Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS401575.roa
File:                     AS401575.roa (raw, json)
Hash identifier:          u8UqOZitvWcxsyZZv6XPsBB/E8zecF/CbjyPSpAsQMQ=
Subject key identifier:   F0:F8:EC:1E:A5:D7:60:6E:BA:B8:CA:2D:A8:FE:D3:5B:75:60:75:70
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       63C0F7548A25D28748AD1EE01BD65C164B356BA6
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS401575.roa
Signing time:             Wed 27 Aug 2025 04:25:42 +0000
ROA not before:           Wed 27 Aug 2025 04:20:42 +0000
ROA not after:            Wed 26 Aug 2026 04:25:42 +0000
asID:                     401575
IP address blocks:        2602:fed2:7106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c0:f7:54:8a:25:d2:87:48:ad:1e:e0:1b:d6:5c:16:4b:35:6b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 27 04:20:42 2025 GMT
            Not After : Aug 26 04:25:42 2026 GMT
        Subject: CN=F0F8EC1EA5D7606EBAB8CA2DA8FED35B75607570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:a8:a4:9b:fb:7a:15:ec:89:e6:c7:b0:fd:
                    27:bc:50:26:68:c6:78:e1:38:b1:59:f6:84:81:fc:
                    f2:ca:22:4a:95:46:b3:f6:e5:b1:17:6d:92:65:43:
                    a3:bc:4e:ac:eb:1c:e9:c6:dd:37:3b:29:44:8c:d5:
                    b2:2d:d8:1f:0e:14:bd:b9:89:69:82:d8:d0:58:64:
                    e9:66:91:01:35:1c:c3:cc:75:71:b5:8a:87:5d:2d:
                    06:1f:5a:60:2c:85:d5:0d:52:20:22:00:71:cf:76:
                    52:c3:d1:1e:64:ae:11:84:aa:af:2a:ce:98:ec:e5:
                    af:14:a7:a9:53:56:8e:b0:97:a2:d5:24:e6:d7:75:
                    3a:41:39:35:6f:a9:21:f2:88:81:85:7d:4b:1f:20:
                    c9:8b:d6:c8:d5:2d:b8:29:2b:57:b1:f2:dc:5f:5d:
                    64:3d:a3:88:24:92:a6:58:72:fb:24:c3:9b:76:2c:
                    dc:4f:00:e4:8d:91:52:ae:e6:20:90:1b:ed:72:e6:
                    37:08:18:4c:94:b3:10:a2:43:76:28:3f:82:bc:7d:
                    37:95:8f:69:93:53:33:e6:87:68:53:c6:e9:86:98:
                    cf:8f:f7:3a:8c:cf:1e:ad:23:60:20:79:35:9d:e0:
                    4b:2a:69:45:31:bf:61:6f:d0:e9:3e:5c:df:88:c5:
                    f5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:EC:1E:A5:D7:60:6E:BA:B8:CA:2D:A8:FE:D3:5B:75:60:75:70
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS401575.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7106::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:d1:a8:28:7d:09:f4:26:64:b2:23:50:a1:cc:7d:c9:1d:02:
         af:62:47:86:b1:8e:28:e4:95:37:0c:cd:7f:70:d4:24:ac:25:
         f6:13:27:58:7f:a5:b6:d0:09:8a:39:22:ae:e2:59:8a:e7:8a:
         59:74:74:16:00:ef:f2:7c:bb:a4:c7:52:5a:fd:9b:61:82:54:
         c0:99:11:8a:66:9a:00:96:ff:af:aa:f3:62:79:33:2d:65:af:
         6b:65:da:6d:9d:b5:24:d6:aa:0b:6a:40:09:50:47:04:b4:a0:
         5d:c5:27:6a:c4:e3:c9:9a:52:5b:b0:13:59:e8:d3:bc:8f:2b:
         3c:19:e9:6c:84:7b:90:dd:64:2e:c9:73:d4:66:05:b3:7b:c4:
         83:58:55:7b:15:6e:c3:08:4d:fe:32:00:c2:aa:99:75:fe:c8:
         86:58:3d:8c:7a:f7:46:8a:4e:19:ed:d3:91:08:65:78:c5:d7:
         ec:ff:58:01:83:59:69:9c:80:3a:7d:d8:e5:b1:d0:9f:8c:ee:
         61:dd:1b:b0:1b:77:20:ed:ce:a6:50:7b:80:3e:73:5d:75:de:
         45:80:80:33:15:27:db:a9:97:3e:5c:d9:bd:40:59:79:2b:37:
         da:13:1c:25:a8:0e:ff:89:1f:1d:aa:35:fe:9f:39:0d:4f:24:
         d7:1d:ed:10
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUY8D3VIol0odIrR7gG9ZcFks1a6YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwODI3MDQyMDQyWhcNMjYwODI2MDQyNTQy
WjAzMTEwLwYDVQQDEyhGMEY4RUMxRUE1RDc2MDZFQkFCOENBMkRBOEZFRDM1Qjc1
NjA3NTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBiopJv7ehXs
iebHsP0nvFAmaMZ44TixWfaEgfzyyiJKlUaz9uWxF22SZUOjvE6s6xzpxt03OylE
jNWyLdgfDhS9uYlpgtjQWGTpZpEBNRzDzHVxtYqHXS0GH1pgLIXVDVIgIgBxz3ZS
w9EeZK4RhKqvKs6Y7OWvFKepU1aOsJei1STm13U6QTk1b6kh8oiBhX1LHyDJi9bI
1S24KStXsfLcX11kPaOIJJKmWHL7JMObdizcTwDkjZFSruYgkBvtcuY3CBhMlLMQ
okN2KD+CvH03lY9pk1Mz5odoU8bphpjPj/c6jM8erSNgIHk1neBLKmlFMb9hb9Dp
PlzfiMX1RwIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFPD47B6l12BuurjKLaj+01t1
YHVwMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVM0MDE1NzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScQYwDQYJKoZI
hvcNAQELBQADggEBAJ3RqCh9CfQmZLIjUKHMfckdAq9iR4axjijklTcMzX9w1CSs
JfYTJ1h/pbbQCYo5Iq7iWYrnill0dBYA7/J8u6THUlr9m2GCVMCZEYpmmgCW/6+q
82J5My1lr2tl2m2dtSTWqgtqQAlQRwS0oF3FJ2rE48maUluwE1no07yPKzwZ6WyE
e5DdZC7Jc9RmBbN7xINYVXsVbsMITf4yAMKqmXX+yIZYPYx690aKThnt05EIZXjF
1+z/WAGDWWmcgDp92OWx0J+M7mHdG7AbdyDtzqZQe4A+c1113kWAgDMVJ9uplz5c
2b1AWXkrN9oTHCWoDv+JHx2qNf6fOQ1PJNcd7RA=
-----END CERTIFICATE-----
Generated at Sat Sep 6 15:25:38 2025 by rpki-client