Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34924.roa
File:                     AS34924.roa (raw, json)
Hash identifier:          CrFskI/P+UVlN5PqnDuBLa6b6lEnYirIFuomz9d0A9I=
Subject key identifier:   02:52:EA:6C:80:33:49:97:25:81:56:AF:E7:82:2B:EC:CD:F0:E8:EF
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       75E43CE5B882720B04DEA0227B7F5D290D1A6013
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34924.roa
Signing time:             Tue 17 Jun 2025 03:15:00 +0000
ROA not before:           Tue 17 Jun 2025 03:10:00 +0000
ROA not after:            Tue 16 Jun 2026 03:15:00 +0000
asID:                     34924
IP address blocks:        2602:fed2:770b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 05:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e4:3c:e5:b8:82:72:0b:04:de:a0:22:7b:7f:5d:29:0d:1a:60:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 17 03:10:00 2025 GMT
            Not After : Jun 16 03:15:00 2026 GMT
        Subject: CN=0252EA6C80334997258156AFE7822BECCDF0E8EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:8a:b0:61:5d:49:50:57:4c:f9:e8:ff:fc:
                    c8:1f:12:e3:d0:c1:0c:95:b7:ed:45:d5:59:19:1d:
                    ce:f5:84:dc:5b:df:96:6e:d9:b6:a5:04:41:91:91:
                    a6:e1:61:81:b7:b4:23:a4:cb:d7:2a:8e:da:39:c4:
                    a7:d4:5c:eb:8e:11:cb:ad:88:09:62:e3:13:bd:39:
                    0f:fb:04:f2:35:73:0d:64:56:35:22:32:17:1f:55:
                    c3:24:3f:c7:7e:a5:68:ed:60:ad:55:91:4b:a7:b0:
                    6e:4e:53:52:69:3a:7d:55:86:7e:f1:5a:41:57:f4:
                    c9:0b:2a:9e:c6:24:70:f9:d9:e8:27:47:d2:9f:ff:
                    49:f1:de:1f:b2:a9:ac:2a:e0:43:3f:15:e1:d4:e0:
                    d5:d1:fa:9f:d2:a5:f2:80:47:54:5c:28:2a:c2:e7:
                    fe:87:30:c9:c8:6e:5f:74:6e:aa:72:a8:83:f0:dd:
                    24:d4:09:bf:be:98:96:c2:a6:2b:3d:2d:f5:c7:21:
                    73:95:27:42:c3:9f:89:e2:1c:3b:aa:ca:54:d1:8b:
                    cb:85:3b:16:d6:45:20:2a:3f:c0:9d:29:c9:9b:ea:
                    74:ad:4d:3b:77:19:80:0c:62:89:62:73:82:6e:08:
                    a8:68:12:83:4b:11:d1:f7:9f:37:e3:be:ec:03:d3:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:52:EA:6C:80:33:49:97:25:81:56:AF:E7:82:2B:EC:CD:F0:E8:EF
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34924.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:770b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:7f:93:f9:db:35:05:37:1b:e7:f1:ed:39:b4:ce:dd:33:
         89:72:7d:25:65:58:f1:cc:db:c1:10:fe:dd:4b:32:58:64:22:
         c7:f5:11:7f:6b:13:14:c7:77:d3:aa:47:32:d7:19:89:27:0c:
         31:d4:36:81:fa:04:84:5c:9f:44:f5:2e:3d:9d:d6:4b:b6:f3:
         23:2b:c8:cc:49:4a:aa:cf:64:ad:17:9a:9c:a0:18:a7:23:8d:
         86:59:b0:16:cc:fa:78:75:56:ec:05:9e:25:f2:9f:a1:c3:1a:
         f5:85:53:60:7c:3f:e8:bb:64:bb:4d:19:e3:f2:8f:35:fa:82:
         74:06:b3:99:19:5c:04:44:aa:78:a0:71:51:1e:c0:e8:36:6f:
         4f:b0:60:d2:24:25:36:0a:b3:c7:e7:a8:3c:8d:10:a3:9f:cf:
         78:10:0e:ed:48:d6:a0:a0:60:45:9d:ab:57:c6:c1:89:ee:3a:
         49:be:27:8d:90:f1:4e:57:ec:1c:19:b0:84:b5:0f:90:1f:b3:
         e6:5e:cd:9e:cc:db:cc:21:8a:a8:ff:fc:19:60:2b:1e:c6:f7:
         af:5d:e4:c7:91:a1:df:a6:ee:1e:ec:7b:53:43:0d:e7:c2:d4:
         2f:94:82:84:9a:b2:fa:84:89:74:1c:a7:57:28:9c:02:27:1a:
         d6:ac:66:58
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUdeQ85biCcgsE3qAie39dKQ0aYBMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwNjE3MDMxMDAwWhcNMjYwNjE2MDMxNTAw
WjAzMTEwLwYDVQQDEygwMjUyRUE2QzgwMzM0OTk3MjU4MTU2QUZFNzgyMkJFQ0NE
RjBFOEVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviuKsGFdSVBX
TPno//zIHxLj0MEMlbftRdVZGR3O9YTcW9+Wbtm2pQRBkZGm4WGBt7QjpMvXKo7a
OcSn1FzrjhHLrYgJYuMTvTkP+wTyNXMNZFY1IjIXH1XDJD/HfqVo7WCtVZFLp7Bu
TlNSaTp9VYZ+8VpBV/TJCyqexiRw+dnoJ0fSn/9J8d4fsqmsKuBDPxXh1ODV0fqf
0qXygEdUXCgqwuf+hzDJyG5fdG6qcqiD8N0k1Am/vpiWwqYrPS31xyFzlSdCw5+J
4hw7qspU0YvLhTsW1kUgKj/AnSnJm+p0rU07dxmADGKJYnOCbgioaBKDSxHR9583
477sA9NjQQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFAJS6myAM0mXJYFWr+eCK+zN
8OjvMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzNDkyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJ3CzANBgkqhkiG
9w0BAQsFAAOCAQEASip/k/nbNQU3G+fx7Tm0zt0ziXJ9JWVY8czbwRD+3UsyWGQi
x/URf2sTFMd306pHMtcZiScMMdQ2gfoEhFyfRPUuPZ3WS7bzIyvIzElKqs9krRea
nKAYpyONhlmwFsz6eHVW7AWeJfKfocMa9YVTYHw/6Ltku00Z4/KPNfqCdAazmRlc
BESqeKBxUR7A6DZvT7Bg0iQlNgqzx+eoPI0Qo5/PeBAO7UjWoKBgRZ2rV8bBie46
Sb4njZDxTlfsHBmwhLUPkB+z5l7NnszbzCGKqP/8GWArHsb3r13kx5Gh36buHux7
U0MN58LUL5SChJqy+oSJdBynVyicAica1qxmWA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 18:27:54 2025 by rpki-client