Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          oJA9QClSHfcjmW80eO4jVeS9oF2m+AoEfjhqhbvfySw=
Subject key identifier:   86:F9:EE:DD:EA:10:EB:14:0D:91:E9:67:AF:0F:B8:F7:10:22:0B:F5
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       5735D5E10D1FCC3D253B5481C10BD5B1C9A07AFF
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa
Signing time:             Fri 24 May 2024 15:25:14 +0000
ROA not before:           Fri 24 May 2024 15:20:14 +0000
ROA not after:            Fri 23 May 2025 15:25:14 +0000
asID:                     53356
IP address blocks:        2602:fe13:805::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:35:d5:e1:0d:1f:cc:3d:25:3b:54:81:c1:0b:d5:b1:c9:a0:7a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: May 24 15:20:14 2024 GMT
            Not After : May 23 15:25:14 2025 GMT
        Subject: CN=86F9EEDDEA10EB140D91E967AF0FB8F710220BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:cf:a4:a1:78:c1:81:ea:68:21:13:37:26:
                    89:56:fc:c8:64:7b:0f:1b:30:dd:da:3f:33:f4:69:
                    92:3d:3b:78:d3:5c:84:84:3e:9d:11:74:6a:f2:c9:
                    ac:d9:a8:ae:fa:1e:0e:b7:e5:91:39:b6:0e:54:7d:
                    2d:56:47:e1:b4:f4:04:a5:f0:97:5c:8d:20:5c:8c:
                    6a:a4:dd:32:eb:5d:b1:14:ba:e4:0e:ac:03:d2:35:
                    15:4c:91:d7:d1:30:88:0c:7e:5a:5e:8f:9f:76:cc:
                    31:90:bf:ad:d4:2c:c9:64:c2:2d:66:d2:16:aa:85:
                    2e:35:74:d0:98:e7:7f:fe:8e:d3:e9:4b:9b:98:01:
                    d4:3e:d0:4c:f9:11:00:08:d4:3c:5d:bc:92:6c:7b:
                    21:92:ef:38:70:f7:b9:70:f8:d7:66:21:ab:35:11:
                    62:44:58:4b:0d:ea:b0:05:9b:ac:c5:04:79:bb:82:
                    b1:de:12:26:19:eb:de:c7:ac:28:cf:3c:2b:e6:22:
                    36:73:66:8c:fc:eb:53:d6:9a:cd:98:35:9a:c6:43:
                    77:67:d3:26:55:0f:11:dd:1b:8f:db:35:67:01:98:
                    f0:6d:93:a7:81:85:cd:7f:a5:63:1f:b8:65:f9:30:
                    eb:bb:de:e5:f4:99:16:da:30:ca:83:77:74:fd:b7:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F9:EE:DD:EA:10:EB:14:0D:91:E9:67:AF:0F:B8:F7:10:22:0B:F5
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:805::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:26:71:e4:5f:17:8c:b0:06:01:b6:1b:8a:cc:46:4e:90:
         70:78:e6:78:1b:19:de:82:15:52:ba:7d:00:11:5e:ae:49:cb:
         2e:b3:fb:5c:43:e8:ba:a2:a4:d5:0f:40:9a:d8:57:cb:3d:91:
         0d:d1:4d:30:24:ac:1f:2a:e9:92:19:da:4f:2c:0f:76:bb:b4:
         7e:b2:df:db:c3:04:25:16:57:02:9c:f3:00:26:1b:b0:df:0f:
         30:5d:60:23:18:7d:ae:ce:aa:52:a2:31:68:82:fe:9f:80:2c:
         ba:e7:0f:f1:1b:01:10:db:da:98:01:62:4e:f4:2f:25:1c:73:
         a8:66:77:90:ce:cb:51:18:58:df:fe:a4:c4:41:52:4c:f9:bf:
         b0:b1:24:1d:5f:17:ba:ff:e9:c6:ee:e2:82:b1:67:68:09:43:
         31:10:90:68:0b:1f:bc:29:87:3b:4a:f3:72:fa:b1:ff:27:5c:
         76:2c:ca:4f:e1:1e:7a:a5:98:e9:27:52:4a:0e:f4:a1:ee:13:
         66:e7:4c:58:db:ba:3a:85:31:3d:8d:80:10:b3:d2:33:d4:d7:
         c3:0b:4c:a2:18:ef:67:96:2c:90:8d:f2:38:84:44:82:bf:3c:
         11:b5:40:f8:50:25:ed:8a:54:14:20:d6:d2:31:79:e1:b2:62:
         03:c0:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org