Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34872.roa
File:                     AS34872.roa (raw, json)
Hash identifier:          XrUkSaewRovKDis2F17bXTH5oTUQ+Ujdf9BJJ3jTrAM=
Subject key identifier:   8F:46:95:B2:85:CB:4E:34:7B:43:76:5B:50:6D:95:35:FD:A5:2E:AB
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1EBEF58F941C8F0D542140AFC6103EB42F7792FD
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34872.roa
Signing time:             Wed 15 Jan 2025 20:02:05 +0000
ROA not before:           Wed 15 Jan 2025 19:57:05 +0000
ROA not after:            Wed 14 Jan 2026 20:02:05 +0000
asID:                     34872
IP address blocks:        2602:fed2:7004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Mar 2025 07:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:be:f5:8f:94:1c:8f:0d:54:21:40:af:c6:10:3e:b4:2f:77:92:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 15 19:57:05 2025 GMT
            Not After : Jan 14 20:02:05 2026 GMT
        Subject: CN=8F4695B285CB4E347B43765B506D9535FDA52EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:8f:38:08:ad:45:88:a7:6f:d7:b3:c9:d2:
                    9c:0d:10:d7:d6:35:dd:92:85:3c:d7:6b:35:e1:e4:
                    fd:02:bc:54:90:5d:2c:30:10:e3:0c:8c:4e:da:9e:
                    a4:d7:8b:85:2b:70:b4:20:76:36:9a:a8:b0:11:f7:
                    56:ad:a1:a1:5f:24:4d:2d:5b:2a:1d:46:73:b5:9b:
                    85:b2:43:8d:a3:8a:96:b0:fd:70:22:48:4c:1b:3b:
                    2e:7f:90:08:98:13:d5:19:ae:23:8c:41:85:27:19:
                    ff:36:e8:6c:97:a5:58:5d:ad:fb:13:84:43:23:e1:
                    4f:2c:d6:44:16:ed:d6:7b:2a:2b:08:e4:3b:d8:07:
                    b7:a8:7b:de:57:73:b7:f9:a9:57:0b:e4:04:0c:e3:
                    bc:7d:07:25:04:e2:d9:0e:07:87:93:8d:f8:6b:42:
                    87:92:89:80:30:8e:3e:b4:f5:c7:17:8f:aa:87:d2:
                    71:50:d1:fd:39:fc:75:76:0f:20:b3:e1:9e:6f:9f:
                    03:99:51:3c:d9:d1:f5:a5:3b:8d:91:8d:11:a7:1f:
                    ff:bf:d3:e6:26:3f:76:dc:b3:2b:03:b4:10:2a:4e:
                    94:cb:d4:b4:5b:e7:34:5d:a8:ce:3e:d0:6a:99:11:
                    f5:06:1a:4e:70:cf:84:92:05:e6:66:2d:77:0f:9e:
                    2d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:46:95:B2:85:CB:4E:34:7B:43:76:5B:50:6D:95:35:FD:A5:2E:AB
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS34872.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7004::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:cc:86:2f:1e:be:4c:a1:15:0e:d7:64:c1:45:30:c5:57:
         b0:36:c6:75:cc:20:7e:db:e6:4d:35:fc:d6:64:03:40:ae:01:
         75:44:6e:55:73:e5:5e:b5:51:7f:8d:32:36:0d:d6:d1:cd:b5:
         9b:a2:be:ff:f7:b2:d1:f8:d7:fa:dc:51:72:93:f0:07:91:38:
         cb:ce:62:21:26:98:a4:d4:d5:3b:2c:c9:2a:52:45:21:9b:d0:
         b6:76:16:26:bb:1d:cf:27:b8:eb:5a:f9:27:94:f7:65:60:ba:
         54:b2:f9:58:fb:34:b1:19:50:0a:60:ca:18:e3:5d:a7:f6:8a:
         e4:61:42:93:b2:e4:cd:f5:68:cf:55:f1:a6:50:2b:fa:dd:00:
         d2:11:cc:95:fc:f2:bd:58:f0:8f:d8:c6:03:01:32:e7:62:e6:
         3f:ab:7b:fb:90:aa:8d:dd:20:9b:0f:60:f4:23:83:32:bb:08:
         00:7b:55:9f:ef:0f:30:c8:f9:c2:61:24:b5:24:42:1e:15:93:
         ce:40:2b:5b:fb:b9:39:55:4f:5d:8d:f5:a1:0b:62:e5:b1:52:
         6d:47:3a:7e:98:00:38:41:9c:01:24:60:f0:61:9c:38:bd:97:
         7d:47:98:57:9b:ce:6e:42:d5:67:6b:b8:18:32:ba:8d:82:62:
         bf:bc:43:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 20:08:30 2025 by rpki-client