Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa
File:                     AS36318.roa (raw, json)
Hash identifier:          a1L0NmL7gbb27AaZ8tNx+jvsi9j2b5zJf2GjmG7etew=
Subject key identifier:   6F:19:9C:5B:FE:A2:2E:83:CB:CC:9B:FB:7B:AF:E4:7E:8B:CD:1A:29
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6B37E7EBFC16BB5AA6332C5FEEB8EA6BA1571CEA
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa
Signing time:             Thu 05 Jun 2025 14:10:07 +0000
ROA not before:           Thu 05 Jun 2025 14:05:07 +0000
ROA not after:            Thu 04 Jun 2026 14:10:07 +0000
asID:                     36318
IP address blocks:        2602:fed2:7085::/48 maxlen: 48
                          2602:fed2:718f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:e7:eb:fc:16:bb:5a:a6:33:2c:5f:ee:b8:ea:6b:a1:57:1c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun  5 14:05:07 2025 GMT
            Not After : Jun  4 14:10:07 2026 GMT
        Subject: CN=6F199C5BFEA22E83CBCC9BFB7BAFE47E8BCD1A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:fd:a0:8d:ca:59:6b:f0:8b:58:c0:38:cd:
                    d4:b6:33:ce:44:8d:bd:5f:27:fa:3e:3d:26:87:ba:
                    97:a5:70:ff:52:59:5d:d2:f9:a5:a8:d5:fa:e2:a8:
                    55:c0:d6:2d:7c:33:8a:19:5e:10:2a:7e:4a:30:f1:
                    1a:4e:47:da:47:6c:06:0a:ca:d8:97:1b:74:63:46:
                    e6:b8:3e:78:1b:76:db:3a:6b:0a:76:a9:e8:6c:64:
                    ad:b3:5e:42:c9:a4:ab:15:f4:c1:4e:87:c5:ec:ce:
                    3a:da:01:66:44:1f:be:8c:ed:87:6f:2a:e8:f1:1f:
                    6e:d0:37:45:30:13:00:93:dc:53:cc:bf:d1:0f:3a:
                    c7:c9:45:75:b0:cd:48:2b:08:3b:d0:2d:e3:84:3c:
                    a0:ab:8f:0e:4c:04:a3:8a:86:09:30:67:87:84:f3:
                    8d:fe:99:9f:ac:6f:be:09:4a:5e:21:8a:95:1d:bf:
                    d2:bb:42:0e:2f:23:30:34:51:48:bf:6f:18:8e:09:
                    74:e5:d7:5b:93:3d:16:8f:9f:17:77:43:3b:91:0e:
                    4a:fa:15:32:fd:cf:06:7d:2a:33:35:04:ad:a0:e3:
                    8e:bf:be:13:db:2e:82:e1:40:e2:ab:11:72:21:2b:
                    58:f5:59:bf:25:bf:1c:ac:48:fe:40:55:b2:44:a6:
                    9d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:19:9C:5B:FE:A2:2E:83:CB:CC:9B:FB:7B:AF:E4:7E:8B:CD:1A:29
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7085::/48
                  2602:fed2:718f::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:e2:2a:6e:60:6f:ca:94:61:12:4f:1d:b8:e0:3c:ee:00:35:
         1e:af:5c:3d:7d:e7:fa:86:d4:36:93:14:92:82:50:03:03:07:
         2a:df:28:9e:cc:4a:c5:60:0b:a6:76:a0:1e:fc:63:e8:7b:90:
         e5:a3:55:73:f9:6f:e0:ec:aa:75:b3:9e:0d:ae:cf:3d:f5:ec:
         16:60:01:06:30:0a:e1:81:03:9a:52:76:d3:76:ac:34:08:13:
         07:67:26:fb:0a:99:ae:be:08:c9:fe:cc:a8:84:69:10:72:de:
         c4:ba:be:f8:26:f1:f9:2d:70:50:14:b1:04:50:b4:d4:57:a1:
         65:dc:68:80:64:55:91:f0:22:d0:01:6b:f9:d3:b3:92:59:e8:
         f7:d2:10:4d:00:d6:a3:c7:7f:70:24:e6:9e:7f:5c:af:cc:62:
         57:6a:2f:8e:f5:66:bc:84:ca:a2:13:58:b2:d7:57:49:5c:87:
         56:e8:26:b1:ba:05:6d:1b:5f:d5:c6:57:98:80:65:73:4d:37:
         7d:34:b0:51:4c:05:1e:df:57:18:1b:56:f8:26:24:fa:6a:cf:
         79:c6:34:f7:b7:67:b7:1c:14:ab:a5:91:12:8f:74:40:59:1e:
         00:bc:f1:70:22:38:ba:b8:3a:16:e5:c8:d3:13:fd:c8:26:e9:
         d9:18:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:00:51 2025 by rpki-client