Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa
File:                     323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa (raw, json)
Hash identifier:          8UIeWy+OzzBT1XQJmjRcfEO08//OsTW7tR4DLGMEGrA=
Subject key identifier:   37:1F:10:69:A6:62:77:36:5C:F2:33:1A:5D:68:97:54:4A:40:F6:B7
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       04A78462E92E4EA736E4BEC6B31F86EB8DC1706F
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa
Signing time:             Wed 18 Sep 2024 02:03:50 +0000
ROA not before:           Wed 18 Sep 2024 01:58:50 +0000
ROA not after:            Wed 17 Sep 2025 02:03:50 +0000
asID:                     54133
IP address blocks:        2602:fe13:2f0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a7:84:62:e9:2e:4e:a7:36:e4:be:c6:b3:1f:86:eb:8d:c1:70:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Sep 18 01:58:50 2024 GMT
            Not After : Sep 17 02:03:50 2025 GMT
        Subject: CN=371F1069A66277365CF2331A5D6897544A40F6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:f4:f8:32:a0:27:a4:74:3c:ad:91:c5:c1:
                    90:dd:3c:79:14:ec:ab:aa:fd:53:52:af:6e:95:35:
                    29:9b:e1:e8:22:de:36:45:04:63:8b:38:61:d7:ac:
                    ef:26:43:2e:70:98:79:4b:07:80:bd:aa:e9:d1:0c:
                    0f:79:33:d7:20:d6:f0:ae:af:d8:13:7f:75:f6:c2:
                    aa:bf:74:0c:94:3b:a1:12:49:db:af:e4:7a:33:19:
                    fc:17:0d:c5:ff:8d:6c:ad:3e:8f:83:6b:e0:fe:88:
                    0b:33:82:22:2b:bb:ca:b6:5d:9d:aa:57:d2:e2:c2:
                    79:63:5d:03:72:62:3a:3b:6e:60:5f:37:a6:fb:78:
                    1b:5a:32:4f:96:c1:67:23:fa:bc:33:24:ce:a1:ae:
                    30:95:9d:cc:59:c9:47:d6:75:db:23:fc:5f:f1:60:
                    bd:d5:0f:49:bd:68:5b:36:24:72:94:f7:41:7e:1b:
                    d4:9c:74:ea:b2:66:e9:ac:e9:36:3d:4c:9e:6a:89:
                    3e:55:83:2c:66:c5:ce:dd:05:6f:f9:df:aa:28:07:
                    56:ea:98:d4:1e:e1:db:72:02:21:f0:75:f8:60:69:
                    c1:f3:dd:62:05:f5:89:9c:56:30:84:ef:a4:43:3a:
                    22:ba:b1:d0:a4:d0:78:2d:22:15:72:8a:ea:98:30:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1F:10:69:A6:62:77:36:5C:F2:33:1A:5D:68:97:54:4A:40:F6:B7
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:36:8a:23:7d:5e:4d:80:d9:65:57:9e:90:17:55:1f:82:
         58:6c:94:77:e3:b0:7b:00:f5:da:ee:c3:c2:e0:13:53:0d:1a:
         2d:6b:15:4c:4f:af:af:9c:6e:a5:de:be:b4:e9:ff:df:8c:92:
         35:75:10:24:e2:40:7c:13:b2:5a:e2:c8:10:d6:4e:13:12:86:
         6f:2f:69:b0:99:b7:38:64:41:8c:1e:fc:22:93:af:3a:e1:0c:
         9f:47:28:28:83:67:6b:a5:30:f5:34:83:70:e4:00:55:07:d3:
         f3:08:00:c5:ed:66:d1:9c:96:d1:aa:f0:b9:6e:11:94:83:d5:
         d1:27:b2:b2:85:46:eb:d8:28:7d:46:6e:6c:c1:8a:98:e9:ec:
         37:94:7f:03:26:21:0f:85:88:54:43:81:7a:b2:1b:c1:21:ad:
         6a:08:9b:60:17:20:6d:5b:1c:88:65:bb:a4:f9:29:61:e3:2b:
         f5:0b:68:14:ab:21:34:27:4d:8f:7d:ee:89:f4:df:48:f7:67:
         01:84:82:f5:f8:cc:7a:85:88:66:8e:fb:65:98:e5:14:91:89:
         a3:3e:96:bf:cc:d7:44:91:02:8c:9e:13:ad:d4:f8:54:cb:5a:
         91:35:f9:9a:b9:17:b3:44:8e:aa:a2:29:9e:c7:a2:24:d1:e3:
         f6:f1:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org