Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3a2f33362d3438203d3e203533333536.roa
File:                     323630323a666531333a3a2f33362d3438203d3e203533333536.roa (raw, json)
Hash identifier:          9AupEzbNRvdgpFA1iESXy1M7zGk9/f5+spnZxvUX5EA=
Subject key identifier:   C4:FB:9C:13:80:83:60:DF:1F:1E:39:50:0D:4A:B8:F1:6F:D9:1B:18
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       66CB94194EA5BF5443B36117FE028BAC55CF1671
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3a2f33362d3438203d3e203533333536.roa
Signing time:             Thu 21 Dec 2023 19:59:35 +0000
ROA not before:           Thu 21 Dec 2023 19:54:35 +0000
ROA not after:            Thu 19 Dec 2024 19:59:35 +0000
asID:                     53356
IP address blocks:        2602:fe13::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 04:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cb:94:19:4e:a5:bf:54:43:b3:61:17:fe:02:8b:ac:55:cf:16:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Dec 21 19:54:35 2023 GMT
            Not After : Dec 19 19:59:35 2024 GMT
        Subject: CN=C4FB9C13808360DF1F1E39500D4AB8F16FD91B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:d2:70:73:62:32:b6:4a:bf:7c:93:ff:35:
                    aa:eb:fb:c1:e1:6f:45:b0:b9:94:88:ca:ee:6b:bf:
                    66:c8:07:fb:27:68:83:2a:3c:81:ba:b9:24:fe:2a:
                    8a:bc:4b:ef:28:8a:31:5a:45:88:7d:f4:2a:75:53:
                    05:9b:ea:ca:da:88:63:d3:3a:34:b6:f1:a6:49:f7:
                    6b:b1:16:03:7e:9a:5e:e1:30:a6:40:50:e5:13:1a:
                    f3:f3:b8:6f:9e:b7:1b:32:38:7c:44:04:51:65:d8:
                    1a:82:7e:34:81:4c:3f:3f:62:f3:9b:07:52:19:62:
                    1e:d0:18:d2:8f:d3:29:a3:fb:0e:d0:d2:cd:fe:5a:
                    be:55:5c:2b:df:68:79:26:7e:2d:15:17:e4:a8:2d:
                    dc:71:c0:38:55:c3:84:d2:ae:f8:f4:99:1d:16:fb:
                    be:bf:1b:51:2c:ed:b5:1d:a8:83:c8:87:34:b9:de:
                    bf:d1:45:60:bf:5a:27:e1:84:f7:8e:3c:d9:c7:b8:
                    9a:f4:a2:69:2e:aa:82:74:66:61:47:02:38:4d:9a:
                    e2:44:51:a8:d2:86:62:da:97:c8:a3:c4:09:b2:ea:
                    59:b5:89:bd:de:5f:4f:c8:bb:b8:ec:d7:8b:c7:22:
                    b4:45:38:63:38:06:91:40:e5:69:0d:20:19:e0:5e:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FB:9C:13:80:83:60:DF:1F:1E:39:50:0D:4A:B8:F1:6F:D9:1B:18
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3a2f33362d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:3c:6e:a7:c1:83:9a:b4:59:9d:49:dd:ce:be:46:a7:b0:4a:
         04:a0:99:ec:2b:89:51:21:99:ea:12:91:8d:5c:ff:4f:00:bd:
         b0:ca:69:48:fe:47:08:af:e6:ee:ae:25:1c:95:0c:22:cc:65:
         1f:1d:48:7b:15:0d:ed:bc:11:7c:30:81:f3:02:96:40:ea:31:
         8d:46:b7:bd:af:f8:99:71:85:21:b2:d4:35:94:d6:8c:0a:74:
         d7:22:77:51:36:52:8f:81:43:29:ef:62:d0:9b:fc:0e:01:51:
         56:7f:55:88:b1:87:c4:01:58:29:cc:e5:59:f4:0e:21:83:d4:
         28:4b:62:c6:d0:6c:7a:71:df:ce:1a:3e:19:a8:ec:40:bb:6d:
         ac:aa:86:b8:cd:47:88:93:3c:dd:98:8a:31:72:47:87:33:6c:
         3e:f2:3e:8f:e9:6f:e5:46:20:29:ec:c1:10:20:1d:6a:86:e9:
         ab:3c:8f:69:78:ca:2b:50:fd:8d:81:2d:d3:4f:29:1e:b1:3c:
         11:e0:3a:a1:ad:0b:d3:54:fb:db:87:6c:35:91:71:57:6b:15:
         4a:cd:a0:5f:30:a7:62:12:53:22:f7:36:1b:01:2b:ed:21:e9:
         64:ae:e1:ad:79:60:01:a7:0d:ce:f3:0f:1a:8e:eb:5a:30:a1:
         86:36:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:38:35 2024 by rpki-client on console-ams.rpki-client.org