Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa
File:                     323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa (raw, json)
Hash identifier:          9YlaqeSGi6OJQm4Mfev5VYdnwwqI6bMAazP/nxyH1kY=
Subject key identifier:   B2:6A:E9:F1:40:E9:43:AD:13:43:21:0D:11:C4:50:CB:7E:03:EE:65
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       0334C3373A5539B739714AC107692E971F4C835E
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa
Signing time:             Thu 06 Jun 2024 03:51:36 +0000
ROA not before:           Thu 06 Jun 2024 03:46:36 +0000
ROA not after:            Thu 05 Jun 2025 03:51:36 +0000
asID:                     54133
IP address blocks:        2602:fe13:2c7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:34:c3:37:3a:55:39:b7:39:71:4a:c1:07:69:2e:97:1f:4c:83:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jun  6 03:46:36 2024 GMT
            Not After : Jun  5 03:51:36 2025 GMT
        Subject: CN=B26AE9F140E943AD1343210D11C450CB7E03EE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:c5:28:66:5a:68:eb:c5:5b:45:5c:0d:46:
                    76:aa:3d:1b:5f:5d:f5:54:6e:35:df:85:ef:04:a5:
                    d4:f0:f0:65:70:c9:0b:9b:2d:97:7c:9d:07:c1:8c:
                    0b:0b:7f:c0:34:ee:f0:1d:7b:12:84:1f:c3:97:9e:
                    2f:de:fa:9e:50:43:c3:99:75:86:e1:58:60:8a:a3:
                    1c:21:85:ab:51:03:95:c5:56:d2:ab:7e:a6:44:51:
                    10:f4:f0:ee:a8:35:42:57:0c:2e:4e:07:75:e1:8b:
                    ac:db:18:59:77:cc:4f:73:39:f3:d9:f6:9e:35:5f:
                    2b:fb:f8:f6:2e:08:61:3b:f7:34:b3:ef:da:ba:0d:
                    b3:12:e9:87:5b:6d:6f:f2:3a:77:2f:93:d0:5c:3a:
                    d5:02:b9:78:be:7f:c4:7f:6f:a4:1c:9a:4a:45:76:
                    be:a6:0d:e3:3e:af:f1:ae:85:f6:cf:a3:6e:6e:cf:
                    31:5e:77:91:06:c5:54:16:2e:d2:5a:fa:f3:bb:6a:
                    ff:3f:d1:87:8e:27:f5:60:e6:3b:74:2b:51:a9:b9:
                    ab:e3:e8:c9:ae:a5:64:7a:8a:0a:fb:f2:dc:9a:fc:
                    b4:98:03:63:6e:b9:f6:43:2c:99:e7:32:a6:fc:03:
                    08:d0:c3:46:86:98:25:03:1f:40:36:ef:48:97:b2:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6A:E9:F1:40:E9:43:AD:13:43:21:0D:11:C4:50:CB:7E:03:EE:65
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:35:b0:37:c6:a2:0e:62:f0:c2:0f:d0:8f:c2:c8:25:71:
         e5:bd:73:c3:21:0d:00:f7:fb:8a:ad:18:e0:12:d6:27:30:64:
         86:8b:f1:71:c0:c2:c6:30:79:bc:db:19:2f:80:de:4a:58:3a:
         95:fa:36:fd:00:a2:9c:5f:c2:21:33:41:90:6c:14:38:ed:ff:
         a1:94:62:74:d7:ff:db:ca:01:9f:43:a2:5f:3e:fb:2c:90:ab:
         ea:d4:cd:d5:40:7f:c2:6b:a2:5d:25:cb:f8:7c:2f:49:d5:8f:
         8e:a0:b8:38:45:89:6c:9f:5f:a5:74:26:30:68:4a:50:8e:36:
         c7:4b:13:18:ca:6d:b0:62:a2:68:e4:92:db:e0:62:23:b2:21:
         31:10:f6:95:9e:ac:1f:44:38:9e:66:a7:46:c1:61:b8:11:e9:
         67:b7:32:05:d2:15:c0:c9:dd:8f:e0:e3:d5:a1:31:10:c1:88:
         01:8c:c3:9e:92:3c:45:9e:0b:13:85:d7:17:64:72:57:6e:3c:
         e1:92:6c:eb:ea:c1:22:2e:b7:4f:b7:e7:44:9b:64:f9:28:fa:
         36:3f:db:c4:5f:07:29:f3:7a:ef:c6:88:e4:e6:56:7f:00:db:
         56:2a:36:b4:4f:1b:2e:8b:3b:2c:c5:37:30:aa:db:27:6c:d9:
         c8:5c:44:c0
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUAzTDNzpVObc5cUrBB2kulx9Mg14wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjQwNjA2MDM0NjM2WhcNMjUwNjA1MDM1MTM2
WjAzMTEwLwYDVQQDEyhCMjZBRTlGMTQwRTk0M0FEMTM0MzIxMEQxMUM0NTBDQjdF
MDNFRTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMXFKGZaaOvF
W0VcDUZ2qj0bX131VG4134XvBKXU8PBlcMkLmy2XfJ0HwYwLC3/ANO7wHXsShB/D
l54v3vqeUEPDmXWG4VhgiqMcIYWrUQOVxVbSq36mRFEQ9PDuqDVCVwwuTgd14Yus
2xhZd8xPcznz2faeNV8r+/j2LghhO/c0s+/aug2zEumHW21v8jp3L5PQXDrVArl4
vn/Ef2+kHJpKRXa+pg3jPq/xroX2z6Nubs8xXneRBsVUFi7SWvrzu2r/P9GHjif1
YOY7dCtRqbmr4+jJrqVkeooK+/Lcmvy0mANjbrn2QyyZ5zKm/AMI0MNGhpglAx9A
Nu9Il7JJZwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFLJq6fFA6UOtE0MhDRHEUMt+
A+5lMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhMzI2MzM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNDMxMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/hMC
xzANBgkqhkiG9w0BAQsFAAOCAQEAPzw1sDfGog5i8MIP0I/CyCVx5b1zwyENAPf7
iq0Y4BLWJzBkhovxccDCxjB5vNsZL4DeSlg6lfo2/QCinF/CITNBkGwUOO3/oZRi
dNf/28oBn0OiXz77LJCr6tTN1UB/wmuiXSXL+HwvSdWPjqC4OEWJbJ9fpXQmMGhK
UI42x0sTGMptsGKiaOSS2+BiI7IhMRD2lZ6sH0Q4nmanRsFhuBHpZ7cyBdIVwMnd
j+Dj1aExEMGIAYzDnpI8RZ4LE4XXF2RyV2484ZJs6+rBIi63T7fnRJtk+Sj6Nj/b
xF8HKfN678aI5OZWfwDbVio2tE8bLos7LMU3MKrbJ2zZyFxEwA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org