Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209864.roa
File:                     AS209864.roa (raw, json)
Hash identifier:          gS4+PSHLAJjVTFRFtuxNLG5nmUqj+NONHpW+5j7cv/E=
Subject key identifier:   B9:79:EB:1C:31:43:71:6C:2D:AC:92:0D:11:F2:C6:26:5D:9F:CA:84
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5B27CD9DBD38CA529BF742F99F20BA076ACD1775
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209864.roa
Signing time:             Tue 17 Jun 2025 03:15:00 +0000
ROA not before:           Tue 17 Jun 2025 03:10:00 +0000
ROA not after:            Tue 16 Jun 2026 03:15:00 +0000
asID:                     209864
IP address blocks:        2602:fed2:7101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 05:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:27:cd:9d:bd:38:ca:52:9b:f7:42:f9:9f:20:ba:07:6a:cd:17:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 17 03:10:00 2025 GMT
            Not After : Jun 16 03:15:00 2026 GMT
        Subject: CN=B979EB1C3143716C2DAC920D11F2C6265D9FCA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:72:b7:df:f4:a4:45:f6:16:2e:55:c9:8a:
                    b1:6d:98:b9:13:df:75:21:f4:1e:7c:2a:77:d1:9f:
                    d0:9c:14:32:19:2d:e1:7e:09:0e:fe:b7:79:c8:fa:
                    89:3d:19:06:06:13:1f:30:42:64:18:ab:ac:30:0e:
                    24:00:62:17:a1:17:18:0b:bc:07:76:1b:c1:39:b0:
                    6a:f1:cb:45:66:24:4e:85:6a:a6:e1:b3:ad:80:8a:
                    bd:44:60:aa:eb:9c:fc:df:8e:9f:ef:6b:95:da:66:
                    e9:73:fe:36:cb:d9:c4:df:75:8d:c2:79:c4:c7:a1:
                    44:be:e7:2a:90:55:92:24:2c:0b:d6:65:7a:3a:01:
                    bb:bf:77:95:c0:34:39:c6:19:4a:f0:75:6b:e9:d4:
                    9f:51:89:17:d2:d6:0e:f1:ad:d8:35:02:fb:ab:00:
                    cc:da:dc:e3:93:3a:33:78:0d:ad:21:b3:ae:c1:15:
                    70:2f:c8:fa:b3:35:d7:f9:89:af:83:74:54:75:f7:
                    c3:97:6a:f2:16:cb:9f:6e:2e:ab:11:2c:07:03:25:
                    5d:2a:71:c7:29:b5:ea:7f:6e:8d:17:d5:e5:8a:56:
                    52:2d:8c:5b:f6:87:b2:76:5f:da:63:25:74:36:8a:
                    d2:e9:28:30:ed:25:8e:d1:06:6f:d2:65:fb:3f:a8:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:79:EB:1C:31:43:71:6C:2D:AC:92:0D:11:F2:C6:26:5D:9F:CA:84
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS209864.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7101::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:bf:cc:01:cb:dc:9b:f7:a7:34:84:92:0a:9e:c8:40:8b:00:
         91:60:26:f7:cc:92:4f:ca:fa:c1:64:26:d7:18:d9:8e:85:4c:
         80:ad:a4:64:4e:b8:45:e6:7a:1e:db:20:eb:b5:cc:26:2b:e9:
         2b:bf:ec:a3:df:f2:21:af:3f:af:d9:71:9d:81:60:5e:83:82:
         a5:14:45:09:27:49:35:65:da:42:b8:01:5f:ef:06:56:10:ba:
         28:5c:b6:42:86:3d:1a:b4:23:d0:cd:e1:f1:9c:e3:04:9c:55:
         d6:17:12:51:ff:e9:17:6f:5f:dd:51:7f:59:dd:de:96:79:9b:
         a1:0b:09:5c:de:04:61:d5:2c:c9:0a:2c:68:33:ae:1f:d7:6e:
         f4:4b:a8:c3:32:a0:c7:f3:16:1d:6a:1d:ae:df:a8:8d:56:db:
         8f:3c:6d:39:11:28:e5:25:67:f9:db:d9:49:1f:17:14:44:fc:
         b1:21:5c:ba:19:f6:24:76:f4:c1:7a:82:b0:1e:1d:81:96:32:
         4d:28:35:7c:2c:26:e8:64:7b:72:8b:26:46:6f:4a:06:b4:75:
         0e:1d:41:8a:7d:a7:f9:4b:ee:67:9a:20:b1:d6:27:f3:2c:87:
         eb:f2:18:31:80:51:e8:b7:f0:ad:1d:cc:0a:d3:b0:7a:44:d2:
         76:ed:cb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:15:07 2025 by rpki-client