9d:8a:
         8c:ef:75:10:71:e4:59:ff:4f:ff:6a:bc:ab:9c:cf:a5:8d:d3:
         29:3b:d9:a1:ad:2b:8b:3e:00:02:bf:9b:d6:5a:a0:b8:5c:11:
         c8:db:60:4a:ae:04:70:16:22:11:60:06:b3:d1:d9:87:85:a3:
         5e:c7:c1:eb:ed:87:df:c4:c3:c7:80:53:aa:2e:44:17:fc:51:
         38:f9:bc:c0:26:d5:24:64:8d:75:7a:4e:d4:ca:b8:5f:b6:12:
         46:d5:5a:6f:9b:09:dd:78:1b:4e:09:ff:84:e2:c5:bc:f8:75:
         ba:64:42:c2:af:2c:29:ba:f9:e9:bc:4f:b3:fd:05:fc:8e:1d:
         41:51:2f:1a:83:65:ad:85:7a:99:ff:e2:9b:02:b2:0e:86:23:
         f1:3e:05:f8:62:cf:f8:51:02:69:87:44:75:50:81:a3:2a:06:
         3f:fa:2a:c5:28:aa:11:66:69:32:50:b4:1c:20:7e:d3:5f:d7:
         e9:de:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org