Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS210215.roa
File:                     AS210215.roa (raw, json)
Hash identifier:          FpGjydvRmbvivxb2ScVql21tIkYyfJLYec39SbUeFLg=
Subject key identifier:   2C:78:ED:E6:47:DB:B2:12:69:2B:5F:0C:AD:4C:72:10:29:C8:10:5B
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       29DFE94B360F8F670938CCF5A127802331090A8D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS210215.roa
Signing time:             Wed 02 Jul 2025 17:31:31 +0000
ROA not before:           Wed 02 Jul 2025 17:26:31 +0000
ROA not after:            Wed 01 Jul 2026 17:31:31 +0000
asID:                     210215
IP address blocks:        2602:fed2:7e0b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 14:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:df:e9:4b:36:0f:8f:67:09:38:cc:f5:a1:27:80:23:31:09:0a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul  2 17:26:31 2025 GMT
            Not After : Jul  1 17:31:31 2026 GMT
        Subject: CN=2C78EDE647DBB212692B5F0CAD4C721029C8105B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:dc:b1:5e:0e:e0:5b:77:65:75:a8:65:0f:
                    fb:d3:77:78:42:58:98:84:e6:85:d5:2e:a8:30:fc:
                    5e:89:8a:b4:d1:fa:1b:a6:93:7b:7b:ef:b3:7d:a8:
                    af:69:f7:dd:ef:35:1b:75:d6:bc:fb:04:5c:d4:54:
                    a0:e8:0e:c8:75:af:58:d4:92:b0:6b:07:0d:a1:21:
                    37:0e:8c:02:b9:2e:e5:a1:18:4c:85:8b:53:14:d7:
                    2b:6b:90:0c:ea:a7:b7:77:d5:0c:b1:d7:01:5c:85:
                    ea:25:75:47:8f:89:a3:23:37:15:e4:a6:a6:5c:64:
                    44:94:18:d8:13:47:3e:77:cc:37:1a:21:7c:fe:56:
                    ac:a1:b9:9b:e8:ff:7a:b6:cb:fc:df:e0:b0:16:24:
                    12:39:bc:34:97:c0:36:e5:05:c1:98:4f:bf:63:cb:
                    83:28:81:9a:a5:65:ba:d7:10:99:ba:39:ac:c5:8f:
                    e5:1a:55:b4:8c:3a:75:45:21:c2:bc:46:c1:12:f7:
                    13:a6:8e:5c:2a:42:23:67:4e:5c:bf:4f:41:2e:48:
                    b6:08:5b:c8:5f:e8:99:3d:e9:cd:ef:48:d7:5a:4c:
                    4f:d8:ef:b6:3f:3f:66:e5:ab:26:16:a2:fa:e5:9b:
                    dc:41:6d:41:ed:16:14:81:71:95:7f:70:f4:d9:01:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:ED:E6:47:DB:B2:12:69:2B:5F:0C:AD:4C:72:10:29:C8:10:5B
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS210215.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7e0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:cd:d1:d3:c5:8f:bd:fc:8f:ea:0a:7f:d0:2e:bf:33:45:28:
         b8:13:b7:71:1b:08:f1:e6:8d:58:79:cf:9c:2a:60:ec:ba:8b:
         90:df:2e:bf:40:4c:ba:c3:d9:22:53:42:cd:00:2e:ba:0c:75:
         18:f9:f9:56:82:63:e2:a9:12:3d:79:d9:f0:b2:dc:c3:09:90:
         d9:df:d0:3f:51:bc:ba:18:93:a5:28:44:dd:0c:eb:a0:f5:f6:
         b9:ef:c2:4b:97:b0:de:bb:6d:5b:72:8e:b7:30:14:be:ca:1c:
         f1:04:5a:7b:2f:85:fb:97:78:30:71:2e:2f:f5:79:a9:25:e7:
         0e:d2:5d:44:6c:65:ce:92:23:6c:4b:13:ec:46:32:1c:30:83:
         c3:e0:a1:2f:3a:09:49:86:5e:a5:9a:fc:a1:5c:a4:ef:76:c3:
         b0:a3:4f:6d:eb:a7:f0:da:54:01:71:48:5e:33:e1:c0:9e:b0:
         92:87:63:49:b6:3c:cd:42:ab:53:12:99:a9:c7:55:69:7d:43:
         7c:e5:95:94:c7:e5:15:84:a9:07:ef:d5:6d:95:80:b2:65:76:
         7d:94:24:2a:df:ec:21:a5:ac:76:80:17:7e:eb:a7:1f:c0:f9:
         5e:37:e4:87:ef:b3:18:c4:6a:48:42:92:8c:58:ae:df:f4:33:
         a0:0d:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:04:33 2025 by rpki-client