Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS211864.roa
File:                     AS211864.roa (raw, json)
Hash identifier:          SOEHDj437cvlhsADIq3CjICSjSbAfGGcy9caKVGF/Rk=
Subject key identifier:   BD:44:8A:AB:BE:90:5A:22:F5:53:D3:08:A5:BA:18:BA:05:76:08:A4
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0559AAD8B226D82CD6AFFD9D8D2F001F03164C79
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS211864.roa
Signing time:             Sat 26 Jul 2025 06:31:17 +0000
ROA not before:           Sat 26 Jul 2025 06:26:17 +0000
ROA not after:            Sat 25 Jul 2026 06:31:17 +0000
asID:                     211864
IP address blocks:        2602:fed2:7043::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 09:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:59:aa:d8:b2:26:d8:2c:d6:af:fd:9d:8d:2f:00:1f:03:16:4c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 26 06:26:17 2025 GMT
            Not After : Jul 25 06:31:17 2026 GMT
        Subject: CN=BD448AABBE905A22F553D308A5BA18BA057608A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:1e:b2:39:eb:ab:5e:8a:b3:d6:6a:84:7b:
                    9d:7e:fd:31:23:9e:00:1e:73:a4:71:b9:7f:bc:d5:
                    74:e9:a5:0b:94:3b:35:65:9a:02:47:0d:22:1d:bd:
                    eb:85:db:df:d6:69:97:1d:92:94:d3:64:9d:4e:3c:
                    d7:39:be:ad:2a:5f:85:2b:a2:5e:84:10:a1:42:6c:
                    e7:8f:8a:0b:9c:d5:01:43:f3:36:ab:51:e0:93:96:
                    d9:0d:03:25:3a:3b:0b:ad:5e:50:c6:dc:31:94:f3:
                    17:4e:fb:ab:a2:5c:2b:98:08:be:91:d4:0b:11:de:
                    d7:38:e2:91:67:74:d5:63:f3:15:a4:0b:78:c0:01:
                    d1:9e:37:ac:d0:ba:8e:a1:fd:29:8b:3b:e0:f0:00:
                    f7:85:9d:2e:2a:2b:a9:39:d5:fc:f6:db:4e:af:17:
                    3b:9b:ae:85:b2:c3:c5:95:ff:02:77:44:cf:42:56:
                    d0:13:84:26:42:76:c0:0b:8e:3b:98:f4:19:57:a4:
                    ca:f1:a4:4f:b8:49:f3:8f:8d:8b:a6:9c:e8:53:b5:
                    5d:61:00:35:20:5b:45:5b:58:22:ca:6f:63:54:1d:
                    05:17:03:5f:dd:31:1b:ec:20:ff:42:89:ca:78:0b:
                    cd:d8:89:e1:54:75:81:42:06:58:fb:a6:d5:b2:8a:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:44:8A:AB:BE:90:5A:22:F5:53:D3:08:A5:BA:18:BA:05:76:08:A4
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS211864.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7043::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:87:4f:34:18:c4:5d:e0:60:df:85:67:d5:f9:21:08:14:00:
         b5:b7:f1:82:42:1b:65:da:09:bc:fd:5d:3b:af:cf:d5:ff:39:
         b0:89:3b:57:49:95:28:2c:e5:f9:6b:0b:91:4d:b0:0f:bc:bf:
         58:4c:6e:28:7a:bb:e7:7d:23:e3:8a:1b:f3:9f:01:ad:ef:e3:
         9b:bb:20:65:25:87:99:c1:c3:ea:d4:c7:d0:09:2d:af:df:3d:
         d9:5a:0d:6b:9b:89:22:af:d1:d1:6d:66:3a:10:de:de:a1:e7:
         cb:c6:b7:46:0e:5f:75:ab:61:22:66:fa:fb:9c:9f:2d:d8:1f:
         31:65:bb:19:61:ec:12:9d:0a:76:42:4a:5b:e8:6f:13:31:67:
         be:f2:7a:d8:69:67:5b:fe:e9:d9:b7:be:9d:e6:18:a6:9a:99:
         2a:2a:79:79:b6:39:98:2c:6f:67:49:a8:77:00:f4:54:85:d6:
         2d:87:28:6e:18:d9:4b:1f:b7:81:0b:4f:f0:60:2a:e3:d7:ba:
         1b:41:cc:0f:43:16:03:e5:7b:6c:b6:11:bf:7c:e6:8d:22:7f:
         05:f1:b3:4c:a0:7a:6d:36:8b:7d:fb:7e:ba:ce:33:d2:89:d4:
         1b:cc:f6:2c:38:43:13:d0:df:e3:3d:c3:a1:18:6e:3e:d0:15:
         85:1d:30:d9
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUBVmq2LIm2CzWr/2djS8AHwMWTHkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwNzI2MDYyNjE3WhcNMjYwNzI1MDYzMTE3
WjAzMTEwLwYDVQQDEyhCRDQ0OEFBQkJFOTA1QTIyRjU1M0QzMDhBNUJBMThCQTA1
NzYwOEE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJwesjnrq16K
s9ZqhHudfv0xI54AHnOkcbl/vNV06aULlDs1ZZoCRw0iHb3rhdvf1mmXHZKU02Sd
TjzXOb6tKl+FK6JehBChQmznj4oLnNUBQ/M2q1Hgk5bZDQMlOjsLrV5QxtwxlPMX
TvurolwrmAi+kdQLEd7XOOKRZ3TVY/MVpAt4wAHRnjes0LqOof0pizvg8AD3hZ0u
KiupOdX89ttOrxc7m66FssPFlf8Cd0TPQlbQE4QmQnbAC447mPQZV6TK8aRPuEnz
j42LppzoU7VdYQA1IFtFW1giym9jVB0FFwNf3TEb7CD/QonKeAvN2InhVHWBQgZY
+6bVsooF3QIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFL1Eiqu+kFoi9VPTCKW6GLoF
dgikMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMTE4NjQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScEMwDQYJKoZI
hvcNAQELBQADggEBAHuHTzQYxF3gYN+FZ9X5IQgUALW38YJCG2XaCbz9XTuvz9X/
ObCJO1dJlSgs5flrC5FNsA+8v1hMbih6u+d9I+OKG/OfAa3v45u7IGUlh5nBw+rU
x9AJLa/fPdlaDWubiSKv0dFtZjoQ3t6h58vGt0YOX3WrYSJm+vucny3YHzFluxlh
7BKdCnZCSlvobxMxZ77yethpZ1v+6dm3vp3mGKaamSoqeXm2OZgsb2dJqHcA9FSF
1i2HKG4Y2Usft4ELT/BgKuPXuhtBzA9DFgPle2y2Eb985o0ifwXxs0ygem02i337
frrOM9KJ1BvM9iw4QxPQ3+M9w6EYbj7QFYUdMNk=
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:17 2025 by rpki-client