Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS30455.roa
File:                     AS30455.roa (raw, json)
Hash identifier:          0W0KDiQZ+0cKHUnfu5iE6A9sYBrhZ/vRg0SvW6LjW90=
Subject key identifier:   2D:77:5C:0F:24:F0:27:BF:BA:0C:B4:1A:3E:6D:A6:AA:84:A9:A1:28
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       50D0B4298BCA3E8D6B34ECA00F3AB0D0CEE39822
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS30455.roa
Signing time:             Tue 20 May 2025 15:26:17 +0000
ROA not before:           Tue 20 May 2025 15:21:17 +0000
ROA not after:            Tue 19 May 2026 15:26:17 +0000
asID:                     30455
IP address blocks:        2602:fed2:7194::/48 maxlen: 48
                          2602:fed2:7e82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 05:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d0:b4:29:8b:ca:3e:8d:6b:34:ec:a0:0f:3a:b0:d0:ce:e3:98:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May 20 15:21:17 2025 GMT
            Not After : May 19 15:26:17 2026 GMT
        Subject: CN=2D775C0F24F027BFBA0CB41A3E6DA6AA84A9A128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:9f:3f:96:2b:3e:6b:98:89:5b:6e:09:04:
                    cd:89:00:a6:95:b7:ad:c2:ff:74:e0:10:f8:0d:15:
                    31:7c:9c:0c:fe:f6:86:9d:ce:88:1f:fa:a2:6d:0c:
                    6c:97:3e:ef:b6:6d:8d:9a:d5:89:d8:40:40:32:0a:
                    54:46:77:1c:59:0f:ee:57:fd:58:6f:f0:22:4b:b2:
                    0c:46:c7:66:7f:73:86:5c:29:1c:33:2b:f5:3d:df:
                    5c:b1:11:e4:4d:a6:35:1f:e2:b7:ce:a3:53:de:4e:
                    5f:6e:ad:6e:e5:d0:35:a5:21:55:35:81:fa:70:fc:
                    0e:7d:5d:47:78:e7:ad:bb:d7:8e:57:0b:2d:41:be:
                    58:4f:2a:b2:ef:58:6b:48:70:f3:eb:d1:a2:3e:cf:
                    fb:1b:ce:f3:4b:0c:f7:e0:57:2d:1d:2a:a1:b3:76:
                    67:34:d4:24:00:ae:70:bf:76:2e:b7:53:41:70:df:
                    94:98:48:e2:7a:ba:9e:33:45:4a:8d:4c:d3:9c:5c:
                    be:b4:9e:73:91:16:84:c2:c6:8b:e1:cc:e0:04:cf:
                    da:7e:1c:78:6c:be:a3:6b:d6:6d:5a:51:4a:bb:4c:
                    43:e1:79:6d:78:55:de:89:5e:55:2c:11:f7:64:f9:
                    ae:0a:b4:a7:bb:70:ff:c6:53:42:c8:ef:1d:ae:29:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:5C:0F:24:F0:27:BF:BA:0C:B4:1A:3E:6D:A6:AA:84:A9:A1:28
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS30455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7194::/48
                  2602:fed2:7e82::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:fb:ae:47:05:47:05:97:67:c1:b1:82:94:bd:7f:54:c7:81:
         a8:df:1c:f5:3c:34:22:b6:e8:f6:d1:1f:8b:c6:bf:60:94:90:
         ab:4b:c8:fa:ed:29:cc:e5:61:cf:19:42:a9:dc:34:39:f6:a4:
         95:ff:55:8b:a7:01:2b:88:87:47:1d:63:d8:0b:57:d7:c5:69:
         9b:11:45:e1:b1:c8:3e:59:d2:6e:b9:c6:63:10:33:66:ae:39:
         61:df:39:52:13:32:a9:c6:1d:0d:fd:1e:e8:c9:11:ab:5e:88:
         92:56:ed:1b:c0:6a:43:5a:9f:1f:1e:10:a3:a3:23:08:2b:03:
         31:3c:10:99:b6:4f:40:ce:31:3d:fc:bd:07:f2:6e:82:75:1e:
         0c:9f:0a:d4:48:80:bb:b5:24:78:f9:32:54:3c:d5:c7:69:d0:
         36:55:60:99:2d:fc:65:1b:75:2d:05:c4:59:ed:f4:a3:b5:15:
         b9:e2:f2:49:4f:79:39:c8:6a:9c:ce:d1:fc:03:ec:90:87:d8:
         c5:e9:cf:04:cf:d9:23:bd:8b:20:dd:36:d4:d8:74:06:72:d6:
         dd:72:8e:ad:43:d7:20:e2:a0:fd:76:2e:61:b2:32:66:dc:18:
         23:df:19:f5:64:ac:65:ae:cb:a3:f4:f3:45:d6:c4:d4:ce:98:
         77:36:21:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:47:22 2025 by rpki-client