Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa
File:                     323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa (raw, json)
Hash identifier:          jKYdgY/Y+aXXv29b2p4WFINb9D99HyTgSRLv1Kc0+zU=
Subject key identifier:   5B:44:1E:D5:95:24:F0:61:5D:F0:7A:75:D4:AC:FD:63:C5:BB:C6:3F
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       751911307B9F002471EAE6D630AC24FF17C9F5CC
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa
Signing time:             Mon 04 Nov 2024 00:28:47 +0000
ROA not before:           Mon 04 Nov 2024 00:23:47 +0000
ROA not after:            Mon 03 Nov 2025 00:28:47 +0000
asID:                     396503
IP address blocks:        2602:fe13:ff0::/44 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:19:11:30:7b:9f:00:24:71:ea:e6:d6:30:ac:24:ff:17:c9:f5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Nov  4 00:23:47 2024 GMT
            Not After : Nov  3 00:28:47 2025 GMT
        Subject: CN=5B441ED59524F0615DF07A75D4ACFD63C5BBC63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:41:2e:03:eb:43:4f:5e:78:22:0a:fe:c6:
                    ea:3a:8d:a3:bf:79:55:d3:24:cc:7e:f1:33:1f:d4:
                    4c:27:7b:fa:e8:28:c4:73:24:61:bf:e3:ec:5e:fc:
                    81:94:b5:a7:71:70:17:23:83:e1:35:b9:9b:cd:db:
                    97:7f:a1:14:f1:fd:6a:9d:6f:bf:0d:f3:a6:28:e0:
                    d9:60:cd:85:83:4e:e1:5b:10:4e:11:6d:57:55:f2:
                    7b:5f:fe:3f:bb:40:46:33:07:1f:65:f3:27:e2:8f:
                    96:9a:f0:81:0e:9b:5c:69:d6:a3:dc:21:e7:79:b3:
                    ce:6a:02:3d:ed:64:06:64:b0:57:ad:94:4f:5d:80:
                    ce:5a:9e:5b:de:5f:d6:a0:3b:77:46:8d:51:2f:5e:
                    69:56:91:ee:5a:d2:c5:24:32:91:24:3a:e8:83:20:
                    26:99:58:85:28:a3:84:21:58:18:b1:30:c7:79:52:
                    01:28:40:be:57:8e:89:da:3d:c3:82:7d:1f:de:48:
                    d0:8d:48:ce:37:f5:f2:03:91:8e:1e:ce:37:eb:e0:
                    b2:bc:ff:bd:f0:4d:0b:4a:77:bb:8a:32:67:ff:b1:
                    37:31:49:3f:2e:0e:fd:1d:88:42:b5:db:00:01:3a:
                    c8:a3:36:a2:a7:9a:c1:eb:ba:d1:5c:41:56:e6:0e:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:44:1E:D5:95:24:F0:61:5D:F0:7A:75:D4:AC:FD:63:C5:BB:C6:3F
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:59:dd:c5:99:d7:82:22:cf:ce:3a:e5:38:25:26:04:1c:f4:
         1b:73:42:91:d7:ae:6d:93:1d:aa:89:d0:08:25:f9:b9:75:49:
         22:8f:9e:e5:53:9b:f0:44:8e:b9:fd:77:0f:5c:e8:a4:2f:34:
         88:6f:1b:2b:cc:d2:08:86:03:70:69:96:46:76:3a:76:c5:2e:
         18:b6:d3:cf:7d:1a:20:ba:ec:35:16:61:29:c4:0a:aa:37:8c:
         49:08:41:2a:52:39:03:1c:a4:66:e8:86:72:05:c8:55:4b:f4:
         cf:97:10:b5:e6:a8:3c:9e:69:03:5f:67:75:39:ed:bc:64:37:
         d8:7c:82:1b:8f:dc:18:9e:b1:28:4f:93:9e:0e:f9:ac:71:4c:
         48:1f:f0:a7:d8:7c:8e:9c:91:e8:f1:71:3a:3b:6d:f0:f1:7b:
         71:7a:9d:ff:aa:0d:79:b7:ac:71:40:11:0b:2b:f4:43:09:5d:
         3d:5c:6f:cf:a8:38:41:f3:03:fa:95:5f:16:ed:70:d5:b1:4f:
         2b:a6:ef:76:fc:66:25:33:b8:35:a0:c3:e5:2d:15:66:c7:e2:
         5a:85:ec:43:2e:3f:a8:89:48:8c:17:09:76:22:70:31:ef:e2:
         fa:32:db:23:a1:c8:b8:13:d7:f7:9f:50:1d:cb:3a:82:03:2e:
         7f:c1:3e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:42 2024 by rpki-client on console-ams.rpki-client.org