Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa
File:                     323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa (raw, json)
Hash identifier:          GHer6KyAatDUWqvYMVb4gVYxMinOLgGP5fWwDmMqA6o=
Subject key identifier:   95:82:6F:D8:95:FC:7C:16:4B:91:0D:1C:83:8A:D0:4F:24:5D:69:D1
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       4BA130E3301936B6CFE533A7053197CBC6C935A9
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa
Signing time:             Sat 14 Oct 2023 23:52:05 +0000
ROA not before:           Sat 14 Oct 2023 23:47:05 +0000
ROA not after:            Sat 12 Oct 2024 23:52:05 +0000
asID:                     26042
IP address blocks:        2602:fe13:806::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 16:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a1:30:e3:30:19:36:b6:cf:e5:33:a7:05:31:97:cb:c6:c9:35:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Oct 14 23:47:05 2023 GMT
            Not After : Oct 12 23:52:05 2024 GMT
        Subject: CN=95826FD895FC7C164B910D1C838AD04F245D69D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:60:a3:c4:a6:f4:03:94:ec:cd:68:fc:52:
                    b9:3e:fe:d6:14:69:0f:2e:4f:3b:1e:92:a1:55:02:
                    73:02:7b:6f:70:6e:78:51:82:f4:81:db:d8:b5:1a:
                    44:32:26:fd:a4:3e:5d:c2:dc:9a:5d:b9:3d:24:cd:
                    e9:2d:ac:87:ff:a9:ae:09:57:da:2c:d5:fc:cf:44:
                    14:45:ae:51:20:07:4b:db:c8:62:10:22:5d:d6:62:
                    a1:66:87:39:89:f7:5f:dc:f1:89:86:52:73:4e:13:
                    2c:25:42:a2:78:a5:32:56:08:df:40:c6:bf:b1:2e:
                    e0:33:d2:c7:5c:e9:86:63:77:88:2c:7e:7b:e9:0a:
                    bc:17:39:d6:0d:c5:11:fe:e6:72:1f:1e:b3:3f:ef:
                    f3:9d:b5:24:46:dd:9f:80:97:d9:58:4f:61:8b:83:
                    2f:dc:53:a3:d1:68:24:d9:38:f8:99:19:d5:f4:12:
                    d5:2b:eb:d0:13:5d:74:d4:63:d0:1d:0b:01:93:b3:
                    78:c7:7b:f4:3d:81:a0:e8:86:11:78:37:40:5f:ec:
                    b6:2f:eb:79:75:75:c5:86:a9:1f:db:e7:3f:5f:45:
                    3d:4d:b5:32:ed:ab:ee:37:6b:2a:9f:fd:d6:b6:db:
                    a3:9d:33:41:d5:d6:db:ab:db:dd:fb:02:34:58:e2:
                    c6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:82:6F:D8:95:FC:7C:16:4B:91:0D:1C:83:8A:D0:4F:24:5D:69:D1
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:806::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:dd:68:21:51:06:a4:c5:cc:96:c7:1d:14:c1:04:b2:fa:11:
         fa:05:e0:14:3d:68:93:d5:db:cb:e6:b2:ef:4a:6f:16:24:e1:
         b5:b4:cd:6d:7b:ab:d0:45:b2:9c:7f:3f:5b:e4:6f:37:07:f3:
         10:a2:b4:09:b7:62:6f:15:a3:2b:02:c6:8b:cd:2b:ad:a8:4e:
         26:55:6c:ed:1f:df:0b:71:52:0d:d8:09:39:ce:11:d9:60:06:
         65:fa:f9:97:ea:43:48:a7:2c:40:4f:25:b2:1d:2e:63:45:27:
         e7:1c:c5:a9:fa:fe:e8:a5:85:44:9f:9c:db:2c:88:83:5a:ed:
         f5:35:2e:a2:95:3f:1f:d8:82:9b:84:c6:70:0b:f4:93:79:ca:
         ad:fa:b8:d8:68:a1:dc:52:3e:66:aa:f3:2d:ef:dd:d5:90:3d:
         e0:2f:49:e4:94:6a:06:79:22:54:38:57:63:85:95:42:f7:97:
         b1:de:70:0e:b2:f6:c3:af:9c:c7:3a:74:9d:77:0f:8f:98:f4:
         38:b0:5e:d3:82:09:84:8f:80:27:3b:e0:81:9a:1c:2c:f8:37:
         d8:c1:fe:54:36:a3:e4:d4:cd:82:5a:37:b1:91:de:df:74:56:
         2b:e0:28:0e:74:78:79:1d:53:2e:c9:6f:0d:51:23:45:39:fa:
         a5:38:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 15:04:46 2024 by rpki-client on console-ams.rpki-client.org