Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS47553.roa
File:                     AS47553.roa (raw, json)
Hash identifier:          A5jArATyT8YLrq86RkHaTnhYRm9/zNprGZxpJspvptA=
Subject key identifier:   EB:57:09:4D:1B:0A:4D:73:F9:32:97:6E:C4:A9:F8:15:BC:88:D9:53
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       253D8719896ED112B786C84F152D107FB7C0A692
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS47553.roa
Signing time:             Mon 21 Jul 2025 23:51:50 +0000
ROA not before:           Mon 21 Jul 2025 23:46:50 +0000
ROA not after:            Mon 20 Jul 2026 23:51:50 +0000
asID:                     47553
IP address blocks:        2602:fed2:7303::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 07:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3d:87:19:89:6e:d1:12:b7:86:c8:4f:15:2d:10:7f:b7:c0:a6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 21 23:46:50 2025 GMT
            Not After : Jul 20 23:51:50 2026 GMT
        Subject: CN=EB57094D1B0A4D73F932976EC4A9F815BC88D953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1b:ce:3d:62:06:76:06:9f:93:eb:87:c0:5e:
                    60:2c:03:f4:3d:f7:f5:ac:32:06:7d:4a:40:1b:ac:
                    a6:9d:c2:67:79:6c:66:43:e5:7c:e4:3d:47:ea:d4:
                    37:4d:b5:35:5a:52:ab:20:aa:0d:27:a9:b9:8e:fd:
                    78:d0:ef:14:1a:90:5a:4d:02:15:35:12:3d:f3:68:
                    c1:7b:38:63:61:fb:b9:87:47:2d:45:6d:5e:02:e3:
                    13:97:54:5e:16:fb:46:84:3c:d7:2c:fb:e7:ce:9f:
                    0a:95:37:0c:50:0d:3e:5c:f0:fb:f2:e3:4f:d9:b3:
                    cd:a2:72:9f:ad:71:1b:92:1d:92:80:fa:43:eb:c0:
                    0a:ea:46:20:95:37:f5:91:44:51:0e:5c:f7:5f:d0:
                    0b:d6:64:26:5d:ef:e8:bd:91:2b:57:99:05:cb:a8:
                    88:7e:06:dd:0d:12:93:38:b4:d7:62:d0:29:c1:63:
                    2f:98:3d:e9:4c:1b:3e:f2:31:da:14:ce:de:aa:b5:
                    e5:ca:19:4e:d4:05:cb:83:47:97:c8:ad:21:7d:44:
                    f6:f8:2b:0f:a0:db:ec:04:fb:60:63:16:b3:37:fe:
                    21:a2:51:fa:c6:64:70:95:20:f7:57:e9:98:c6:06:
                    fd:1d:e7:8b:6d:46:5e:6a:7d:d1:1a:78:d8:d0:89:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:57:09:4D:1B:0A:4D:73:F9:32:97:6E:C4:A9:F8:15:BC:88:D9:53
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS47553.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7303::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:32:60:d0:54:05:87:51:38:7e:d4:c9:91:e5:45:f5:e2:
         50:bb:79:0d:a8:8b:fb:f6:23:33:0b:80:95:bf:df:32:b9:23:
         04:3f:7f:6a:15:d3:bd:41:d9:2a:f4:a4:05:5b:17:b0:fe:c1:
         f6:6f:c1:1e:25:ba:77:47:ee:21:3d:ca:a0:22:53:01:2b:e5:
         b2:6d:6a:01:23:cd:44:7b:ec:1c:b2:c8:ad:3d:91:a6:86:4e:
         bd:45:cc:fa:88:2e:74:00:c2:0f:9d:22:c5:81:db:e7:0c:8f:
         dc:e9:47:af:85:3e:1c:69:23:81:18:74:23:bd:e8:7d:89:61:
         ff:14:7f:b1:99:0b:4a:bf:92:4b:77:3f:e9:c0:1d:c6:b8:8a:
         57:09:f4:9a:5d:4f:01:5d:c8:14:fe:73:58:38:0e:d1:de:55:
         0b:43:a8:61:1e:cb:f7:51:fd:c0:ee:44:16:b6:f9:b3:8e:94:
         5f:10:40:22:9c:28:37:cd:c0:9a:61:06:75:02:92:41:c9:d1:
         a9:d2:a3:15:60:ee:d2:bf:33:5d:d4:7b:bb:82:da:c5:2e:fb:
         13:a1:39:be:4f:cf:73:7b:23:88:c8:4c:6e:4e:44:f9:fb:99:
         40:53:d6:2e:0a:a1:04:67:06:fd:46:d7:f6:40:5e:06:5e:45:
         3d:96:be:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:23:11 2025 by rpki-client