Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS401575.roa
File:                     AS401575.roa (raw, json)
Hash identifier:          eIwPH+RFQkm+UH3SpKoHRV9OAmlJflo3DJJtWrUL/m0=
Subject key identifier:   A6:41:34:AE:7B:41:61:9A:47:72:0E:43:0E:89:89:45:51:D8:31:57
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       314F27AEF8CB01E509FC2702EA7A43AE706404B9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS401575.roa
Signing time:             Tue 11 Feb 2025 14:03:26 +0000
ROA not before:           Tue 11 Feb 2025 13:58:26 +0000
ROA not after:            Tue 10 Feb 2026 14:03:26 +0000
asID:                     401575
IP address blocks:        2602:fed2:7106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Mar 2025 07:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:27:ae:f8:cb:01:e5:09:fc:27:02:ea:7a:43:ae:70:64:04:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Feb 11 13:58:26 2025 GMT
            Not After : Feb 10 14:03:26 2026 GMT
        Subject: CN=A64134AE7B41619A47720E430E89894551D83157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b9:96:f1:1c:1a:62:6d:06:5b:68:b2:b9:6b:
                    49:ef:36:f1:e8:12:aa:76:e7:0d:30:48:c7:27:9a:
                    b3:9e:1d:42:aa:06:cb:5b:96:87:94:02:b0:51:76:
                    5e:5b:9e:1a:97:5f:c8:ff:67:5d:7e:9e:ff:41:8a:
                    44:39:79:43:cf:7d:e5:96:de:e2:43:f7:2e:fd:ea:
                    27:8b:b2:7b:1d:d6:dd:7f:1c:6f:c8:8d:5c:3f:51:
                    4c:99:bc:18:1e:85:35:ae:0e:c2:21:7b:d6:d6:74:
                    72:0e:b6:2e:49:f9:40:3a:79:f4:30:f2:4e:9e:f6:
                    c8:b9:da:bf:86:30:da:12:0e:e9:38:3a:c6:6c:89:
                    8a:3b:1a:f7:a4:e8:cb:3f:8c:cf:1c:76:3d:91:2d:
                    dd:d6:6d:38:34:79:9e:39:75:6c:f5:cf:3e:fa:90:
                    aa:4a:d2:22:10:c5:2c:c5:2f:72:01:f8:f2:ce:28:
                    51:63:1d:0a:92:b8:ee:e8:fd:45:f4:21:6e:9d:a5:
                    4e:0d:bb:ff:53:2f:47:90:5b:a4:2d:a7:38:0d:6d:
                    04:a1:2c:3a:df:f8:a6:38:77:c7:49:49:35:92:04:
                    dc:ae:72:83:69:97:53:b4:f1:5c:19:4d:74:fa:ad:
                    f0:a8:28:74:a5:9a:88:81:2d:fe:49:0f:7b:ff:82:
                    5d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:41:34:AE:7B:41:61:9A:47:72:0E:43:0E:89:89:45:51:D8:31:57
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS401575.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7106::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:da:45:b4:c2:87:ea:3d:80:07:28:19:98:9e:d9:37:f1:5f:
         72:82:92:38:85:90:d7:b8:93:92:49:f3:3f:57:00:45:5d:2d:
         17:29:e0:ac:19:ce:03:6a:45:ac:55:c9:f6:1f:a7:c4:90:ed:
         e3:7c:71:06:cf:29:fd:e7:be:43:3d:1f:d1:6e:cf:6f:60:12:
         bf:91:b2:27:3a:05:43:e9:bf:1c:09:b8:12:79:b1:57:d7:eb:
         db:91:59:49:03:eb:4b:4d:68:a3:80:f0:86:f1:9c:a2:59:11:
         06:7b:e9:40:d0:fe:3c:2d:ec:30:1a:80:19:77:fb:e8:44:8b:
         cb:26:a9:f3:80:7a:e1:b1:bb:28:f4:3e:77:ba:16:c1:54:10:
         f3:41:50:d2:f3:f7:0e:7c:fa:d0:83:cc:2f:03:f1:45:7d:66:
         e4:4d:be:bd:fe:b2:8f:51:20:f9:c6:5d:42:91:7e:70:eb:b6:
         74:13:3b:a6:de:2c:d5:9b:e5:35:cc:96:9c:64:c6:83:cf:6d:
         75:cd:45:fb:03:22:b1:9e:bb:1b:ce:ed:2c:f8:2d:c9:d0:1e:
         eb:41:79:e6:67:00:dc:77:a4:4f:7c:44:d8:e3:66:87:6f:f8:
         52:3e:ad:c5:1c:ec:65:e3:60:f7:69:43:8d:a6:c3:59:09:70:
         94:a6:b4:fc
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUMU8nrvjLAeUJ/CcC6npDrnBkBLkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwMjExMTM1ODI2WhcNMjYwMjEwMTQwMzI2
WjAzMTEwLwYDVQQDEyhBNjQxMzRBRTdCNDE2MTlBNDc3MjBFNDMwRTg5ODk0NTUx
RDgzMTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bmW8RwaYm0G
W2iyuWtJ7zbx6BKqducNMEjHJ5qznh1CqgbLW5aHlAKwUXZeW54al1/I/2ddfp7/
QYpEOXlDz33llt7iQ/cu/eoni7J7HdbdfxxvyI1cP1FMmbwYHoU1rg7CIXvW1nRy
DrYuSflAOnn0MPJOnvbIudq/hjDaEg7pODrGbImKOxr3pOjLP4zPHHY9kS3d1m04
NHmeOXVs9c8++pCqStIiEMUsxS9yAfjyzihRYx0Kkrju6P1F9CFunaVODbv/Uy9H
kFukLac4DW0EoSw63/imOHfHSUk1kgTcrnKDaZdTtPFcGU10+q3wqCh0pZqIgS3+
SQ97/4JdjQIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFKZBNK57QWGaR3IOQw6JiUVR
2DFXMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVM0MDE1NzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScQYwDQYJKoZI
hvcNAQELBQADggEBAC7aRbTCh+o9gAcoGZie2TfxX3KCkjiFkNe4k5JJ8z9XAEVd
LRcp4KwZzgNqRaxVyfYfp8SQ7eN8cQbPKf3nvkM9H9Fuz29gEr+Rsic6BUPpvxwJ
uBJ5sVfX69uRWUkD60tNaKOA8IbxnKJZEQZ76UDQ/jwt7DAagBl3++hEi8smqfOA
euGxuyj0Pne6FsFUEPNBUNLz9w58+tCDzC8D8UV9ZuRNvr3+so9RIPnGXUKRfnDr
tnQTO6beLNWb5TXMlpxkxoPPbXXNRfsDIrGeuxvO7Sz4LcnQHutBeeZnANx3pE98
RNjjZodv+FI+rcUc7GXjYPdpQ42mw1kJcJSmtPw=
-----END CERTIFICATE-----
Generated at Wed Mar 12 19:54:47 2025 by rpki-client