Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209650.roa
File:                     AS209650.roa (raw, json)
Hash identifier:          SAzK+Alk1CIdU9UoscD/nXXTwdTTCIKLvK/aebZZkV8=
Subject key identifier:   33:0E:91:5B:A4:08:21:AA:17:9A:F1:D1:79:57:68:E8:46:56:59:84
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       19355B9DAD21A748BCC9C5D6A2CAC1F94DF81B89
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209650.roa
Signing time:             Tue 17 Jun 2025 03:15:00 +0000
ROA not before:           Tue 17 Jun 2025 03:10:00 +0000
ROA not after:            Tue 16 Jun 2026 03:15:00 +0000
asID:                     209650
IP address blocks:        2602:fed2:7302::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 05:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:35:5b:9d:ad:21:a7:48:bc:c9:c5:d6:a2:ca:c1:f9:4d:f8:1b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 17 03:10:00 2025 GMT
            Not After : Jun 16 03:15:00 2026 GMT
        Subject: CN=330E915BA40821AA179AF1D1795768E846565984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:e8:0f:a6:16:9a:d9:f3:da:2c:f4:5c:3a:
                    d3:7c:69:8f:ae:06:42:b7:28:36:7f:28:6d:01:f4:
                    34:1e:ba:a3:25:f3:80:06:04:0f:29:71:90:9e:6c:
                    a2:b9:f3:7b:9e:9f:7a:7b:f1:69:2c:2a:77:a2:a1:
                    a6:80:3c:9f:f7:36:83:40:ea:88:9c:79:5e:c4:73:
                    99:07:07:df:f9:6a:2a:95:c5:4f:14:03:1d:80:f7:
                    78:c9:c7:68:fb:dc:dd:42:b9:9c:76:e5:61:03:38:
                    56:f1:0e:43:9f:15:1a:43:64:e0:8a:b2:0d:11:36:
                    14:58:20:74:24:72:31:ba:ce:13:e2:5d:e5:a1:fe:
                    cb:76:7e:36:98:e2:15:d6:c8:07:7e:44:69:10:fa:
                    60:69:61:f9:91:c3:91:32:4c:48:6d:a8:2b:2e:51:
                    41:e4:f4:22:8f:c9:5c:10:15:4b:69:03:b1:72:20:
                    55:4d:e5:8f:03:92:69:b5:8c:f5:10:44:2f:b1:1b:
                    75:7c:7c:55:de:05:9b:c8:67:db:cb:99:f1:f7:6e:
                    19:e7:37:c1:bd:79:b8:d8:c2:c0:75:86:e8:5b:22:
                    e4:02:d5:9b:47:7b:e4:e0:31:a2:dd:ab:c5:f8:99:
                    b7:58:73:0c:1d:fd:d8:99:ad:41:9b:ea:46:46:c3:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0E:91:5B:A4:08:21:AA:17:9A:F1:D1:79:57:68:E8:46:56:59:84
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7302::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:92:b3:f9:65:2a:aa:05:77:67:b3:17:01:8c:4d:ca:10:e1:
         b9:0d:ac:68:35:9c:62:ab:8f:18:9d:58:77:fe:0e:16:1e:d2:
         21:95:e9:6e:b5:3d:92:9d:be:cc:11:d1:c4:4a:6a:24:28:83:
         73:ba:6c:19:60:d1:71:43:0e:a9:aa:7a:e4:4a:98:3f:13:61:
         d6:37:19:ff:a6:50:42:0e:3e:2a:3f:d6:ee:6e:0f:a9:91:07:
         e5:19:94:61:a1:4a:53:fc:e3:fb:58:0e:b4:8f:9d:0e:ab:f5:
         a1:ea:a3:ce:d6:bc:89:39:72:fc:f8:38:84:53:25:82:6f:27:
         f1:55:d5:88:2a:31:22:2d:ee:fe:ce:f7:c5:d9:44:fb:05:21:
         cc:ba:32:43:d9:9f:df:d8:df:a1:3e:48:e5:5f:2a:1e:d0:5b:
         52:e8:b4:c8:3e:a5:89:a2:22:06:d8:ad:59:4a:63:a2:c6:dd:
         8d:b7:a3:b5:9c:9a:a4:82:b0:70:20:5b:12:d8:28:d2:d2:d0:
         a5:95:62:51:2f:8a:98:de:e9:e7:f3:c3:03:ce:e1:ad:6b:8e:
         af:e4:b9:5d:05:ba:8f:bd:70:ed:fc:eb:79:a5:ba:4b:28:77:
         da:b4:b2:e4:7b:6f:75:74:8c:a4:79:9b:0b:c4:ec:03:f8:bd:
         63:02:eb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:29:31 2025 by rpki-client