Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS6141.roa
File:                     AS6141.roa (raw, json)
Hash identifier:          LbHBvA5rJbH4jSyBhJIoa6IhSNyaW7YMSd3jmQxgvDA=
Subject key identifier:   48:5F:AF:0E:44:4D:07:63:78:50:14:98:EE:31:E6:2F:0B:E1:1F:58
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       2E76414A03730BBFA461B3136B49E9B55BB2D37E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS6141.roa
Signing time:             Mon 05 May 2025 13:57:15 +0000
ROA not before:           Mon 05 May 2025 13:52:15 +0000
ROA not after:            Mon 04 May 2026 13:57:15 +0000
asID:                     6141
IP address blocks:        2602:fed2:7127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 07:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:76:41:4a:03:73:0b:bf:a4:61:b3:13:6b:49:e9:b5:5b:b2:d3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May  5 13:52:15 2025 GMT
            Not After : May  4 13:57:15 2026 GMT
        Subject: CN=485FAF0E444D076378501498EE31E62F0BE11F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:89:7d:ce:d1:d7:a0:7a:a2:cf:0e:b7:68:
                    4b:fb:ca:ee:a9:99:7a:60:57:64:ad:35:38:5e:cd:
                    59:fe:34:d7:19:0f:42:27:cb:fc:7c:e1:75:fd:82:
                    fb:3c:3e:77:28:ee:74:98:c3:97:60:31:c0:89:02:
                    c0:a9:0e:70:48:1c:4a:f3:24:ca:92:a4:1d:51:7a:
                    ea:72:ea:a9:69:fb:c1:1a:4d:a2:ac:68:f3:b1:80:
                    93:e3:fe:76:65:9c:f8:bf:cf:12:fc:e6:80:6e:8c:
                    4e:65:84:77:85:02:55:39:16:5a:0a:70:57:63:6d:
                    62:27:03:c6:77:56:e7:be:da:9e:88:2b:53:96:a8:
                    6f:27:96:e9:00:de:f6:db:a7:fa:27:d4:36:c4:00:
                    70:38:58:0f:71:8b:14:3d:fa:fb:c0:14:7c:24:20:
                    c3:08:51:b8:3d:87:4f:f7:b7:40:ee:0b:57:3c:89:
                    a8:2a:41:aa:24:8c:dd:38:3c:86:1e:19:0b:fc:03:
                    b3:63:ad:21:22:f4:cc:2a:8c:3c:ba:04:c8:31:6d:
                    2c:44:f5:23:ff:d3:0f:58:81:fa:56:2f:b8:55:c9:
                    85:a2:d3:5d:bf:3f:90:49:f4:aa:d3:62:3b:cd:ce:
                    1f:0c:e0:4c:25:87:6e:7f:ba:35:ac:11:32:38:ae:
                    b3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5F:AF:0E:44:4D:07:63:78:50:14:98:EE:31:E6:2F:0B:E1:1F:58
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS6141.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7127::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:cb:19:6e:a0:cc:e7:e7:de:45:2d:a8:e0:9d:7f:12:4f:bb:
         40:ca:fe:56:85:68:8a:f7:0d:3f:5e:70:50:45:37:5b:94:77:
         13:46:89:c5:3b:3d:ec:f5:4b:08:24:cf:57:cd:e3:6f:27:18:
         e1:43:99:a8:d1:82:bc:75:de:73:22:22:06:52:2a:64:20:d6:
         fc:4c:9d:da:0f:c4:e3:28:f2:14:02:65:cd:6d:b1:e8:c0:21:
         1e:4b:2a:50:e4:7b:57:99:45:06:9e:b2:20:a3:da:67:6f:1e:
         f8:3b:f3:9d:c9:55:82:b0:e0:85:89:cf:56:89:9c:3c:d2:03:
         f3:f2:bd:d6:ee:bd:73:09:19:29:94:3e:d5:53:3c:76:de:88:
         ce:13:2f:b2:8e:31:f6:52:e1:04:28:ac:e3:91:4d:87:6d:08:
         62:c5:c3:6b:8d:60:11:07:17:80:27:92:ee:f8:fd:b8:35:b0:
         43:be:28:35:22:88:b8:5d:87:b6:27:08:17:9a:24:3a:89:73:
         ef:76:c7:96:a2:4a:25:4e:04:83:99:a8:e9:50:b7:a1:14:f6:
         90:12:72:94:74:57:67:7d:41:fc:9f:e1:dd:ee:5a:04:76:a3:
         63:7a:a1:99:0d:c7:c4:f5:65:7b:c1:17:36:d5:6f:58:09:3a:
         1a:0a:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:11:51 2025 by rpki-client