Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3262303a3a2f34342d3434203d3e203231373433.roa
File:                     323630323a666531333a3262303a3a2f34342d3434203d3e203231373433.roa (raw, json)
Hash identifier:          wjTDRUC117ZftTnrXVcQML1IW3STOz+fz7GjtjnlVvs=
Subject key identifier:   BA:FB:B9:7C:14:CA:7F:99:85:A8:5B:5F:5E:7E:DB:76:AB:4F:51:4B
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       13A28C4D3959FA86B7B25F6CC222C2201FF8B569
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3262303a3a2f34342d3434203d3e203231373433.roa
Signing time:             Thu 11 Apr 2024 01:19:32 +0000
ROA not before:           Thu 11 Apr 2024 01:14:32 +0000
ROA not after:            Thu 10 Apr 2025 01:19:32 +0000
asID:                     21743
IP address blocks:        2602:fe13:2b0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a2:8c:4d:39:59:fa:86:b7:b2:5f:6c:c2:22:c2:20:1f:f8:b5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Apr 11 01:14:32 2024 GMT
            Not After : Apr 10 01:19:32 2025 GMT
        Subject: CN=BAFBB97C14CA7F9985A85B5F5E7EDB76AB4F514B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5d:df:73:26:0c:ec:93:07:f2:90:75:15:31:
                    d7:a0:bb:06:36:f2:ad:de:e3:b1:09:cb:ba:f4:eb:
                    6a:2d:81:05:f2:0a:50:e9:9b:d5:5f:db:25:db:f3:
                    57:74:e3:4b:8a:39:68:3a:d7:9c:1c:ba:bc:a0:98:
                    b2:92:af:0b:d6:25:92:02:f4:cd:5c:72:3c:ef:0c:
                    e1:b9:24:9e:2b:65:a1:be:56:b1:66:76:c8:d7:3e:
                    31:ea:90:74:c3:ae:65:48:c8:0e:89:83:c4:4e:c2:
                    c7:6d:ca:35:cd:37:cd:ae:57:84:71:15:39:ae:61:
                    4b:6e:d8:ce:82:45:a3:ae:7e:8d:16:cd:e9:6e:a8:
                    bd:ed:db:24:11:27:58:ac:bf:19:f8:f5:e5:0d:ee:
                    2e:db:8a:0c:60:6c:8d:27:7e:80:8d:84:89:5d:11:
                    90:94:5e:ee:bd:69:4a:cf:db:96:f8:5f:56:89:12:
                    76:59:9e:34:19:c5:0a:ea:d3:11:89:7b:27:08:cf:
                    7c:4f:4c:79:8f:b2:01:d1:6e:55:1b:ef:ff:0d:b8:
                    72:99:95:d2:2f:9b:f6:2f:ad:ef:e7:3c:bf:f1:6b:
                    ae:84:46:c8:a9:43:64:2c:4b:81:d8:4f:01:69:bc:
                    85:b7:68:4f:b5:9b:55:6d:53:e1:c1:a3:e3:96:6e:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:B9:7C:14:CA:7F:99:85:A8:5B:5F:5E:7E:DB:76:AB:4F:51:4B
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3262303a3a2f34342d3434203d3e203231373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:1b:d5:a2:2a:b0:98:b7:c6:80:5d:f3:4c:9e:b0:52:17:
         d7:81:d8:d3:67:46:44:74:8d:39:1e:8e:c7:c6:e6:c9:9e:fc:
         44:72:b3:3c:94:36:6f:f6:17:76:a2:61:bc:cd:60:39:6f:eb:
         7a:d8:56:b9:e5:85:ab:f9:f3:99:50:fb:7b:af:78:4b:76:3a:
         96:4d:8b:1e:6f:48:23:6c:99:ba:a5:54:a3:9a:38:82:d7:9e:
         c2:84:6f:a7:04:2f:c6:49:38:ed:e0:42:48:f9:0e:b3:48:13:
         a1:72:1a:cd:52:42:8c:24:72:95:69:b0:93:eb:3a:f1:89:ed:
         4f:34:2e:ae:53:53:09:1b:ce:3f:3b:6c:77:44:30:d2:95:12:
         80:33:7d:6d:92:41:4b:c7:21:91:f8:f1:ae:80:dc:a1:9d:d0:
         b9:81:e2:85:2b:34:2c:20:70:50:d7:f4:3a:3f:28:bc:c0:4b:
         dc:e3:0e:22:3a:8f:8f:41:da:76:52:9e:3e:f9:60:f6:24:f4:
         21:b9:f9:30:28:76:7f:c8:45:90:3e:f6:91:de:a7:51:24:0c:
         4f:ca:e6:1b:fa:86:1a:37:e2:81:56:71:51:77:f2:67:06:e7:
         62:a4:5f:a5:da:c6:61:ef:5e:c3:71:c5:45:0e:d4:d5:cc:e3:
         b4:2a:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org