Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49459.roa
File:                     AS49459.roa (raw, json)
Hash identifier:          UOBlJNtKjLBOMFgRusHgBtQ7Ay3hRQfw1i6HM5rZvl4=
Subject key identifier:   F6:36:08:3E:65:66:4D:0D:27:5E:DD:16:F8:3C:CB:32:DA:50:B0:7E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       25DC11EE55069AD9747202E52CC94970BCD7FB1E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49459.roa
Signing time:             Tue 17 Jun 2025 03:15:01 +0000
ROA not before:           Tue 17 Jun 2025 03:10:01 +0000
ROA not after:            Tue 16 Jun 2026 03:15:01 +0000
asID:                     49459
IP address blocks:        2602:fed2:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 05:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:dc:11:ee:55:06:9a:d9:74:72:02:e5:2c:c9:49:70:bc:d7:fb:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 17 03:10:01 2025 GMT
            Not After : Jun 16 03:15:01 2026 GMT
        Subject: CN=F636083E65664D0D275EDD16F83CCB32DA50B07E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b6:2d:13:9f:8f:37:04:77:b7:b3:03:0d:20:
                    82:a5:11:f9:94:5e:d6:33:34:7f:d9:9e:32:ea:67:
                    a3:6c:2d:a9:b6:b0:90:b7:40:48:fa:65:f4:34:45:
                    06:ce:6e:72:85:94:56:e5:55:4a:8c:90:82:cd:b8:
                    2a:71:f3:10:6f:71:e5:e9:ee:52:f7:dd:23:be:b4:
                    05:b2:2d:de:6d:9a:f9:77:ec:23:30:6c:72:87:5c:
                    43:06:5a:c9:7f:71:cf:b4:a1:49:f6:cc:dd:62:c0:
                    e2:a1:dd:ee:9f:fd:62:3a:85:bb:df:9c:b5:a9:1b:
                    8b:52:0b:9b:78:22:b8:bd:8d:ba:17:37:5f:c8:87:
                    7a:71:85:3e:24:a6:2b:4f:ec:28:a3:40:16:71:23:
                    3e:85:80:94:20:ba:60:c4:fc:31:c4:8b:59:9c:58:
                    b8:43:2c:6e:8d:2e:9a:e8:40:bb:31:5e:59:05:58:
                    11:93:eb:d9:aa:c8:f3:c6:e3:de:50:74:89:b9:b6:
                    e4:6c:f2:f2:f4:f4:7a:ee:bb:ae:b8:87:3b:74:ac:
                    c3:1c:07:d6:5c:88:d3:28:79:8b:cf:8f:99:7b:eb:
                    a7:ae:c8:03:73:c2:1d:54:89:3d:8b:01:34:cc:27:
                    62:3a:30:1d:a1:76:14:63:d8:fb:fb:f6:8a:64:79:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:08:3E:65:66:4D:0D:27:5E:DD:16:F8:3C:CB:32:DA:50:B0:7E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:34:93:5a:f0:f1:e1:9f:45:54:fd:3b:68:bb:b3:74:b2:c5:
         80:18:6e:cf:a7:f5:7a:0d:0a:ed:a4:b1:3b:3a:c2:4d:8e:df:
         8a:6d:5e:d8:33:57:32:aa:d8:0b:3f:e0:3a:f6:a8:8f:a5:ae:
         dd:02:2b:9e:c0:37:f9:ba:5f:0c:e1:39:de:37:8a:82:65:3f:
         64:ed:16:b7:72:65:a3:57:5b:ae:ed:df:73:37:04:d2:ac:d6:
         e9:dd:8f:36:fe:33:9f:94:94:4a:03:89:a5:6c:c5:48:75:33:
         82:e0:9b:b5:ba:0a:93:fb:05:84:fb:86:61:62:2a:70:f5:2b:
         45:5d:89:00:16:c5:3e:9b:9f:2d:8f:a7:34:da:8c:24:d4:12:
         da:c8:69:bc:4d:b9:4d:20:47:1d:76:ee:e4:19:30:d6:ed:dc:
         90:59:98:77:58:dd:e3:31:d5:14:56:49:aa:68:84:2d:33:7e:
         c1:49:4a:02:47:a4:be:59:06:81:19:fe:7e:d0:71:3b:b9:67:
         f3:53:a7:84:ef:df:a9:73:f7:6b:51:2c:4f:1c:f3:3c:57:dd:
         cc:4a:d2:22:bf:90:14:c0:58:4d:a7:4a:1e:0b:03:41:4f:4d:
         d5:fa:87:2e:f4:2d:f7:3b:fa:0e:71:6f:c3:7e:8b:b5:dc:fb:
         07:85:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:17:25 2025 by rpki-client