Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa
File:                     323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa (raw, json)
Hash identifier:          1z8kq6qCgMokGYaklaMrdqALDsXbw/3Oi2cAQzGfkw4=
Subject key identifier:   10:A0:DB:39:BD:E3:62:5C:31:3A:88:D7:CA:E0:E1:38:6C:0F:FB:A2
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       5AC86223D0268F99DE4D7CB8AC70047966A272C0
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa
Signing time:             Fri 20 Sep 2024 01:19:47 +0000
ROA not before:           Fri 20 Sep 2024 01:14:47 +0000
ROA not after:            Fri 19 Sep 2025 01:19:47 +0000
asID:                     26042
IP address blocks:        2602:fe13:2e0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c8:62:23:d0:26:8f:99:de:4d:7c:b8:ac:70:04:79:66:a2:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Sep 20 01:14:47 2024 GMT
            Not After : Sep 19 01:19:47 2025 GMT
        Subject: CN=10A0DB39BDE3625C313A88D7CAE0E1386C0FFBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:3a:f3:09:46:94:4e:b9:96:1a:8b:91:9f:
                    b6:fb:c5:01:ff:ad:ca:ec:4a:d3:46:60:cd:ac:87:
                    dc:97:15:27:6e:87:9a:5d:05:7c:b7:dc:49:2f:e8:
                    cf:46:88:74:ac:6b:dc:d0:77:11:45:c2:af:51:45:
                    31:da:a0:22:5c:7b:10:dc:82:27:51:8c:22:38:29:
                    ea:5f:7d:54:98:08:0c:58:41:62:6c:cd:7b:b0:17:
                    ab:c6:4b:4a:f4:dd:44:bb:37:90:34:9e:41:b9:2b:
                    b2:e8:2a:55:09:1c:1a:6b:53:00:90:1d:94:a8:14:
                    2e:ec:57:3d:40:60:89:82:1c:6d:68:69:ea:fb:17:
                    30:d9:d6:79:ec:90:88:c4:ac:21:81:a6:80:7e:82:
                    bf:f3:9a:d7:7f:1e:14:5d:ec:b3:6c:90:7c:03:c6:
                    33:85:e0:8a:a8:2c:26:d8:3f:92:5f:96:a5:e1:58:
                    ff:57:7b:aa:90:16:41:71:c8:07:11:55:37:5a:20:
                    9f:6e:6d:97:20:10:15:89:84:42:bd:cb:bf:f7:a7:
                    80:5f:ca:88:c6:6d:d0:a0:c4:e8:0a:6f:41:47:4b:
                    eb:c4:0c:6a:ff:a2:89:69:d0:ad:a5:7e:93:6f:d8:
                    eb:20:f1:88:71:8d:b0:b4:84:b7:47:dd:48:6d:70:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A0:DB:39:BD:E3:62:5C:31:3A:88:D7:CA:E0:E1:38:6C:0F:FB:A2
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:3d:e5:0a:ff:2a:33:2d:58:ae:ed:f7:13:35:6c:8a:22:bc:
         70:be:7e:4b:af:5e:e0:b8:57:cc:8c:cb:19:1e:9e:de:f7:1f:
         b8:a5:42:bd:ce:a7:83:1f:7a:fd:c8:4b:d1:47:89:ae:27:ec:
         4f:42:b9:f0:d7:2c:c1:d1:4e:62:c4:fa:8d:0f:d5:ef:e4:16:
         68:be:ab:28:ad:e2:29:84:f7:5c:2a:fc:72:bc:0a:8e:d4:87:
         f4:0a:98:dc:2e:12:eb:66:79:0b:5b:e7:1e:85:5d:d7:55:dc:
         a2:e5:7a:ef:ce:08:04:93:74:63:e5:58:c0:84:89:08:c0:c3:
         6e:dc:a4:e5:7b:38:5e:c9:50:2d:c3:8d:6a:17:e4:b6:4c:4a:
         a6:d4:fe:b3:d9:36:81:36:ad:7d:84:c0:ac:05:5c:f1:92:67:
         44:7c:4f:9a:eb:20:02:22:a5:b4:af:96:4d:62:b1:9e:6b:55:
         c0:60:99:13:ec:3b:a8:a2:a9:9a:72:af:1d:dd:72:42:f1:42:
         c3:2a:0b:17:1f:1d:b4:ce:db:e9:e7:7e:13:3d:50:b9:9f:1d:
         17:73:97:8d:e4:12:74:bc:1f:89:49:9e:9b:62:72:22:db:51:
         97:dd:e5:9e:42:bc:bb:3a:75:55:6b:62:e7:75:11:70:36:fd:
         01:de:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org