Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa
File:                     323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa (raw, json)
Hash identifier:          UHdJdg7rShENQeQidM+Rn1+3Dz+CzPaDhVDMezLl2nM=
Subject key identifier:   D3:51:6E:4F:51:18:51:19:22:E6:F8:12:9B:19:0C:E5:74:E5:30:1E
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       72750AE0D31CAB660364836172E76F8D75A33109
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa
Signing time:             Tue 23 Apr 2024 15:46:12 +0000
ROA not before:           Tue 23 Apr 2024 15:41:12 +0000
ROA not after:            Tue 22 Apr 2025 15:46:12 +0000
asID:                     54133
IP address blocks:        2602:fe13:2c0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:75:0a:e0:d3:1c:ab:66:03:64:83:61:72:e7:6f:8d:75:a3:31:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Apr 23 15:41:12 2024 GMT
            Not After : Apr 22 15:46:12 2025 GMT
        Subject: CN=D3516E4F5118511922E6F8129B190CE574E5301E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:69:3c:3e:f1:b1:7b:ca:42:f3:1e:a9:21:
                    d7:da:97:2a:05:da:97:85:51:a0:ec:b2:d0:c1:15:
                    8f:04:7a:65:73:b7:c5:f4:3d:41:6d:f6:0a:9d:fd:
                    90:10:24:2d:a3:15:a0:75:f4:f2:a5:3a:e3:5f:ae:
                    a1:91:33:74:00:67:21:50:1b:a2:81:b4:bd:b9:ae:
                    80:53:8a:0c:1d:0b:b0:74:3d:de:dd:36:2b:46:17:
                    82:5b:a5:4f:fd:a2:8b:52:ef:26:98:53:a1:c7:f5:
                    03:65:fb:d3:f4:3c:1d:9c:6b:43:52:2e:d8:4c:19:
                    49:4a:1d:ed:d4:da:16:94:54:5b:8d:41:f0:bc:e9:
                    50:f1:85:98:d7:4c:ae:0c:88:fa:c3:64:ef:7a:7a:
                    50:37:35:c0:51:dd:b9:ae:12:c0:eb:30:f9:bc:d6:
                    b9:b1:0f:1f:2a:3d:0c:73:6c:5f:e3:2e:6f:b3:da:
                    ba:56:59:db:cc:e1:86:d1:97:c9:bb:bf:27:18:e0:
                    f9:0d:54:66:04:7a:9c:5e:b1:74:f2:f4:2c:2f:d0:
                    92:e2:35:f3:88:5a:58:5b:4d:46:d6:49:a6:5b:69:
                    42:01:79:60:57:68:ee:89:1a:8b:88:43:3d:d1:85:
                    66:93:75:7b:b0:07:68:1c:1a:c6:51:e9:a1:9c:07:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:51:6E:4F:51:18:51:19:22:E6:F8:12:9B:19:0C:E5:74:E5:30:1E
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:e9:74:bf:14:50:ee:be:22:e3:e4:ec:0e:29:d4:3d:ca:
         40:6a:6f:d5:e2:94:c9:e4:b5:e4:56:fa:5a:2b:6b:9a:95:50:
         a8:ac:02:dc:a4:5e:cd:7b:f1:de:97:f9:d9:f3:e6:b9:c9:ce:
         95:ea:f7:92:91:db:72:40:be:95:de:3a:ed:e1:a4:d2:ad:4a:
         dc:5f:65:79:f6:da:06:06:f5:b1:de:fe:4f:8c:d3:f4:37:6f:
         90:ec:0b:fa:2f:af:a1:41:c3:e6:e8:93:08:0a:9e:88:6b:85:
         c0:94:8e:70:42:9f:b2:a7:44:16:bd:1e:cb:ca:e0:d0:25:ce:
         ef:e5:be:9f:e8:46:42:44:a7:24:e9:d2:63:13:26:f7:ff:cb:
         9b:94:c4:5a:6f:29:2e:5e:bf:76:3d:07:56:3d:06:33:77:3a:
         f9:db:da:6d:da:fb:85:24:a9:0c:9f:81:77:6e:e1:4f:07:b5:
         c5:dd:85:8a:d9:ce:9d:a1:b9:f4:d6:6b:af:69:38:86:4a:86:
         66:37:b8:c1:89:17:4b:6d:d3:59:93:1b:bc:e4:f7:65:93:5c:
         4b:60:62:15:8f:4c:55:87:9f:33:cf:da:e2:c0:92:28:0e:bb:
         81:7f:7f:e8:c1:5c:95:fb:94:5c:4b:44:f4:1c:de:74:b9:2d:
         05:31:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org