Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3a2f33362d3438203d3e203533333536.roa
File:                     323630323a666531333a3a2f33362d3438203d3e203533333536.roa (raw, json)
Hash identifier:          9RRXeoCgmX0jm2NHx2WQRShsnrEL6yxsiQ4hI7UUcUs=
Subject key identifier:   65:94:AE:C0:C2:F3:AD:8A:DE:A0:E7:99:D5:AC:18:78:8D:09:C7:45
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       7787FBC6F7923F34856E50EF24658CCFDE42EFF0
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3a2f33362d3438203d3e203533333536.roa
Signing time:             Thu 21 Nov 2024 20:37:07 +0000
ROA not before:           Thu 21 Nov 2024 20:32:07 +0000
ROA not after:            Thu 20 Nov 2025 20:37:07 +0000
asID:                     53356
IP address blocks:        2602:fe13::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:87:fb:c6:f7:92:3f:34:85:6e:50:ef:24:65:8c:cf:de:42:ef:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Nov 21 20:32:07 2024 GMT
            Not After : Nov 20 20:37:07 2025 GMT
        Subject: CN=6594AEC0C2F3AD8ADEA0E799D5AC18788D09C745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:e1:9c:f2:96:d8:7a:aa:1d:9b:3a:bf:4d:
                    d1:14:79:36:d1:7b:89:15:bb:11:c6:5d:db:f4:94:
                    83:1c:c1:bb:b8:60:46:ef:b6:9d:e2:d2:f9:89:94:
                    ed:63:8b:d5:a6:6d:b2:a8:f6:3d:92:af:8c:8a:12:
                    84:57:8f:7e:e0:c7:4b:85:c3:65:df:29:9e:5b:6e:
                    8e:fa:2a:74:b1:df:14:3f:58:2d:8a:3b:7c:2d:18:
                    7e:a6:b0:8e:76:72:f2:82:c9:dd:49:93:8b:41:c3:
                    d0:8d:a9:d0:c4:7d:6f:d2:77:fb:30:ad:b2:7f:38:
                    d9:85:54:f7:cd:1f:4b:30:15:e1:96:85:39:0d:03:
                    f8:eb:b8:d9:82:32:59:17:ae:ff:4c:6e:f9:02:9c:
                    2a:3f:f4:14:2d:00:1c:4d:43:84:4c:d4:78:eb:c6:
                    c0:f6:c4:cd:c3:dd:8b:b6:6f:76:b1:0b:5d:e4:35:
                    90:80:a3:94:72:98:84:12:fa:f2:b5:e5:c6:6a:14:
                    7d:31:99:49:17:6b:28:99:80:c1:45:fc:4d:08:f9:
                    26:08:c0:5f:d7:0e:8a:fc:b7:db:24:a0:43:eb:01:
                    5c:16:77:5f:24:f8:10:5a:2f:74:08:54:7d:8b:a6:
                    d4:59:71:80:33:7f:21:0c:8a:3f:86:40:b0:11:a8:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:94:AE:C0:C2:F3:AD:8A:DE:A0:E7:99:D5:AC:18:78:8D:09:C7:45
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3a2f33362d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13::/36

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:88:59:ef:48:1b:e9:f5:d9:b3:d4:b1:b3:bd:86:68:a8:
         86:a8:08:7f:70:66:48:42:89:ec:c4:35:06:fd:3c:fb:02:48:
         45:f6:b4:45:ad:26:67:4f:a1:c6:35:b7:c5:ac:49:81:fe:61:
         14:e9:a1:54:a8:47:6e:1e:ec:14:0c:f7:4a:34:0d:98:2e:ca:
         26:49:42:03:5a:47:72:76:35:08:c6:2d:6a:03:97:df:56:28:
         1e:a7:c5:33:da:74:25:5e:ab:45:8d:e5:4b:82:2b:02:3b:96:
         61:38:34:5d:7e:30:41:72:9a:da:24:ce:2a:9f:52:18:c0:b4:
         68:58:4b:63:37:57:fb:ce:50:03:7f:cc:8c:d2:a9:e7:4c:49:
         0d:24:aa:f5:91:2c:d1:47:dd:4d:9a:89:f6:2b:6f:09:e1:f0:
         1d:c2:5e:21:e2:fa:09:2d:ea:16:6f:0e:ae:e8:22:89:d1:56:
         88:3e:b9:0c:bf:95:8e:2d:c8:e9:9a:94:f8:98:c3:c2:1e:dc:
         ab:3d:09:05:0e:a8:88:e7:a3:55:73:0e:f4:f5:92:8f:9b:30:
         2a:5b:5e:e2:bc:1f:5e:b2:92:28:6b:40:75:99:a4:41:c8:47:
         b7:ea:95:3a:eb:ef:23:74:7b:76:8f:8e:77:af:81:64:ef:0f:
         23:e6:78:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org