Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          jfuVjR3xZzwtPKLwMeF2/92kp6MMPL2oPIJIXWbrSLY=
Subject key identifier:   F0:F9:1C:AD:D2:F5:3C:60:FB:34:3F:4B:33:D7:6E:49:5D:C3:E2:2D
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       1E724F932264CEEBB163FC988ACD43BF3F4AE925
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Fri 22 Dec 2023 17:59:59 +0000
ROA not before:           Fri 22 Dec 2023 17:54:59 +0000
ROA not after:            Fri 20 Dec 2024 17:59:59 +0000
asID:                     396503
IP address blocks:        2602:fe13:804::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:72:4f:93:22:64:ce:eb:b1:63:fc:98:8a:cd:43:bf:3f:4a:e9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Dec 22 17:54:59 2023 GMT
            Not After : Dec 20 17:59:59 2024 GMT
        Subject: CN=F0F91CADD2F53C60FB343F4B33D76E495DC3E22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:6a:2d:08:53:92:e6:40:7f:27:a7:30:81:
                    e5:e9:7d:c3:fe:e8:df:6d:ed:de:03:f2:e7:e6:ef:
                    94:62:61:01:7b:2d:8d:e0:3d:2f:ef:9b:8c:80:65:
                    a5:5f:04:86:5c:0f:f8:7e:49:01:54:f6:ef:67:e9:
                    9b:c0:c9:f2:aa:4c:6a:cb:7c:a0:de:b2:82:9b:49:
                    5f:16:5a:54:15:48:24:cf:a6:fd:02:32:05:a7:50:
                    47:19:b6:13:5e:94:20:b8:9a:bd:9f:f9:dd:b2:6b:
                    74:44:05:48:b1:32:d4:fe:6a:ba:83:76:5a:7a:1d:
                    bc:2f:2f:31:ee:67:c7:2c:71:98:44:36:36:6e:32:
                    91:04:09:87:3a:2b:a7:fe:93:05:97:4c:aa:b9:9d:
                    19:f0:98:5f:4b:e9:78:51:60:d1:44:31:51:54:d4:
                    f7:c2:b0:2b:2b:59:dd:a4:aa:c6:da:21:03:d4:38:
                    8f:82:c8:88:87:f3:da:4f:36:18:0d:8c:fa:b5:db:
                    5b:be:6d:c5:9a:35:7f:f9:42:26:db:cd:2f:5d:38:
                    70:87:02:69:bd:52:0d:08:73:f1:ca:70:45:f8:58:
                    3b:a3:dc:79:fb:1e:cb:f8:c5:27:17:f7:76:72:44:
                    c8:a0:35:2e:16:a8:d8:fd:c4:8b:88:4a:1f:e7:b8:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F9:1C:AD:D2:F5:3C:60:FB:34:3F:4B:33:D7:6E:49:5D:C3:E2:2D
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:804::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:33:82:e6:f2:a3:bf:e9:48:c8:b6:77:1e:ee:ff:35:e0:b2:
         80:55:54:fd:12:5b:63:ee:dc:24:d1:4b:05:a4:f6:bd:2a:61:
         ca:11:3b:1a:a2:03:9a:bc:94:89:fb:25:c2:ab:7a:3c:61:2a:
         f4:0c:56:d2:22:cd:28:4d:68:5b:27:e8:9c:33:c3:24:b7:12:
         6d:a6:18:3a:3f:fb:b7:34:ff:9b:e7:1d:e3:7f:dc:e6:6f:6b:
         74:ea:b4:11:60:cc:62:9f:1d:da:98:d7:7f:0d:6a:4b:cb:fa:
         76:d8:30:15:f4:30:b7:b2:68:25:e7:da:17:47:82:93:89:5e:
         6a:6b:cf:a6:39:61:91:ed:ea:41:58:11:cf:02:cd:49:1c:35:
         73:17:c9:14:9c:f9:3c:c4:52:07:5e:67:42:3c:da:9a:57:ff:
         65:25:16:49:9c:85:5f:9b:ed:2a:41:ba:37:1d:83:29:dc:3b:
         f6:64:7d:d6:87:84:b7:e5:e1:9a:5e:68:c1:63:c7:31:f4:8a:
         29:95:56:02:b0:ce:12:56:5f:8e:17:56:74:20:e9:2a:9a:e9:
         57:e9:cc:07:b8:d3:41:75:9e:ec:bf:9c:7f:b5:ce:63:1e:9a:
         29:a8:c9:eb:1e:7f:39:24:06:ec:81:4c:65:05:18:89:80:f3:
         94:3e:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org