Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS133504.roa
File:                     AS133504.roa (raw, json)
Hash identifier:          CM/36lWHCxMJxhebUDuOcKo8MaP3zTCPUpDCgMa9aVM=
Subject key identifier:   41:EE:D0:43:06:F9:49:C9:47:75:A5:EA:F8:A9:C0:0E:12:33:81:6F
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       27657B5BD2D724D3CB8850EDA5E1A0E72A382C4A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS133504.roa
Signing time:             Sun 25 May 2025 18:19:11 +0000
ROA not before:           Sun 25 May 2025 18:14:11 +0000
ROA not after:            Sun 24 May 2026 18:19:11 +0000
asID:                     133504
IP address blocks:        2602:fed2:7e83::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 01:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:65:7b:5b:d2:d7:24:d3:cb:88:50:ed:a5:e1:a0:e7:2a:38:2c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May 25 18:14:11 2025 GMT
            Not After : May 24 18:19:11 2026 GMT
        Subject: CN=41EED04306F949C94775A5EAF8A9C00E1233816F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:02:42:d0:f2:87:f3:d1:55:83:bc:bf:4e:
                    14:0b:00:12:4c:f9:1b:f2:5f:ec:b9:e3:c4:06:1d:
                    ce:e3:e1:ac:a3:0e:f4:79:d8:79:67:27:f7:b8:84:
                    88:3c:0f:d8:be:0d:c0:8d:a6:db:c1:db:c9:19:2f:
                    1a:76:7d:10:99:54:28:51:18:7d:13:3a:ab:e3:3d:
                    d5:8d:59:dc:d7:66:da:5a:76:ba:da:99:20:2c:91:
                    b8:98:d2:d3:28:22:f5:2d:59:ec:55:80:99:ad:8e:
                    f2:77:80:ed:ff:75:3a:f4:55:b3:81:ad:21:d5:55:
                    a2:fd:63:64:19:44:e1:ad:28:89:0b:99:63:26:81:
                    24:38:f3:4c:dc:8c:2e:24:a7:8e:6c:97:52:ba:56:
                    4b:27:7a:f4:31:db:21:e1:1e:35:17:f7:75:31:97:
                    a2:f4:a5:c0:eb:fb:b2:38:80:7d:1d:a0:27:87:d0:
                    f9:e8:35:26:33:e4:ba:99:38:5d:ce:56:3e:58:73:
                    a5:ab:c1:fc:64:59:87:2f:1f:28:ef:72:b4:35:17:
                    e7:7f:77:91:f0:53:7c:db:bd:fc:4e:f5:bd:c6:1c:
                    f0:c8:d4:bf:08:55:aa:a8:ef:6c:81:f5:0d:ef:1d:
                    f2:1c:77:e9:3f:38:94:70:e9:c8:81:d0:38:cf:f1:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EE:D0:43:06:F9:49:C9:47:75:A5:EA:F8:A9:C0:0E:12:33:81:6F
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS133504.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7e83::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:39:a7:57:35:18:47:2a:69:81:1f:3b:8b:74:e8:1f:59:69:
         56:92:2e:bd:18:61:c9:a9:dd:11:e6:b4:ff:3b:fd:31:a6:24:
         3e:2e:73:e9:78:92:9c:91:34:d3:04:c4:17:fa:a2:dc:14:aa:
         63:a2:24:94:06:5a:2a:93:8c:b6:43:6a:0b:87:52:7a:73:04:
         3b:3d:e1:a6:23:3c:bd:96:0c:e6:6f:47:3c:bc:eb:da:17:81:
         3c:90:70:f2:f8:ca:f6:ee:e3:83:e7:38:0f:6c:cb:dc:ba:35:
         92:4c:13:7c:b1:50:19:90:25:68:f2:41:c3:11:d0:f6:cc:d2:
         7e:13:3f:49:d9:9a:47:e5:40:de:40:38:1b:69:76:f9:c4:c0:
         e6:8a:45:25:21:72:00:00:35:63:d9:eb:fd:1b:c6:c8:2a:6c:
         66:fb:93:5f:8e:ed:b8:b8:ce:25:9b:91:2e:da:7b:8e:95:1f:
         07:9f:ec:d2:72:b1:a8:a9:f8:49:8f:84:13:4f:7e:c0:45:ea:
         b5:06:ab:27:f1:4e:69:86:82:5e:e7:88:13:94:47:be:ed:8d:
         bc:cd:1b:bc:8d:21:3d:2b:21:e2:9f:fa:53:c8:0b:60:15:f9:
         88:ff:a6:36:b7:90:c9:a9:e9:68:c9:44:3a:40:df:cf:04:eb:
         49:f4:5c:97
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUJ2V7W9LXJNPLiFDtpeGg5yo4LEowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwNTI1MTgxNDExWhcNMjYwNTI0MTgxOTEx
WjAzMTEwLwYDVQQDEyg0MUVFRDA0MzA2Rjk0OUM5NDc3NUE1RUFGOEE5QzAwRTEy
MzM4MTZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2ACQtDyh/PR
VYO8v04UCwASTPkb8l/suePEBh3O4+Gsow70edh5Zyf3uISIPA/Yvg3AjabbwdvJ
GS8adn0QmVQoURh9Ezqr4z3VjVnc12baWna62pkgLJG4mNLTKCL1LVnsVYCZrY7y
d4Dt/3U69FWzga0h1VWi/WNkGUThrSiJC5ljJoEkOPNM3IwuJKeObJdSulZLJ3r0
Mdsh4R41F/d1MZei9KXA6/uyOIB9HaAnh9D56DUmM+S6mThdzlY+WHOlq8H8ZFmH
Lx8o73K0NRfnf3eR8FN82738TvW9xhzwyNS/CFWqqO9sgfUN7x3yHHfpPziUcOnI
gdA4z/FsqwIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFEHu0EMG+UnJR3Wl6vipwA4S
M4FvMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMxMzM1MDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7SfoMwDQYJKoZI
hvcNAQELBQADggEBAAI5p1c1GEcqaYEfO4t06B9ZaVaSLr0YYcmp3RHmtP87/TGm
JD4uc+l4kpyRNNMExBf6otwUqmOiJJQGWiqTjLZDaguHUnpzBDs94aYjPL2WDOZv
Rzy869oXgTyQcPL4yvbu44PnOA9sy9y6NZJME3yxUBmQJWjyQcMR0PbM0n4TP0nZ
mkflQN5AOBtpdvnEwOaKRSUhcgAANWPZ6/0bxsgqbGb7k1+O7bi4ziWbkS7ae46V
Hwef7NJysaip+EmPhBNPfsBF6rUGqyfxTmmGgl7niBOUR77tjbzNG7yNIT0rIeKf
+lPIC2AV+Yj/pja3kMmp6WjJRDpA388E60n0XJc=
-----END CERTIFICATE-----
Generated at Fri Jun 6 15:03:11 2025 by rpki-client