Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa
File:                     323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa (raw, json)
Hash identifier:          fbCBTNfDR8UcwoOjGR4JfjcplYdZOeTq261lnbbp+JM=
Subject key identifier:   9A:07:BA:A0:50:E4:CF:58:B0:AB:51:43:3D:26:41:93:A5:4F:F5:B6
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       0CF1E74790537BC44E88403B4EC34A1D45780D6B
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa
Signing time:             Sun 15 Sep 2024 00:08:07 +0000
ROA not before:           Sun 15 Sep 2024 00:03:07 +0000
ROA not after:            Sun 14 Sep 2025 00:08:07 +0000
asID:                     26042
IP address blocks:        2602:fe13:806::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f1:e7:47:90:53:7b:c4:4e:88:40:3b:4e:c3:4a:1d:45:78:0d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Sep 15 00:03:07 2024 GMT
            Not After : Sep 14 00:08:07 2025 GMT
        Subject: CN=9A07BAA050E4CF58B0AB51433D264193A54FF5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:1a:ed:a3:8c:e1:f1:a3:c3:4e:c4:7a:02:
                    b5:f4:d6:30:49:4f:d0:4d:a1:24:e5:11:a0:29:72:
                    a0:01:d5:dc:c2:9a:d6:c4:f5:4d:e2:12:f8:33:fa:
                    f8:31:5b:ee:76:7e:70:bd:85:aa:da:29:5e:f8:b1:
                    a6:b2:75:80:6f:a5:89:15:bf:6c:e3:b2:97:2f:41:
                    7e:ec:22:8e:90:4b:84:c3:29:2b:41:a3:2d:4c:0f:
                    40:04:9d:a8:ab:a7:07:ac:2a:2a:a6:e4:2f:29:8d:
                    f0:d4:eb:d5:a7:d5:ce:70:48:64:ba:ba:33:c4:a5:
                    22:59:ef:2f:98:13:05:3e:d8:39:63:70:1d:db:11:
                    d0:80:b0:35:af:f0:71:50:ec:0e:0c:f3:17:9a:5d:
                    63:0b:a3:e6:2e:1f:24:60:35:b1:98:4a:78:50:05:
                    63:d8:93:24:ed:39:ad:f6:c2:46:87:2a:4c:21:f7:
                    5c:82:12:4d:a9:c9:63:cb:ca:f8:a3:f8:c0:ad:50:
                    49:17:f8:92:d6:34:fc:1c:13:21:01:46:26:79:46:
                    71:c4:13:8c:b5:df:9b:d2:67:bd:cd:76:96:ee:f6:
                    a3:e7:e7:df:e5:c8:2c:b8:6c:15:fd:fe:b0:cf:e5:
                    75:d4:8a:a7:af:6e:5e:3a:7b:8c:f0:ab:11:8f:15:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:07:BA:A0:50:E4:CF:58:B0:AB:51:43:3D:26:41:93:A5:4F:F5:B6
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:806::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:66:fc:3d:32:0d:86:c3:0f:31:9e:f8:6b:3e:a4:85:39:cc:
         bd:5a:99:3c:cb:5a:4e:b9:a4:22:3d:df:7e:3c:0a:42:62:a4:
         65:41:86:3f:f6:c9:8c:7c:6e:38:36:35:c3:b0:1d:24:ac:9d:
         ae:5d:c7:bb:a5:63:ac:9c:19:19:03:6c:65:ea:b6:98:4e:63:
         31:e6:76:a1:1e:f5:41:31:80:5f:e3:70:f2:aa:ef:4e:63:5b:
         26:83:b3:f8:02:e3:86:04:2b:57:f9:f7:7b:64:0b:f9:fd:7b:
         33:d8:8b:47:1e:47:82:b1:6e:a4:33:5c:a6:d0:0e:1e:94:cc:
         8e:b7:82:33:d0:fc:08:25:67:09:70:20:0b:cb:d0:71:c0:b9:
         48:9d:3b:ca:ee:f3:f4:20:db:5c:97:1b:60:15:41:9c:d3:b2:
         de:04:12:cc:52:37:24:90:5f:91:98:b2:23:eb:dc:cb:eb:b1:
         94:82:f7:81:a3:0e:6a:0f:1f:03:71:3b:af:3b:9b:6e:a1:09:
         a0:a3:45:1e:0e:8e:cc:cd:23:79:9e:31:53:b6:5f:0a:ef:3c:
         e4:56:a1:dd:92:00:65:59:fd:92:01:c0:6c:09:49:cc:6d:f1:
         11:58:38:ed:6d:9b:5f:5b:58:da:a6:a8:49:f4:ac:f9:70:ab:
         5f:d8:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org