Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216030.roa
File:                     AS216030.roa (raw, json)
Hash identifier:          KZMOmDw7VbdvrragkggYi0MnR23nuQeSWS3ShFrLzvI=
Subject key identifier:   7B:94:04:C8:6B:21:2C:CC:78:8F:A6:EA:5E:85:9E:9D:BA:D2:4A:54
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       76B61CEFFA82472107EE1B8079626DDA897EF83E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216030.roa
Signing time:             Tue 07 Oct 2025 03:09:53 +0000
ROA not before:           Tue 07 Oct 2025 03:04:53 +0000
ROA not after:            Tue 06 Oct 2026 03:09:53 +0000
asID:                     216030
IP address blocks:        2602:fed2:7130::/48 maxlen: 48
                          2602:fed2:7131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b6:1c:ef:fa:82:47:21:07:ee:1b:80:79:62:6d:da:89:7e:f8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct  7 03:04:53 2025 GMT
            Not After : Oct  6 03:09:53 2026 GMT
        Subject: CN=7B9404C86B212CCC788FA6EA5E859E9DBAD24A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c9:69:13:3b:15:ea:f9:7f:17:22:80:e9:f3:
                    7f:55:29:51:bd:65:1b:3b:7e:52:37:f7:31:7c:0c:
                    6a:82:fc:07:f0:f1:0a:97:5e:39:51:41:2a:33:97:
                    3b:84:4c:01:21:76:11:b5:32:ea:6b:84:18:f4:e9:
                    2c:6e:d1:d7:d9:29:00:3a:98:74:3b:e7:17:73:af:
                    37:0a:b4:81:f2:af:19:b8:4b:7d:65:08:d8:3c:5e:
                    06:9f:3d:9d:92:a1:96:01:5a:97:75:80:c5:0c:8e:
                    62:6e:c0:bc:2d:db:5e:53:e9:c1:ca:cc:1e:c5:c8:
                    c3:7a:32:be:5f:db:71:24:04:22:75:7a:c7:1f:a5:
                    82:3c:95:f7:35:6e:c0:c2:3f:be:f8:60:c4:47:84:
                    66:4c:dc:9a:6c:71:01:63:7f:89:65:63:d4:a9:5a:
                    b8:c6:f3:28:d8:7d:92:90:5f:96:7a:7b:09:8a:38:
                    c0:59:07:4f:83:77:76:10:94:7e:57:64:f6:57:c1:
                    a5:4d:90:44:36:aa:dc:97:61:4a:21:89:a2:6c:93:
                    b6:ad:cd:ff:83:ea:63:e1:70:c4:84:52:ab:1d:b1:
                    b2:88:3c:ea:2a:31:a3:5d:91:60:5b:cb:2d:f5:29:
                    3f:69:f5:e7:28:3c:fd:6a:5e:e7:9c:d8:ca:3c:17:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:94:04:C8:6B:21:2C:CC:78:8F:A6:EA:5E:85:9E:9D:BA:D2:4A:54
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7130::/47

    Signature Algorithm: sha256WithRSAEncryption
         bc:90:33:9b:62:90:c5:dc:59:1f:6e:fe:55:89:51:9e:d4:fd:
         2a:40:61:35:34:39:6c:35:51:f1:69:0b:3c:bd:9f:d0:0a:10:
         05:00:ee:1c:05:aa:d5:5e:a5:59:3e:23:9f:c7:15:73:f9:fb:
         97:93:fb:ca:6e:1e:ac:80:4d:9e:b9:25:8b:27:a6:98:32:3d:
         6d:fc:49:ae:6c:7a:4b:ee:31:bf:98:b9:09:25:2e:87:86:18:
         fb:e5:06:fc:b8:c3:a5:69:0d:c5:25:e0:d5:8d:b9:31:13:1f:
         f8:94:5c:58:0d:cb:5c:b7:bf:be:d8:0e:f2:8d:8b:bb:dd:07:
         f8:3c:cc:d5:93:0b:86:c3:06:95:40:1c:dd:cf:2b:24:fa:71:
         8f:60:9a:44:34:48:19:d5:0a:93:01:65:1d:ac:08:d7:03:0c:
         fc:d7:1e:30:96:ef:53:8a:70:0a:d3:60:bf:95:de:86:bf:d5:
         b2:99:f4:15:35:5f:b2:d6:1b:e5:5c:eb:d0:f3:49:7d:08:4f:
         92:44:38:fc:8e:10:d6:bd:da:2a:8a:6d:cc:14:0e:c7:e6:c8:
         c7:78:a3:20:9a:76:9e:f0:39:82:bb:23:3a:0b:da:0c:47:47:
         b8:fc:72:87:7d:9c:de:74:6a:5c:ff:36:2a:20:9c:20:b8:a9:
         6d:a4:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:27:53 2025 by rpki-client