Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa
File:                     323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa (raw, json)
Hash identifier:          2lKflUZyNYLgugil5O0C7InvzGS/k4+taPBnOLYjNUc=
Subject key identifier:   DA:DD:8A:CA:F8:1A:CD:A3:58:54:CB:4A:04:ED:E5:14:D7:29:B8:1E
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       1AF0557E171B6621D862DFA43A238DFABEE4B067
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa
Signing time:             Tue 16 Jul 2024 02:42:29 +0000
ROA not before:           Tue 16 Jul 2024 02:37:29 +0000
ROA not after:            Tue 15 Jul 2025 02:42:29 +0000
asID:                     53356
IP address blocks:        2602:fc1c:fa0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f0:55:7e:17:1b:66:21:d8:62:df:a4:3a:23:8d:fa:be:e4:b0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Jul 16 02:37:29 2024 GMT
            Not After : Jul 15 02:42:29 2025 GMT
        Subject: CN=DADD8ACAF81ACDA35854CB4A04EDE514D729B81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:12:df:69:ba:4c:85:3d:1e:59:73:80:47:db:
                    27:e6:40:6e:5c:e8:3a:ab:09:83:b3:87:e0:0c:95:
                    66:9b:20:94:bd:97:6f:02:14:e6:24:dc:1a:a2:b8:
                    81:5b:83:ec:af:94:48:ff:59:e0:e0:3d:e5:a1:80:
                    1b:07:8d:ea:85:ad:dc:fa:1b:6a:67:0a:82:e6:a8:
                    bd:f5:34:88:10:ee:e7:20:81:76:3e:e5:4a:fb:4f:
                    6b:44:b9:48:c9:cb:92:35:5f:7e:48:8e:63:32:f5:
                    03:f5:33:38:90:a9:45:ac:6a:73:ec:cc:84:17:81:
                    5d:34:ad:fe:6a:b9:9a:98:aa:8b:23:04:ac:57:50:
                    ee:0c:00:15:b0:01:70:ba:48:ec:36:a1:44:66:c1:
                    b0:7c:a4:7f:c2:c5:d1:42:1e:63:d2:78:b6:b5:b2:
                    3c:c4:6c:ab:4a:06:e1:09:c5:9c:8e:a0:b4:a4:42:
                    fe:e9:d6:cf:ee:e6:9d:10:25:39:fe:f0:c2:33:e2:
                    4e:9e:cd:59:0f:98:4d:2b:d6:65:4c:5e:79:a2:4a:
                    9a:04:96:d5:d4:aa:fd:96:79:9a:83:e0:10:cb:d1:
                    d1:78:93:d5:74:79:ff:fd:b5:47:c8:65:53:42:2c:
                    b8:a9:93:d4:53:7e:e7:48:90:d0:80:55:fc:c2:7e:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DD:8A:CA:F8:1A:CD:A3:58:54:CB:4A:04:ED:E5:14:D7:29:B8:1E
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc1c:fa0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:69:5a:90:9d:02:5e:8d:29:dc:ae:73:bf:04:39:bd:23:
         54:cb:7e:5e:b3:09:78:9c:c2:ad:ea:a5:f8:06:32:98:04:13:
         e4:ae:c0:8d:62:92:90:64:e3:c5:6b:84:0c:ae:1f:1a:b6:d1:
         30:46:fd:73:2d:81:5f:c0:ad:d0:8e:c9:ce:4d:76:12:82:e4:
         62:78:04:6b:82:4f:a3:4e:df:50:24:11:74:96:d5:f8:d1:9f:
         b4:ca:34:17:6d:d3:55:14:39:4a:80:d5:9a:25:8c:7e:5e:7b:
         9a:d7:41:a0:5e:bc:70:5b:fb:a6:17:08:7d:f1:d4:7e:03:a6:
         57:a4:ad:4b:27:08:8d:db:24:86:78:64:ba:88:26:fe:0e:b3:
         ab:4a:b3:ab:c2:22:8a:1c:34:9d:4f:c4:4d:af:53:9d:fd:16:
         0d:1f:b8:ce:cb:52:8e:02:cb:65:00:f8:ea:ff:28:d7:0b:9d:
         d1:53:03:42:b6:21:ca:46:93:4f:40:95:0d:71:a7:eb:57:fb:
         01:bf:f0:76:54:31:5d:68:b9:74:3e:ab:49:50:c0:bb:54:eb:
         30:83:e6:a2:0a:42:e2:46:03:34:90:1e:8f:d6:a9:86:3d:3c:
         7f:8f:0d:3d:90:93:28:d7:04:5d:ae:12:6a:01:b8:e9:4b:96:
         2a:09:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:05 2024 by rpki-client on console-ams.rpki-client.org