Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400307.roa
File:                     AS400307.roa (raw, json)
Hash identifier:          Fc0+zJTZGl3F0wvDN7VhxzgbIsfB0170QWHhTRULkk4=
Subject key identifier:   33:9F:4F:BC:5C:03:4D:4B:08:36:BD:01:A3:7E:93:56:79:B6:44:3A
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       7EB3EC91385772AA94A3E6E7196B8A8561E25102
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400307.roa
Signing time:             Tue 17 Jun 2025 03:15:00 +0000
ROA not before:           Tue 17 Jun 2025 03:10:00 +0000
ROA not after:            Tue 16 Jun 2026 03:15:00 +0000
asID:                     400307
IP address blocks:        2602:fed2:7183::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 05:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b3:ec:91:38:57:72:aa:94:a3:e6:e7:19:6b:8a:85:61:e2:51:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 17 03:10:00 2025 GMT
            Not After : Jun 16 03:15:00 2026 GMT
        Subject: CN=339F4FBC5C034D4B0836BD01A37E935679B6443A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:06:da:f7:4c:d0:43:d1:9d:7d:e0:de:86:1f:
                    83:5e:7c:13:62:91:ad:2e:cb:3b:1f:65:f4:82:9d:
                    ef:f0:ad:b0:e3:55:d8:e9:67:a5:8a:d9:42:52:72:
                    96:cd:c3:1c:30:92:48:fb:18:72:82:6a:e7:41:2d:
                    c0:d2:8b:fe:6b:9f:2b:e2:eb:45:51:ce:70:0d:7f:
                    39:e9:86:9b:46:f5:fc:48:2f:b6:21:fc:9c:d1:a0:
                    cf:0b:bb:d1:d2:1f:87:4a:01:52:e3:13:78:36:4a:
                    54:f7:f1:2e:9f:3a:12:f9:90:5e:44:46:15:e8:c4:
                    22:e1:3d:13:9b:53:0f:7f:8f:7f:05:f0:b0:08:af:
                    30:86:8c:28:18:aa:55:c2:7c:7a:b5:77:bb:95:04:
                    0b:42:1d:4b:07:1a:12:8f:13:d5:98:65:8b:7e:6a:
                    b0:24:8a:a0:01:ea:3f:09:ac:d0:e1:69:d1:43:eb:
                    c2:e9:af:5a:d8:c3:30:d6:1a:90:20:a9:24:1f:cf:
                    67:ce:fa:d2:33:1c:23:a4:f1:dd:b9:f0:d5:af:a1:
                    21:0c:fb:92:f5:97:26:26:ab:f3:69:60:9e:79:1e:
                    0c:13:0e:4d:2a:26:fa:d8:2e:a5:3c:2a:a1:25:a0:
                    37:1e:02:14:e5:c8:9f:44:ae:5e:47:c6:02:d3:d3:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:4F:BC:5C:03:4D:4B:08:36:BD:01:A3:7E:93:56:79:B6:44:3A
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400307.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7183::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:7e:1c:c3:dd:7d:f6:8f:6b:35:1f:e1:ef:4a:82:d1:35:df:
         24:3c:e2:cc:50:2b:f3:b1:d2:f1:5e:91:76:1e:b7:12:48:2c:
         e5:f0:3e:25:0f:d7:11:41:60:ce:94:33:32:93:82:be:2b:d4:
         f4:50:87:3d:5c:4f:49:e4:77:78:67:15:80:c6:f5:97:59:7a:
         70:7a:a8:57:b8:df:22:72:0a:1c:fd:e6:03:ce:ef:c8:da:20:
         e8:28:b8:fa:bc:4e:56:30:0f:a0:23:e1:b7:44:a2:b2:37:17:
         e4:bb:ec:da:fd:c1:f5:89:db:d2:e8:ff:a5:a7:32:3c:1a:f3:
         7c:5e:36:7c:08:3f:b6:3a:46:11:68:cd:62:52:b7:b8:67:85:
         b4:07:b8:2e:14:40:15:10:b4:10:62:b0:f2:1c:31:a6:c8:8e:
         1b:d3:28:7f:59:68:bd:72:90:76:1f:fa:af:70:21:0a:21:ce:
         ca:6d:28:93:1f:ec:10:97:7e:a2:8e:dd:1e:8c:90:ab:da:33:
         51:a8:1d:56:15:96:d5:a7:7d:7f:e3:b7:8a:6c:69:1f:70:2a:
         d3:2c:26:bb:e9:0f:98:b9:28:24:22:30:0f:fa:bd:53:ca:eb:
         21:22:55:fb:ac:44:3e:93:89:b1:74:15:f1:d6:44:e6:34:09:
         ad:3e:f9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:56:22 2025 by rpki-client