Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
File:                     AS200241.roa (raw, json)
Hash identifier:          cuLw1MLL+yZW36BBEoKmr806l1uV0wkHqbFXMKl2T6U=
Subject key identifier:   B9:96:80:F0:AB:44:68:5B:AD:C8:6D:29:EC:3C:2C:E7:F3:C1:6C:95
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       7EBFC7352441D0B6B2740039CC038E1EB97AC3DA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
Signing time:             Thu 18 Sep 2025 08:37:33 +0000
ROA not before:           Thu 18 Sep 2025 08:32:33 +0000
ROA not after:            Thu 17 Sep 2026 08:37:33 +0000
asID:                     200241
IP address blocks:        2a0f:9400:6550::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bf:c7:35:24:41:d0:b6:b2:74:00:39:cc:03:8e:1e:b9:7a:c3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Sep 18 08:32:33 2025 GMT
            Not After : Sep 17 08:37:33 2026 GMT
        Subject: CN=B99680F0AB44685BADC86D29EC3C2CE7F3C16C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:5c:39:7a:a8:99:a1:e7:49:12:f8:47:c2:
                    f2:58:44:84:a7:26:64:d3:54:b2:e0:e6:8c:55:87:
                    b7:9e:7f:9c:1b:91:de:f5:7e:15:a0:19:23:9a:bf:
                    03:f2:31:3b:a9:f2:79:28:c4:42:5a:ad:39:c1:66:
                    ac:41:03:b5:88:4e:47:54:4b:79:d2:a4:fc:c6:e7:
                    9f:7a:e2:5e:ff:fb:25:7a:63:96:1d:31:00:89:a5:
                    c9:ae:15:65:62:f4:58:01:9a:5f:9d:a6:b3:06:65:
                    ea:11:24:e7:fd:77:5d:09:b5:d2:e4:21:76:72:5e:
                    06:c3:6c:06:49:8e:7b:40:9c:bd:fb:1e:0e:60:86:
                    38:9f:55:8a:27:22:db:d6:ee:7a:76:a3:81:63:20:
                    f2:b2:a0:10:96:df:11:88:c9:6c:fb:4e:cc:c6:83:
                    59:93:40:70:8f:30:8b:b6:18:82:78:b6:b8:26:ff:
                    d8:a7:f0:54:e0:36:73:d5:da:3b:94:17:1d:6a:99:
                    87:40:14:5a:ba:7b:d9:3b:32:f3:20:97:b0:f8:b1:
                    54:ec:33:18:a6:17:fe:ce:d2:51:5f:a7:0c:43:43:
                    f6:e5:d5:79:6d:de:7f:1c:9a:fc:f5:cd:d3:e8:48:
                    dd:ba:ce:53:95:1d:1a:10:e1:45:6c:a7:76:90:08:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:96:80:F0:AB:44:68:5B:AD:C8:6D:29:EC:3C:2C:E7:F3:C1:6C:95
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6550::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:09:ee:23:fb:94:31:ce:4f:1e:9a:0c:7a:a0:1f:2f:57:
         59:a9:74:c7:13:9a:ed:5d:fb:dc:75:ff:16:87:6c:9b:70:2b:
         e5:46:42:d6:4b:1e:ac:db:7c:b6:f8:a7:00:8f:36:d2:db:f3:
         ba:51:20:1d:d4:56:85:a0:97:a5:33:8f:3c:40:51:6a:58:14:
         aa:23:a2:24:5b:a3:b7:3d:1d:28:c6:02:3d:ca:38:72:54:c7:
         c8:01:14:e8:f8:ae:ae:fc:02:19:ab:d6:7c:6c:56:87:13:13:
         94:c6:ed:1d:a8:fc:8f:b8:71:70:76:2b:d3:9c:17:4e:6d:f4:
         86:d8:9a:90:08:83:56:f1:20:b4:39:6c:b5:5a:fc:c0:c9:13:
         b9:9c:d1:e9:0e:e2:20:f8:ca:e3:a9:4e:5c:93:a6:55:21:e5:
         c9:6d:e3:dc:6c:f2:78:89:5a:c3:93:5a:ce:e5:d5:29:ad:fb:
         96:76:7e:09:3f:b3:fc:87:75:1f:4c:a4:89:2b:25:a3:e0:22:
         d3:de:97:46:0f:8a:57:e6:f4:1a:73:91:19:a6:7f:26:0c:59:
         fa:07:7a:07:95:fc:36:61:ca:62:fe:6a:44:a7:4b:47:e7:36:
         74:da:5d:de:64:a5:1a:29:bf:7c:b0:f3:c7:9b:4e:35:a9:4f:
         43:d6:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:44 2025 by rpki-client