Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          XWgG7RTU2MRN5WNYx1wMym5AKKzAk2RkKuYjQ23jK8w=
Subject key identifier:   70:94:76:8E:67:D6:BD:BF:F8:A3:10:52:1C:4E:8D:1A:4E:8B:C7:AC
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       3009023D947848891F1A33093BD07838C2ECB546
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa
Signing time:             Tue 19 Sep 2023 19:15:08 +0000
ROA not before:           Tue 19 Sep 2023 19:10:08 +0000
ROA not after:            Tue 17 Sep 2024 19:15:08 +0000
asID:                     53356
IP address blocks:        2602:fe13:fc5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 16:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:09:02:3d:94:78:48:89:1f:1a:33:09:3b:d0:78:38:c2:ec:b5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Sep 19 19:10:08 2023 GMT
            Not After : Sep 17 19:15:08 2024 GMT
        Subject: CN=7094768E67D6BDBFF8A310521C4E8D1A4E8BC7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:26:f9:0a:9f:f8:ee:08:13:e5:28:f7:b4:
                    59:eb:2e:aa:ca:bd:ba:35:a8:2d:ab:35:2e:f5:ed:
                    d1:bf:f3:1d:62:e7:74:c9:db:51:6d:24:66:be:59:
                    39:ab:16:5f:dd:f8:65:ac:4e:04:b2:f4:25:ef:cd:
                    09:20:ad:ce:65:3f:86:d8:b1:ac:ee:6a:71:9c:dc:
                    b6:a8:bc:45:8f:67:8e:3f:32:65:8b:d3:34:0d:64:
                    7a:4c:9c:b4:43:29:ec:0f:42:7c:85:29:17:78:e5:
                    42:6b:40:4a:8d:03:f1:d0:a5:ff:1b:41:4f:1c:4a:
                    62:84:79:38:35:88:3b:6f:e8:b6:d4:a4:de:ea:a2:
                    f0:11:9f:97:cb:1d:20:3c:a2:ec:0c:a3:60:a9:cb:
                    2c:d0:54:21:13:c6:03:97:b3:02:5b:56:a6:bc:e2:
                    25:63:2c:25:ce:6d:56:ea:f1:db:3a:5d:d5:21:d2:
                    76:d6:52:10:bf:d9:ef:89:d4:07:b4:40:f7:08:35:
                    a1:b9:8a:e4:b2:d9:f6:50:38:ae:f1:04:7c:24:30:
                    98:4a:25:0f:07:95:16:a7:5c:fd:a8:2d:5d:2a:79:
                    b5:2e:2e:37:83:1e:84:d1:00:c1:86:1a:e9:92:05:
                    7a:f6:7f:d9:20:09:20:40:8d:52:42:35:23:2a:2b:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:94:76:8E:67:D6:BD:BF:F8:A3:10:52:1C:4E:8D:1A:4E:8B:C7:AC
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:fc5::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:70:70:c9:1c:47:08:bb:39:99:a0:09:0c:3f:e8:62:4a:
         97:db:fe:2e:9c:fd:82:9e:5b:fc:1e:c3:fc:3a:4c:0b:b1:90:
         7e:0d:01:3a:52:d8:cb:7a:e6:1b:cd:52:e4:ba:25:4c:36:48:
         8b:6a:61:a5:e4:14:b3:69:13:40:7a:54:0d:a7:12:ae:05:e2:
         c5:c0:05:9e:08:c8:0a:ef:19:2f:dd:e8:ff:0a:2f:8e:e4:05:
         11:76:4d:5d:a1:40:98:71:f4:b1:8d:22:2a:cc:5c:34:83:c6:
         02:58:c1:56:ca:e8:ba:9a:38:4a:dc:c6:db:82:b5:27:6f:b2:
         0d:06:35:e6:53:22:11:74:c0:c3:76:c7:88:24:8a:23:1c:7a:
         a4:a9:58:db:92:b4:b1:a5:4b:fc:0b:88:5a:5c:85:2c:76:59:
         1a:cc:24:ef:a6:c0:f9:64:bb:74:d2:6d:93:05:8c:47:54:ec:
         48:0f:d6:2c:d1:14:f9:d4:03:ba:59:d7:44:40:a3:5e:b3:48:
         dc:e1:74:2d:4a:5e:b5:93:23:4c:f6:ea:ea:ef:86:21:3a:77:
         f7:f7:26:b6:92:6a:69:af:9f:e1:c8:47:eb:6b:26:64:1a:3f:
         7a:dc:03:27:75:63:d5:bc:ce:e8:a1:78:f8:8c:1d:f5:c1:2e:
         16:74:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:05:18 2024 by rpki-client on console-fra.rpki-client.org