Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS213550.roa
File:                     AS213550.roa (raw, json)
Hash identifier:          KLzlgiqESj5f1ral/723v0m+XpUTrd7Zbq0FwyBnUv4=
Subject key identifier:   61:39:1C:65:71:E3:31:76:3A:E5:53:15:F7:5D:04:6A:A5:3B:9A:E1
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3C73AD94B9F67B9D8FF64E9C5C35DB43E46BA523
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS213550.roa
Signing time:             Thu 13 Feb 2025 00:53:48 +0000
ROA not before:           Thu 13 Feb 2025 00:48:48 +0000
ROA not after:            Thu 12 Feb 2026 00:53:48 +0000
asID:                     213550
IP address blocks:        2602:fed2:7000::/44 maxlen: 48
                          2602:fed2:7004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Mar 2025 07:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:73:ad:94:b9:f6:7b:9d:8f:f6:4e:9c:5c:35:db:43:e4:6b:a5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Feb 13 00:48:48 2025 GMT
            Not After : Feb 12 00:53:48 2026 GMT
        Subject: CN=61391C6571E331763AE55315F75D046AA53B9AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:71:9a:2c:68:9b:17:57:69:f2:f1:0e:81:
                    37:7d:67:99:14:90:7b:24:d4:3d:e4:e9:c1:45:52:
                    0e:f1:39:0b:2a:0a:e8:1c:c8:93:ce:a2:4b:94:64:
                    d2:ba:64:7c:0b:79:c3:b3:66:67:53:73:c2:de:2f:
                    8e:d5:f3:54:cf:d4:74:0b:9a:7f:f2:33:b7:90:2b:
                    3a:10:fd:f7:61:87:61:02:41:98:d2:2f:e3:fa:2b:
                    3b:8e:11:67:51:88:de:30:5c:cc:e4:1f:53:f4:b3:
                    1f:7c:2c:e1:f7:72:70:00:33:8c:3d:9c:02:f2:e1:
                    09:f2:50:a3:8d:88:5f:b6:d9:cc:37:0f:f5:d7:33:
                    79:a5:c5:e6:f1:5d:47:d0:6f:0c:56:a9:a1:bd:85:
                    79:83:5a:18:05:d7:57:3b:b2:91:c4:e3:d2:f2:df:
                    4b:2b:63:36:d3:a2:3a:96:e5:4e:41:34:8a:f6:9f:
                    37:c0:13:2d:77:aa:68:ff:f1:f9:1c:d8:cd:cd:3c:
                    70:9e:cd:b4:ad:8b:6a:7c:d6:86:ca:27:25:d0:81:
                    62:ba:18:de:b6:a0:fc:26:3d:79:f9:37:af:50:77:
                    a6:1a:73:67:27:42:c1:0b:a9:22:5f:cc:80:11:d8:
                    6d:a2:35:9d:dc:28:fe:7a:15:ee:58:47:35:b0:e4:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:39:1C:65:71:E3:31:76:3A:E5:53:15:F7:5D:04:6A:A5:3B:9A:E1
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS213550.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:da:f9:31:dc:fd:57:ef:d1:bc:7f:5b:ab:05:e1:6c:96:74:
         9a:51:af:0a:54:04:9e:7c:0c:49:88:74:ef:bc:95:76:9d:79:
         cb:53:a7:53:f8:db:52:ed:1c:2b:b2:e8:e7:48:6a:dd:11:c7:
         62:c8:46:81:af:3c:08:d7:ad:55:70:47:0d:b3:ee:d3:a4:26:
         bb:c4:a4:2b:48:e6:81:16:24:b7:85:6e:c7:a2:30:b7:f2:4b:
         28:16:55:5a:7b:50:55:06:e6:c4:3c:9c:6f:7f:f7:c6:2f:1c:
         e8:ce:40:21:db:bc:6e:4e:8f:a2:51:eb:3a:29:e8:a1:d5:15:
         aa:37:2c:1d:e2:7e:78:6b:81:37:cf:e7:4d:d6:b0:3e:66:df:
         cd:bc:d4:cf:c1:fa:d0:50:80:fe:15:bd:26:7a:01:ec:9b:98:
         29:38:d4:24:8f:f2:55:b0:1e:e3:41:ad:22:e2:d7:59:1e:66:
         ff:1a:f5:1d:6e:eb:35:57:08:4e:a3:da:05:dd:09:0f:24:50:
         bb:c8:68:d6:c9:27:74:14:d5:8a:08:fd:7a:d6:dc:a9:c0:0d:
         e6:a6:23:4c:69:b0:65:9d:da:43:e1:55:1c:88:fd:ef:2d:e1:
         d7:fd:3a:ab:b7:08:db:6b:dc:6a:f3:d1:31:14:f9:64:ee:fc:
         90:05:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 19:59:05 2025 by rpki-client