Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34927.roa
File:                     AS34927.roa (raw, json)
Hash identifier:          s1JRhctPPx+EIjcTEhS8jOIAmOGNP2PAWyVxWgtrk4s=
Subject key identifier:   16:61:73:93:BE:A0:77:51:42:26:AA:6B:FF:F6:46:BC:E1:1E:A8:5C
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6E450EFDBE3BA3346B27613BF4C5AD7DB898E721
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34927.roa
Signing time:             Tue 17 Jun 2025 03:15:00 +0000
ROA not before:           Tue 17 Jun 2025 03:10:00 +0000
ROA not after:            Tue 16 Jun 2026 03:15:00 +0000
asID:                     34927
IP address blocks:        2602:fed2:711e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 05:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:45:0e:fd:be:3b:a3:34:6b:27:61:3b:f4:c5:ad:7d:b8:98:e7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 17 03:10:00 2025 GMT
            Not After : Jun 16 03:15:00 2026 GMT
        Subject: CN=16617393BEA077514226AA6BFFF646BCE11EA85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:57:21:c8:39:7e:52:69:3d:56:ec:43:01:
                    de:f3:87:69:a6:ca:d4:ef:80:b4:b3:ba:ae:62:38:
                    22:b0:24:6a:d7:de:9b:f3:3f:70:87:76:95:0b:f1:
                    ff:3c:0c:be:23:ec:a0:5b:bf:76:ac:70:27:e9:6e:
                    65:2b:99:a9:da:db:aa:a8:16:ce:6b:93:4f:44:31:
                    c2:98:6b:0d:a4:9d:5b:bc:98:71:84:4e:68:43:22:
                    c6:67:8a:40:7e:6a:44:ba:a9:05:3d:7c:f0:41:6b:
                    5e:88:45:bc:22:a0:6d:a7:cf:4b:ca:11:d5:55:95:
                    dc:22:ac:f0:eb:90:82:b1:a1:c7:4c:14:e5:69:60:
                    84:2a:e9:e1:58:37:24:04:55:e1:24:c2:61:b3:f3:
                    88:3d:c0:44:2c:96:34:ac:2d:07:18:44:85:e7:d7:
                    29:61:8d:59:7b:47:91:bf:4d:78:77:fd:f1:c6:03:
                    cb:eb:e2:fd:6b:9b:57:a6:54:cc:89:51:36:ae:78:
                    dd:c5:05:b5:e3:14:ff:6e:75:69:27:8c:92:c1:45:
                    87:b1:c7:29:df:7e:ae:09:23:35:c5:7a:97:01:e1:
                    d7:4f:1b:0e:38:06:79:eb:a6:27:93:dc:a3:8c:68:
                    89:47:94:04:47:92:89:b8:61:7c:a4:05:49:a8:43:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:61:73:93:BE:A0:77:51:42:26:AA:6B:FF:F6:46:BC:E1:1E:A8:5C
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34927.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711e::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:45:7c:67:61:11:6c:b0:86:44:44:11:11:77:aa:1c:28:5e:
         10:07:42:fb:46:cd:66:0c:5e:c3:81:1a:52:03:c9:6e:8e:35:
         9a:5f:6e:e9:2d:b5:77:60:d6:4b:38:de:9f:ee:94:af:0d:23:
         07:42:ff:72:c7:5e:ee:54:80:1e:26:db:1c:5a:53:b1:b8:74:
         cf:9c:2a:71:55:0a:16:0c:08:90:bb:9f:df:5e:7f:cf:02:3b:
         c0:ad:d0:29:0d:24:f2:84:50:f3:7a:26:33:5c:04:ad:ed:d2:
         07:0f:3d:60:65:8c:ed:e6:ea:3c:ef:cf:00:37:2c:2c:5a:1a:
         87:e5:dc:c7:89:f8:90:aa:f2:ee:d4:64:f3:1f:d6:3b:0e:e5:
         f8:7f:48:d6:e0:dc:1b:46:92:92:54:c1:54:fb:71:51:70:3c:
         0f:b0:27:15:7e:ae:e0:18:9a:08:fc:74:4c:0c:48:f4:5b:ad:
         45:43:1c:62:1b:f4:4c:e8:fe:dd:cd:0d:86:0a:b2:73:0f:48:
         ea:b8:a9:54:e0:a3:7a:85:6d:d9:78:a4:77:89:c6:26:c7:80:
         67:3a:fc:c5:ff:cc:f3:86:38:14:ec:7a:fc:96:bb:c1:ab:8b:
         4e:fa:03:35:49:f3:10:f3:b6:25:09:25:26:4e:89:f7:58:a6:
         7d:77:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:17:27 2025 by rpki-client