Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa
File:                     323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa (raw, json)
Hash identifier:          cRI/KtESsMCItjsFdq++yUeT87N8vCPidODZLpR3Jjw=
Subject key identifier:   1E:70:5B:F6:B8:BC:00:DF:4D:75:D5:B4:D4:EC:A5:7B:BB:74:48:76
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       373B6560ACFA8CF3FCFF691773C6717367E0469A
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa
Signing time:             Sun 03 Dec 2023 23:52:23 +0000
ROA not before:           Sun 03 Dec 2023 23:47:23 +0000
ROA not after:            Sun 01 Dec 2024 23:52:23 +0000
asID:                     396503
IP address blocks:        2602:fe13:ff0::/44 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 20:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3b:65:60:ac:fa:8c:f3:fc:ff:69:17:73:c6:71:73:67:e0:46:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Dec  3 23:47:23 2023 GMT
            Not After : Dec  1 23:52:23 2024 GMT
        Subject: CN=1E705BF6B8BC00DF4D75D5B4D4ECA57BBB744876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:cf:40:56:93:ce:23:88:52:be:18:26:ef:
                    e9:b9:9d:33:13:d7:92:1e:11:b7:c1:c6:f3:d0:f8:
                    6d:52:96:33:3c:a1:1c:85:37:f1:f8:9a:34:41:5a:
                    b2:bb:12:27:d0:51:a8:f0:23:17:f9:dc:2b:8b:e8:
                    bb:7f:dc:3e:cc:11:b8:9c:21:18:7c:b6:ec:eb:a9:
                    25:f0:4b:8a:95:84:38:17:be:d3:dc:de:7d:7f:a3:
                    24:e0:d8:0c:49:10:d5:de:d8:ad:85:7b:26:4f:8e:
                    15:60:4f:d4:e4:ca:7a:1f:15:22:35:27:7a:7b:d8:
                    40:16:ab:ca:d9:7c:d6:b7:0f:08:c8:30:63:d8:7f:
                    b9:45:2c:24:0d:38:f4:af:3f:82:5b:86:e7:6f:a2:
                    3c:8a:88:f0:d4:ed:c1:04:3d:43:01:0a:df:e1:fb:
                    10:a1:8e:1a:7e:df:47:da:6e:70:95:88:37:df:4e:
                    0d:03:4d:93:ed:94:3f:57:21:4e:de:26:99:dc:b2:
                    30:c1:09:29:7f:c6:00:92:fc:7d:64:9e:6d:9b:a7:
                    50:8c:b3:95:90:48:53:c2:48:84:35:54:4d:19:0f:
                    76:dd:29:6a:62:8b:ff:94:7e:f9:e8:91:de:39:0e:
                    4a:10:cc:eb:49:64:50:b9:14:81:a6:2e:c6:ee:1b:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:5B:F6:B8:BC:00:DF:4D:75:D5:B4:D4:EC:A5:7B:BB:74:48:76
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:6a:b0:d9:98:6e:a9:58:7e:d7:14:29:64:ad:b0:77:13:89:
         22:41:e0:07:27:ac:1e:aa:69:f8:dd:d7:30:0e:0c:96:2b:41:
         dc:46:d6:30:90:28:87:c5:08:ba:4e:29:f1:2c:d9:34:96:d7:
         a6:d3:e0:7b:f3:c6:6f:c8:cd:56:38:21:2d:9e:17:2b:b8:ac:
         b9:28:f1:2d:40:b9:49:95:b1:0d:4f:3f:9e:cc:b7:b9:ba:b1:
         d3:84:b7:55:6c:cd:b8:c5:95:c3:32:d8:84:88:c4:2a:1d:53:
         55:60:1d:07:50:af:b9:b2:d8:bf:ab:1d:f3:72:b6:49:d1:ad:
         29:82:e7:27:15:32:2b:d7:83:ca:26:e8:d8:a0:0f:94:6b:4e:
         18:8d:db:f8:61:27:7f:c5:9e:a8:ec:4c:13:ea:c4:e4:6d:6d:
         5c:b5:f2:0c:5d:2f:35:03:c1:c1:c5:8b:7e:eb:fa:63:56:f8:
         66:d3:f6:73:f7:e8:dd:89:ab:ed:b4:3b:d0:cf:67:ff:cd:1d:
         59:48:01:aa:97:4d:70:78:01:8b:87:81:30:a0:7b:ba:93:f9:
         76:5d:26:56:ee:e6:aa:2e:e5:c3:18:95:e9:9f:2c:b5:90:8f:
         05:87:c8:73:74:00:81:45:f6:7e:04:7d:45:12:2c:ba:42:62:
         93:aa:8f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:26:44 2024 by rpki-client on console-fra.rpki-client.org