Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa
File:                     323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa (raw, json)
Hash identifier:          rTFCxQqv5GGjxejhku9jjEO9FK2iSSGHjTDSE4pJeO0=
Subject key identifier:   B7:03:9B:C5:28:37:64:CA:03:C4:72:04:72:E9:84:B5:5E:D0:E7:EF
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       14A4F800535201C89B06C26977E0A3238C421CED
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa
Signing time:             Mon 04 Nov 2024 00:28:47 +0000
ROA not before:           Mon 04 Nov 2024 00:23:47 +0000
ROA not after:            Mon 03 Nov 2025 00:28:47 +0000
asID:                     53356
IP address blocks:        2602:fe13:ff0::/44 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a4:f8:00:53:52:01:c8:9b:06:c2:69:77:e0:a3:23:8c:42:1c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Nov  4 00:23:47 2024 GMT
            Not After : Nov  3 00:28:47 2025 GMT
        Subject: CN=B7039BC5283764CA03C4720472E984B55ED0E7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:f3:6f:64:10:af:57:dc:63:c0:8d:cb:73:
                    80:44:46:37:19:c9:26:d2:99:16:c3:18:2d:09:be:
                    c8:57:ea:d2:7f:80:c4:e9:c2:55:d1:35:91:d9:ac:
                    d5:09:7c:a7:fc:7b:bd:cc:73:18:5e:df:b2:27:53:
                    2c:28:98:98:cc:d6:fe:84:c4:9c:54:8d:71:82:b5:
                    89:2a:9e:fc:14:3b:75:eb:aa:6d:45:e7:e3:f4:68:
                    69:dc:04:3e:09:ef:c4:da:a6:90:c5:5a:8e:e0:4c:
                    ee:d4:a9:31:9b:43:3f:ec:dc:69:74:bc:6f:4d:88:
                    21:4e:76:86:93:47:fe:fe:9a:da:6e:34:45:f6:0c:
                    7e:b2:e0:f1:84:15:f7:6e:70:e3:e8:9f:42:0f:84:
                    98:09:4a:57:8d:5d:db:84:85:cf:4e:96:a8:c3:96:
                    69:ae:c8:8c:78:05:57:35:c2:ae:2c:da:79:12:9b:
                    a3:ad:7a:0d:9b:78:8f:42:fa:b8:0a:e7:e3:07:97:
                    18:56:dd:52:ac:58:ff:14:50:aa:8c:55:ef:0e:01:
                    ee:03:8f:19:c3:71:b9:98:68:b2:f7:9a:2b:f4:7d:
                    ab:a6:0a:17:46:f2:a3:6b:f0:06:3e:ab:b4:ee:1d:
                    68:6c:31:a6:48:d7:af:60:45:0a:59:29:d9:63:81:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:03:9B:C5:28:37:64:CA:03:C4:72:04:72:E9:84:B5:5E:D0:E7:EF
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         87:53:94:5f:59:b5:9f:ad:d6:79:6a:66:c4:38:dc:21:3c:31:
         50:6a:82:76:20:ef:44:b9:b5:be:01:c4:6b:8e:82:74:39:e6:
         49:c1:34:1d:5b:ff:ef:fe:10:be:2a:f3:7c:40:e6:08:3b:1d:
         d7:c7:5c:1b:6f:33:ab:3f:ce:d3:58:a0:a6:00:3d:cf:14:ec:
         e8:53:9d:f8:82:80:1f:44:e9:22:1a:a4:c3:b5:f9:c5:74:c2:
         18:b8:4e:ad:68:7e:5a:76:0f:c6:08:c2:da:eb:ec:d2:8f:52:
         75:f8:dc:96:56:04:0e:6c:06:c5:ee:2c:58:65:c2:73:28:6a:
         be:83:86:a3:d8:d4:b3:15:a4:31:d8:77:53:88:2b:53:e2:28:
         e4:79:cc:05:74:e1:34:50:19:07:34:cd:4f:77:17:54:63:d8:
         a8:f6:a0:48:80:95:c6:6f:a0:bb:ad:45:0b:32:dd:77:b1:0d:
         4e:c8:b2:5e:d4:15:d3:5a:87:4a:55:e1:cc:5f:ed:28:8f:86:
         d6:b7:17:59:a6:8f:29:63:4d:35:35:5c:66:10:ab:d5:3d:50:
         22:c9:c4:be:86:fd:8d:cc:61:88:72:85:60:be:83:85:94:07:
         32:3d:90:a2:e7:f6:d6:51:3e:7e:9c:cf:97:b7:15:ae:95:36:
         7c:35:86:b1
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUFKT4AFNSAcibBsJpd+CjI4xCHO0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjQxMTA0MDAyMzQ3WhcNMjUxMTAzMDAyODQ3
WjAzMTEwLwYDVQQDEyhCNzAzOUJDNTI4Mzc2NENBMDNDNDcyMDQ3MkU5ODRCNTVF
RDBFN0VGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBnzb2QQr1fc
Y8CNy3OAREY3Gckm0pkWwxgtCb7IV+rSf4DE6cJV0TWR2azVCXyn/Hu9zHMYXt+y
J1MsKJiYzNb+hMScVI1xgrWJKp78FDt166ptRefj9Ghp3AQ+Ce/E2qaQxVqO4Ezu
1Kkxm0M/7NxpdLxvTYghTnaGk0f+/prabjRF9gx+suDxhBX3bnDj6J9CD4SYCUpX
jV3bhIXPTpaow5ZprsiMeAVXNcKuLNp5EpujrXoNm3iPQvq4CufjB5cYVt1SrFj/
FFCqjFXvDgHuA48Zw3G5mGiy95or9H2rpgoXRvKja/AGPqu07h1obDGmSNevYEUK
WSnZY4EQUwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFLcDm8UoN2TKA8RyBHLphLVe
0OfvMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhNjY2NjMwM2Ez
YTJmMzQzNDJkMzQzNTIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/hMP
8DANBgkqhkiG9w0BAQsFAAOCAQEAh1OUX1m1n63WeWpmxDjcITwxUGqCdiDvRLm1
vgHEa46CdDnmScE0HVv/7/4QvirzfEDmCDsd18dcG28zqz/O01igpgA9zxTs6FOd
+IKAH0TpIhqkw7X5xXTCGLhOrWh+WnYPxgjC2uvs0o9SdfjcllYEDmwGxe4sWGXC
cyhqvoOGo9jUsxWkMdh3U4grU+Io5HnMBXThNFAZBzTNT3cXVGPYqPagSICVxm+g
u61FCzLdd7ENTsiyXtQV01qHSlXhzF/tKI+G1rcXWaaPKWNNNTVcZhCr1T1QIsnE
vob9jcxhiHKFYL6DhZQHMj2Qouf21lE+fpzPl7cVrpU2fDWGsQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org