Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa
File:                     323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa (raw, json)
Hash identifier:          qRoA7ITtf7rLHYadxTzA0d0LklLuh9xfyXZh3oQdDA0=
Subject key identifier:   4D:65:59:AE:6A:AC:7D:58:D5:41:2B:08:D7:11:61:22:57:26:91:46
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       46C0C827E2803CD66DD9700929CCEC391BE0F4B5
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa
Signing time:             Sun 17 Dec 2023 17:22:22 +0000
ROA not before:           Sun 17 Dec 2023 17:17:22 +0000
ROA not after:            Sun 15 Dec 2024 17:22:22 +0000
asID:                     53356
IP address blocks:        2602:fe13:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 16:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c0:c8:27:e2:80:3c:d6:6d:d9:70:09:29:cc:ec:39:1b:e0:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Dec 17 17:17:22 2023 GMT
            Not After : Dec 15 17:22:22 2024 GMT
        Subject: CN=4D6559AE6AAC7D58D5412B08D711612257269146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:fe:db:fb:c6:5a:e8:b8:e0:24:d3:52:e8:
                    84:44:16:ac:bd:95:89:d1:86:9f:3e:0f:20:c6:ab:
                    13:25:be:ef:e1:6f:f9:df:8c:15:2c:d1:62:35:ec:
                    85:ca:eb:99:b1:2a:bf:79:12:a3:84:f0:f6:4c:17:
                    9c:bd:ad:9f:3b:a2:d1:1f:06:f3:ac:58:ba:8b:5a:
                    c0:d5:61:54:2c:c0:06:8b:2d:0f:68:a6:06:43:1c:
                    8f:13:40:09:45:bd:ac:2e:3a:cd:57:26:96:3a:a3:
                    e4:24:eb:eb:8d:ee:f8:47:f7:cc:7f:83:0d:fe:49:
                    52:c2:3f:a4:37:c5:c7:27:22:32:41:36:50:c7:0e:
                    38:39:35:c8:fa:bf:5e:6d:35:2a:5c:ee:1e:04:c3:
                    24:67:59:0b:81:28:4d:c4:08:55:ca:1e:b5:24:d9:
                    26:56:60:81:7f:6c:f4:b8:81:6e:91:e1:eb:e0:94:
                    5a:2c:a5:16:21:f0:57:69:cd:d2:4f:25:d4:a0:0b:
                    6b:71:1b:d0:b4:60:ba:94:4c:c2:e4:08:05:ee:00:
                    79:6c:25:da:26:bf:06:b3:05:a6:2d:b2:86:42:53:
                    1e:a8:44:35:5f:21:23:f0:bc:a8:d1:81:72:36:b5:
                    01:8d:61:e1:74:7d:51:6f:10:b7:72:00:73:0c:31:
                    b4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:65:59:AE:6A:AC:7D:58:D5:41:2B:08:D7:11:61:22:57:26:91:46
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:7c:cc:f7:b1:e7:ac:2a:56:f1:64:7b:b2:7e:ff:9e:5f:67:
         b9:df:d2:16:f1:61:8d:2e:9f:a8:65:c6:43:96:56:da:13:53:
         a3:16:3a:19:b3:0b:be:86:51:62:42:9a:2c:91:13:05:c9:7b:
         9b:de:c7:b9:8d:cf:9e:44:4c:c9:b2:fa:be:53:10:fd:e4:67:
         89:c2:92:1d:81:5b:e2:65:d9:9d:7e:cf:40:cf:f7:65:f7:27:
         62:6d:59:1f:15:63:6d:94:61:81:c7:2b:07:47:0e:8e:f3:4b:
         93:f3:e4:89:da:9f:d7:58:15:7d:be:5d:5a:8b:0a:05:31:f3:
         18:47:e0:8c:bc:17:5f:f7:1d:ec:99:2c:4e:1a:82:e0:59:f1:
         4a:6f:cb:3c:b5:40:c8:43:61:11:08:44:77:a9:26:c6:50:18:
         c7:d9:7e:43:0b:7f:fe:c0:8d:8e:2a:eb:a0:c9:df:f6:17:f5:
         a3:ba:6d:29:ba:bb:3d:ed:67:17:4a:d4:3c:37:47:87:53:d4:
         ee:5a:16:ab:b8:68:e9:4f:26:09:62:8e:80:de:5b:ec:82:c6:
         03:ff:2f:56:a0:47:cd:09:a4:8f:21:bb:a2:53:9d:77:cb:65:
         27:de:c3:f8:72:f2:f8:93:b4:f3:fc:8f:48:f3:bb:7a:e5:90:
         dd:2d:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:05:18 2024 by rpki-client on console-fra.rpki-client.org