Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          eH7W5GB/PNtOi6pGT8nZWtuo/6ngcp1MZj+WScZKvms=
Subject key identifier:   9A:7A:72:04:E0:FD:09:EF:43:0B:CB:16:B8:28:1B:C9:C3:01:F9:D8
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       376D503D57AA198F3DBA5F277B7B44BD229803A2
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
Signing time:             Thu 21 Aug 2025 17:42:40 +0000
ROA not before:           Thu 21 Aug 2025 17:37:40 +0000
ROA not after:            Thu 20 Aug 2026 17:42:40 +0000
asID:                     33696
IP address blocks:        2602:fed2:7195::/48 maxlen: 48
                          2602:fed2:7307::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6d:50:3d:57:aa:19:8f:3d:ba:5f:27:7b:7b:44:bd:22:98:03:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 21 17:37:40 2025 GMT
            Not After : Aug 20 17:42:40 2026 GMT
        Subject: CN=9A7A7204E0FD09EF430BCB16B8281BC9C301F9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:41:44:17:53:42:4d:ad:cc:f6:da:38:93:
                    ad:63:c0:c3:25:42:13:cf:81:04:29:ec:56:ea:f5:
                    e1:5b:d2:14:a6:c0:25:28:24:67:67:91:47:02:fe:
                    f6:21:09:aa:ec:f5:a2:bd:6c:ec:71:c2:dd:16:be:
                    d2:fc:d7:fd:dd:88:ec:12:6b:b7:53:2a:26:5b:74:
                    15:da:fd:b0:5d:d0:7b:d5:4c:af:6e:ed:98:5d:a9:
                    1a:b0:22:71:7b:8e:1b:1e:f6:0e:33:e5:e5:f7:bd:
                    fa:5c:21:7b:05:c0:9d:79:8d:ff:74:97:92:9f:38:
                    9f:aa:a0:cd:1d:ac:a7:2a:5d:4b:ce:a9:45:9b:be:
                    40:71:39:c1:f0:35:64:9e:c6:ad:95:26:96:39:ca:
                    8e:b7:68:ca:05:c1:f8:18:c2:5a:33:0c:b7:42:a4:
                    8d:a4:2b:9e:5d:78:97:0b:3d:1a:06:d8:54:32:c5:
                    96:1f:60:72:98:bd:91:e8:8c:2b:a4:96:59:29:54:
                    6b:7d:68:ce:06:41:44:4d:7e:09:aa:96:97:0f:f6:
                    b7:85:92:82:78:df:ac:ee:48:72:4e:f0:19:24:1f:
                    55:1e:da:66:33:51:4c:e2:cf:8e:26:16:a2:48:6c:
                    c5:f1:bc:b1:48:b1:a5:28:b9:d4:71:5f:1e:2f:4f:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:72:04:E0:FD:09:EF:43:0B:CB:16:B8:28:1B:C9:C3:01:F9:D8
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7195::/48
                  2602:fed2:7307::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:38:64:b4:ca:4a:c3:bb:cc:98:36:61:cf:62:64:44:a9:84:
         cd:68:c1:16:41:fe:41:6e:b6:6a:bc:83:ac:f9:ec:95:78:e5:
         c3:80:ae:0f:9c:07:10:1e:60:c8:e7:ed:c9:62:99:c2:b9:4d:
         cc:76:6e:d5:64:49:58:0a:c5:74:7b:64:56:ba:3e:d3:8c:79:
         df:72:b2:1c:5d:99:e8:e9:77:63:e0:ca:92:ef:c1:2f:75:73:
         ea:23:e2:dd:29:b5:ee:18:90:8f:93:ab:28:e4:10:97:69:06:
         48:92:70:62:cd:9b:8b:3c:af:f5:41:84:0d:fa:4d:db:7d:5c:
         c4:7f:1f:24:8d:44:ff:f6:a5:67:37:bc:d1:9e:a5:24:e7:5a:
         16:eb:1f:58:a7:2c:39:46:6d:b9:08:ba:f3:5d:a7:63:4b:4b:
         98:ce:56:d5:e5:5f:34:83:25:cc:c9:85:ec:b8:43:49:30:99:
         65:95:eb:71:42:2c:40:58:04:c5:cc:91:06:33:cc:8c:b2:ae:
         59:ab:01:60:ac:36:8a:f3:cf:fc:4f:e7:48:b0:46:1b:79:57:
         f9:ca:d7:74:68:dc:22:74:df:e2:c5:22:92:b4:14:d3:99:fa:
         eb:8b:d3:47:a0:4f:1c:86:83:88:7b:1c:37:1f:dd:bb:18:49:
         50:f2:63:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:18 2025 by rpki-client