Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/323632303a3133613a633030303a3a2f34302d3438203d3e203533333536.roa
File:                     323632303a3133613a633030303a3a2f34302d3438203d3e203533333536.roa (raw, json)
Hash identifier:          ChGNf06NDjXFJnMZWXj+C9z7aeNvS6vhkop/aEEC4Ks=
Subject key identifier:   A1:D6:30:3C:A2:FC:73:13:FA:2A:6E:85:29:39:5B:4B:64:DA:DC:6F
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       3E5B1479A076FBE6CF6BAAB530C5F1D10A7212E1
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/323632303a3133613a633030303a3a2f34302d3438203d3e203533333536.roa
Signing time:             Tue 16 Jul 2024 02:42:29 +0000
ROA not before:           Tue 16 Jul 2024 02:37:29 +0000
ROA not after:            Tue 15 Jul 2025 02:42:29 +0000
asID:                     53356
IP address blocks:        2620:13a:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5b:14:79:a0:76:fb:e6:cf:6b:aa:b5:30:c5:f1:d1:0a:72:12:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Jul 16 02:37:29 2024 GMT
            Not After : Jul 15 02:42:29 2025 GMT
        Subject: CN=A1D6303CA2FC7313FA2A6E8529395B4B64DADC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:42:80:a4:00:c8:e7:b3:24:5f:4d:cb:60:
                    c8:9d:8a:1a:76:5f:de:a3:08:b8:33:c6:9b:ba:4e:
                    fb:02:ae:d1:59:49:57:f1:13:6d:62:47:5a:40:82:
                    7e:db:db:0c:4d:5b:ab:ea:75:7c:49:f3:5a:9d:75:
                    f2:f8:5b:70:6f:2a:ce:64:0a:33:ea:57:2b:96:b1:
                    dc:80:64:fa:ad:38:5f:e6:f3:0e:63:37:c9:67:a2:
                    c0:c2:3c:45:86:cb:c6:c3:16:f8:53:61:c4:d3:36:
                    92:81:87:f1:22:95:f3:2d:76:89:92:5f:5d:93:96:
                    75:87:53:96:21:12:8f:e5:15:1f:bc:58:9a:59:b5:
                    55:a3:2f:63:ad:85:99:f5:b8:de:c3:9d:4f:68:0a:
                    d3:84:36:92:6d:38:a8:83:12:59:0d:1a:9b:dc:ab:
                    96:a4:32:a7:6b:7d:69:6c:9c:c9:59:bc:42:02:38:
                    6b:19:d8:2c:13:48:55:9a:e7:68:55:a4:79:2f:23:
                    e1:12:62:91:68:29:3f:e8:a1:39:97:d4:90:88:65:
                    be:d5:42:6f:4c:41:03:39:12:e3:4e:8d:c8:ae:2a:
                    ca:8c:95:7e:a4:0a:8e:51:52:24:8a:63:49:8c:1b:
                    03:0e:e4:ff:1b:26:60:34:c7:25:53:0e:53:a4:c4:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:30:3C:A2:FC:73:13:FA:2A:6E:85:29:39:5B:4B:64:DA:DC:6F
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/323632303a3133613a633030303a3a2f34302d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13a:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:9d:53:63:0f:55:6f:81:42:59:df:e5:c9:2f:8b:c6:c0:
         c2:83:50:d2:c7:71:8d:d1:79:93:a4:1f:0c:ba:f7:01:31:67:
         cb:1b:a8:b4:36:e7:d4:0f:1e:f4:92:b8:7d:ed:68:71:3f:f9:
         52:57:3f:bb:be:f7:bc:26:1f:c6:fe:e3:f3:97:d8:3d:5d:5c:
         71:c9:9e:9c:a2:bc:85:c3:9e:e6:80:c0:c2:83:57:37:94:c2:
         13:62:9f:06:b1:30:ea:3b:02:03:e7:d1:50:dc:82:5d:dc:e8:
         8b:34:2c:e6:a0:e3:0d:ac:ff:40:51:52:6b:27:e4:32:a7:02:
         6c:9c:37:53:73:d9:76:87:66:7a:76:b2:b1:29:02:17:11:ef:
         d5:f7:80:f8:00:cb:39:6e:b2:76:fa:a6:7b:ca:c7:7b:a8:8c:
         fc:36:40:76:bb:67:56:db:be:bd:43:f3:10:d1:37:4b:5e:da:
         b3:ec:9a:f6:ce:1e:4d:8d:c3:5e:1f:58:d3:46:52:c8:1f:02:
         ad:da:f0:a2:c1:d7:f9:bc:87:ef:d4:a9:2b:42:08:51:ef:62:
         38:cd:c1:73:56:ea:34:66:c5:af:02:08:77:53:89:61:de:12:
         cb:52:d7:c1:7f:dd:e1:4a:84:26:f4:0c:00:c5:7f:e0:1a:c3:
         46:98:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:05 2024 by rpki-client on console-ams.rpki-client.org